Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa
File: 1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa (raw, json)
Hash identifier: TEwUAYBqywOE+CrQSa2/94fxmftWbXC3tqwYRSHTWvM=
Subject key identifier: F8:81:06:7D:A9:D6:D5:E0:E0:E2:17:B2:FE:61:43:E7:D8:D0:E1:3C
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 019424B3CE5BA59F40818A9D3614089EDD64
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41637
IP address blocks: 194.50.113.0/24 maxlen: 24
2001:4d8f::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ce:5b:a5:9f:40:81:8a:9d:36:14:08:9e:dd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f881067da9d6d5e0e0e217b2fe6143e7d8d0e13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:89:ac:c7:cc:52:e4:b1:66:a6:3f:bc:37:dd:
7f:e9:b1:18:10:89:e1:83:2b:88:d7:fa:49:03:fd:
ec:22:13:b8:9d:81:80:e0:72:8b:3d:1a:1c:dd:6e:
92:a3:50:2a:3f:a5:15:7e:24:9d:db:c7:ad:37:5c:
d6:4a:51:25:2f:de:19:1e:25:10:d2:1b:10:f3:61:
a1:e1:46:0c:b3:c2:fb:d3:4e:7d:07:d2:38:6f:fe:
b5:31:7a:2f:d0:7b:63:1c:4d:68:de:8b:ed:d7:c3:
da:ce:18:6b:2c:be:df:cc:4b:a7:4b:5f:fd:57:4e:
01:94:04:13:af:a7:47:12:2e:ce:50:bc:56:69:a4:
00:48:16:45:7c:5f:68:98:7e:2e:da:cd:72:c1:42:
64:51:5a:6c:3c:d9:7e:b2:22:6f:89:11:d9:58:27:
ed:8a:6f:a9:a5:99:8f:00:81:e6:ff:1d:a0:14:77:
dc:c3:e0:43:b4:1d:be:7b:36:fc:14:4c:a4:ef:09:
aa:b5:93:85:b0:80:43:af:55:06:71:48:bb:95:0c:
7f:4c:81:2d:e3:e7:cd:8e:5d:fc:c9:5a:1b:6d:e1:
7c:1b:d4:e9:89:a8:b2:c7:77:ec:e8:88:81:00:73:
30:b0:64:b9:0d:81:71:cd:02:f5:4c:84:3a:84:5a:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:81:06:7D:A9:D6:D5:E0:E0:E2:17:B2:FE:61:43:E7:D8:D0:E1:3C
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/1-IEGfanW1eDg4hey_mFD59jQ4Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.113.0/24
IPv6:
2001:4d8f::/32
Signature Algorithm: sha256WithRSAEncryption
50:fe:d5:d7:24:88:02:a2:c0:5f:e1:c8:e8:d1:0f:f0:d2:0a:
87:6e:c4:68:c6:ae:3e:92:fc:32:10:df:2f:f2:83:38:ad:4e:
9d:83:e7:d2:c3:00:b9:46:78:7c:ba:d2:e6:2b:1d:36:dc:48:
5c:6b:08:cd:44:fc:f4:88:a9:72:f1:a7:ff:72:16:55:35:18:
4b:ee:25:19:d0:88:23:d3:40:08:e4:af:a8:64:fb:3c:ec:d4:
33:c3:c0:e5:68:6c:48:54:66:c9:1e:f7:ba:87:ad:3d:34:1d:
33:a6:85:9d:fa:f0:0b:6f:6f:c9:1e:99:20:1f:ee:49:49:9b:
ba:8a:11:2f:36:ce:0e:b5:19:a4:f9:88:ef:ea:c7:70:54:d7:
8f:b8:fa:63:90:33:f2:73:bd:2f:d2:52:e5:40:98:b6:c1:58:
18:e4:63:ad:60:dd:a8:ef:0f:f8:17:c7:37:fc:df:a9:23:f3:
0f:c8:fe:86:73:9c:d2:a5:c7:67:68:21:61:fb:ac:3d:87:d0:
24:9e:ee:aa:26:2d:6a:a9:25:33:8b:c8:a2:7a:4d:89:b2:1d:
db:38:20:4a:e2:cc:d7:82:5f:fd:75:01:2c:d6:73:07:88:6c:
fd:8e:4c:d2:76:53:99:74:4c:75:e4:84:90:2a:a7:35:42:55:
38:b0:39:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:36:15 2025 by rpki-client