Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/cFEMcTrZnpJM6OI3sLSildoG7_o.roa
File: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (raw, json)
Hash identifier: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=
Subject key identifier: 70:51:0C:71:3A:D9:9E:92:4C:E8:E2:37:B0:B4:A2:95:DA:06:EF:FA
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 019423D700FA58D386B68D2D2AE5F55F3FCF
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/cFEMcTrZnpJM6OI3sLSildoG7_o.roa
Signing time: Wed 01 Jan 2025 21:48:00 +0000
ROA not before: Wed 01 Jan 2025 21:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198024
IP address blocks: 185.124.88.0/22 maxlen: 22
2a05:b080::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:00:fa:58:d3:86:b6:8d:2d:2a:e5:f5:5f:3f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: Jan 1 21:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70510c713ad99e924ce8e237b0b4a295da06effa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:aa:de:dd:28:39:77:45:b6:cc:63:de:03:ed:
95:de:29:8a:20:48:d0:04:a1:9a:3d:2e:41:ad:76:
3a:45:01:f0:14:d1:eb:bd:df:d8:45:c7:72:e1:6d:
37:6c:ff:12:d4:09:00:46:52:e2:6f:76:ca:c8:dd:
86:72:bc:d8:ec:2d:69:89:4f:5c:b2:9e:2c:24:a3:
75:83:2a:61:c8:21:4d:4e:d6:5e:01:fa:34:43:eb:
f5:11:04:59:55:1c:96:7c:65:11:6a:81:58:c3:40:
bc:d3:93:aa:9f:22:e8:7d:99:6d:22:aa:7d:5c:86:
c4:89:b9:41:e4:39:66:86:ae:cc:ad:d5:0b:9f:20:
e8:cb:7d:98:1a:06:4e:7e:86:91:4c:74:a7:b4:9a:
f4:5c:a0:d6:68:e0:d2:0b:cc:8a:c9:16:bb:73:bb:
b9:60:01:da:92:3a:57:2a:bb:49:2c:c7:f9:e9:44:
e4:f2:9b:68:de:d0:24:75:41:05:1f:5e:d4:d3:b6:
5e:4e:45:91:5d:02:cd:37:fe:8d:4b:e7:87:54:9b:
b6:ea:94:ab:70:31:59:87:2c:55:de:a6:0d:da:6e:
28:c9:e9:2f:2a:bd:00:21:f3:54:eb:e3:85:bf:c4:
d9:59:10:fb:bb:9f:3a:66:55:df:08:04:36:ee:8e:
55:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:0C:71:3A:D9:9E:92:4C:E8:E2:37:B0:B4:A2:95:DA:06:EF:FA
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/cFEMcTrZnpJM6OI3sLSildoG7_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.88.0/22
IPv6:
2a05:b080::/29
Signature Algorithm: sha256WithRSAEncryption
bf:9f:e9:b3:2a:de:d7:81:67:98:a2:2c:dd:1d:bb:90:78:1a:
f1:93:71:e4:ea:de:d8:62:d2:fa:66:4c:fd:af:19:c7:39:b9:
36:bb:52:5a:6e:5b:77:88:60:dc:0b:0a:e2:67:39:38:f7:af:
96:26:58:61:dc:e4:7c:46:a2:ff:4a:30:63:2d:6a:83:29:9b:
ee:aa:cf:6b:87:67:ef:5c:6d:f9:7c:d6:78:82:c6:61:83:24:
98:e0:d9:dd:74:50:11:e4:37:51:4e:d7:5a:a0:09:7b:90:9f:
5c:d3:a1:e5:62:1a:41:21:c0:18:d6:c4:48:1e:db:83:b4:3f:
6e:a5:dd:b1:ab:2b:e3:46:2b:4b:39:89:d1:6b:8b:9d:c7:0f:
d8:3f:f1:6a:7f:a3:cf:7b:ee:55:05:91:b8:49:1f:e8:09:06:
f3:b1:60:85:40:8b:18:2a:2b:52:24:fc:2e:ce:da:1a:00:e9:
fb:cd:17:cf:f7:5c:a4:7d:25:f1:76:1b:08:6f:3b:09:fd:3d:
90:c8:f3:81:ff:fa:87:48:1c:16:24:c4:87:71:2d:b2:b5:ce:
5f:a7:58:ab:c6:c0:b9:23:22:9e:21:84:06:17:a3:4e:e4:76:
2e:e1:95:7a:80:8c:47:9c:a4:cc:49:5a:87:f9:52:8f:00:98:
ad:24:a4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:35:23 2025 by rpki-client