Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/wQuk9uFJ0SkIQWVKCCsdmry_bdA.roa
File: wQuk9uFJ0SkIQWVKCCsdmry_bdA.roa (raw, json)
Hash identifier: Ja4EOwo2UjKhTtN2qFrRg4e5sqYWU3VT1jaSt80MLRM=
Subject key identifier: C1:0B:A4:F6:E1:49:D1:29:08:41:65:4A:08:2B:1D:9A:BC:BF:6D:D0
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 0194244560E8762827FBA15718145131D0DD
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/wQuk9uFJ0SkIQWVKCCsdmry_bdA.roa
Signing time: Wed 01 Jan 2025 23:48:34 +0000
ROA not before: Wed 01 Jan 2025 23:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 65593
IP address blocks: 84.44.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:60:e8:76:28:27:fb:a1:57:18:14:51:31:d0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 23:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c10ba4f6e149d1290841654a082b1d9abcbf6dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:82:a9:be:3d:94:d0:36:7e:4b:f5:a0:86:
c0:43:0a:96:fd:2f:f7:ee:3f:e9:b2:8a:40:18:43:
79:f4:ad:8a:f8:15:3f:d6:37:1c:c2:ec:8b:37:64:
9d:59:04:e2:1b:79:8c:81:68:dc:af:d3:0d:5f:0e:
4d:fb:75:28:55:f7:a3:62:c3:1a:d4:40:2e:fd:aa:
00:6d:44:3c:a7:75:5c:07:ea:09:62:ef:bf:be:5a:
26:b8:ac:64:8d:c0:13:72:7e:60:d0:96:af:91:af:
c5:a4:1f:1e:19:69:c3:e0:f6:83:c1:b0:06:d5:ca:
9f:b0:fe:fe:38:75:4e:ea:73:a2:2d:37:a6:9d:ea:
55:73:b1:77:eb:1a:85:95:54:c0:2d:d8:77:7d:2e:
b9:27:26:77:a4:b4:2b:86:de:4e:cd:79:31:a0:aa:
f9:79:9a:df:5d:dc:99:4d:f8:c7:16:12:bb:54:04:
a0:58:d0:94:22:3d:af:30:4f:df:2e:8b:e7:b3:a0:
0c:d7:b0:65:60:59:28:f2:cb:fa:d6:56:7d:36:44:
3a:8b:e3:11:f3:90:45:9d:8d:03:96:66:62:86:0b:
33:76:c9:c2:e6:68:e9:6d:56:0b:db:48:2a:94:05:
92:e4:0f:6f:b9:63:87:f8:6f:74:41:7f:61:73:28:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0B:A4:F6:E1:49:D1:29:08:41:65:4A:08:2B:1D:9A:BC:BF:6D:D0
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/wQuk9uFJ0SkIQWVKCCsdmry_bdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.44.80.0/24
Signature Algorithm: sha256WithRSAEncryption
43:af:19:77:94:c4:09:24:3d:f4:55:10:d4:e4:e3:9c:fc:87:
fa:b4:0e:d2:7f:34:ab:84:08:f5:59:35:71:4d:28:7f:52:43:
81:0c:34:b7:21:1c:5a:f9:f4:97:38:89:37:fc:37:6c:4c:3e:
16:a1:21:76:99:c4:02:22:72:fe:46:82:4c:f6:45:3a:3d:6e:
f1:dd:c3:0a:81:77:d7:97:c2:17:ac:be:bf:01:65:b5:d0:a9:
de:2d:be:9d:7d:a6:a9:71:e5:d7:a6:7c:05:f3:23:ef:b5:22:
83:7c:bc:22:34:62:02:a3:02:d8:63:d0:47:18:bf:86:20:ec:
a0:0a:09:bf:ea:b7:91:9e:bf:02:bb:b5:51:d0:ec:5b:0b:69:
c6:c4:82:80:a1:5e:b1:f1:bc:9d:53:96:29:b4:c0:a3:9c:20:
1f:0b:e5:40:fe:09:6c:b3:89:56:39:06:fa:a3:bd:07:07:93:
62:b9:76:12:e1:7d:30:df:e1:78:de:1b:a1:08:73:cb:89:2a:
4c:51:23:19:8a:a4:4e:19:79:de:74:2e:a3:ca:a0:74:a3:c6:
1a:62:bd:6e:11:5b:c1:d8:c7:9f:bf:13:1c:b7:9e:e0:ab:9b:
6e:25:5b:12:e7:b9:1d:f5:5b:ad:ee:79:53:78:5e:6f:a5:02:
46:a9:03:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:43:00 2025 by rpki-client