Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/CFPX1ri2j5dVasAGgzMnoT-cOt4.roa
File: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (raw, json)
Hash identifier: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=
Subject key identifier: 08:53:D7:D6:B8:B6:8F:97:55:6A:C0:06:83:33:27:A1:3F:9C:3A:DE
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0194221FA4B60161273FD1AF0033C135AFBD
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/CFPX1ri2j5dVasAGgzMnoT-cOt4.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34549
IP address blocks: 194.50.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a4:b6:01:61:27:3f:d1:af:00:33:c1:35:af:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0853d7d6b8b68f97556ac006833327a13f9c3ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:18:07:6b:ac:60:e6:ed:8f:19:5c:68:5c:33:
79:f6:85:24:bb:b4:a3:39:d1:3d:29:38:98:70:5c:
c0:c5:af:78:8c:fd:7a:25:f5:99:32:c2:0f:fb:98:
9e:7e:28:3d:89:01:d4:1c:66:6d:18:1c:e3:14:aa:
93:dc:84:0f:5c:b0:d2:66:2d:ce:44:1d:92:70:c1:
6d:72:74:38:b0:6c:cf:bd:48:36:36:5e:cc:62:a7:
c8:f6:b6:c4:ee:a3:83:31:3a:af:94:45:58:c1:f8:
c6:62:d0:ab:f1:bb:ec:ba:76:af:e0:3d:8c:1e:b8:
91:ec:30:98:b1:4c:14:58:a4:2d:69:1b:7e:01:31:
d5:c0:0b:87:b5:7f:98:85:a4:3d:6b:17:13:79:d8:
ec:74:69:59:23:9b:63:31:ed:68:58:bf:47:0d:5c:
21:71:e7:9a:0b:e4:75:c4:f7:7a:2c:a9:9e:ba:30:
47:93:11:21:15:8f:48:62:a4:47:1f:04:5f:19:ed:
dc:87:43:1e:27:04:42:06:1e:6a:0a:04:25:67:94:
30:26:d2:4d:37:49:e0:0d:22:94:36:26:18:d6:fb:
ea:cd:7c:c6:e8:f1:db:5f:a4:32:3a:4e:05:36:6e:
c3:79:a2:a9:44:72:b1:fb:18:09:7f:b4:7c:01:c4:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:53:D7:D6:B8:B6:8F:97:55:6A:C0:06:83:33:27:A1:3F:9C:3A:DE
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/CFPX1ri2j5dVasAGgzMnoT-cOt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.52.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0f:c5:42:8a:57:c2:b8:6f:76:48:25:9a:42:a3:2d:e8:e3:
14:a5:7b:07:17:aa:8d:79:e0:f1:d7:61:93:3d:5b:35:7d:7c:
06:a0:80:18:d9:85:8b:e5:46:83:f7:2c:c2:e8:6d:d5:d2:f3:
6e:ba:ff:33:9c:0b:39:21:82:59:60:44:d0:91:ad:44:0a:23:
90:fb:9a:c8:68:13:ce:93:cf:99:c3:17:73:85:d3:ec:dc:d4:
08:d3:35:cc:a6:f8:39:48:a0:16:a6:9a:01:ab:63:13:57:c4:
29:13:0f:6d:e0:e6:5f:81:e1:38:88:8d:ac:47:05:ca:a4:28:
cd:07:df:3f:df:10:b7:1f:fd:94:21:4f:89:8d:53:7d:b7:bf:
f6:f9:26:00:8e:0a:a0:af:eb:14:46:b8:5d:e5:f2:ae:d6:2f:
75:35:cc:59:c4:46:ec:aa:57:28:b7:61:21:d8:c2:43:1e:4e:
2f:eb:e5:27:ee:d5:10:fe:1c:45:e7:ab:4f:99:18:ef:1a:7e:
48:98:af:02:dd:ee:3b:32:5c:81:cb:b7:b1:5a:0c:48:6a:a1:
7b:ea:30:44:eb:62:85:af:13:47:d6:c4:fa:63:f7:9f:97:02:
8f:2e:2e:be:45:9b:08:36:4d:d4:de:5d:80:dd:13:f9:e9:25:
98:fa:24:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:47 2025 by rpki-client