Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6KdFMEQZXEr5MuJl1NDZf6NvVuk.roa
File: 6KdFMEQZXEr5MuJl1NDZf6NvVuk.roa (raw, json)
Hash identifier: nzo0pPS+8kZIn/NJSyAE14FfqHYmXj8f7n9973GbE0U=
Subject key identifier: E8:A7:45:30:44:19:5C:4A:F9:32:E2:65:D4:D0:D9:7F:A3:6F:56:E9
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2F00DAAF276CC23C4F1A190844C8C
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6KdFMEQZXEr5MuJl1NDZf6NvVuk.roa
Signing time: Thu 02 Jan 2025 01:48:14 +0000
ROA not before: Thu 02 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44242
IP address blocks: 159.148.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:f0:0d:aa:f2:76:cc:23:c4:f1:a1:90:84:4c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8a7453044195c4af932e265d4d0d97fa36f56e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:36:53:e7:9b:28:76:8b:82:dd:23:77:9f:
23:92:9b:16:8e:0c:e1:79:cc:6f:51:62:3c:40:1f:
c8:ab:4d:76:ba:39:dc:5a:22:40:f2:e2:5d:c0:d0:
04:3a:88:5d:3c:f6:6c:8c:b3:9f:f5:d2:02:ed:ac:
8b:9d:0c:df:4f:d7:8b:6a:41:56:41:a8:bc:cb:cc:
9b:b5:ee:db:a8:e7:bf:10:34:16:c4:19:9f:ea:04:
71:27:fa:95:96:57:0b:44:e5:4b:d6:0e:a2:6e:79:
8a:88:2a:04:f2:03:19:bd:2d:66:d4:b3:1b:8d:cc:
8e:d2:39:94:b5:99:1a:d1:41:26:5c:ae:37:26:71:
34:41:28:f8:07:02:d1:7b:9b:c3:4c:1b:2a:e4:7b:
9f:a3:35:c0:9e:cf:1c:34:8b:22:2e:a6:72:1e:de:
7b:74:84:ae:26:b7:52:5c:74:bf:b8:6e:a4:7e:2d:
6e:64:e4:de:73:58:11:f5:c9:5c:8c:d6:9f:68:df:
7e:a8:43:ab:b2:ac:bb:3b:e2:a7:d5:ef:d3:23:50:
aa:01:9a:cb:5b:87:e5:3b:4c:b7:07:85:0e:ab:36:
74:35:9a:25:e1:18:05:07:f4:db:d3:e9:b4:00:b0:
54:34:ae:16:f1:69:8a:8f:b6:ee:a4:85:9b:77:73:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A7:45:30:44:19:5C:4A:F9:32:E2:65:D4:D0:D9:7F:A3:6F:56:E9
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/6KdFMEQZXEr5MuJl1NDZf6NvVuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.30.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:a6:92:3e:4c:2b:78:a7:85:56:0b:a6:25:c0:e1:a9:99:b8:
3d:51:82:19:ef:44:41:ea:6f:a3:8f:ea:d1:3d:7b:31:6d:11:
f1:60:10:39:91:c2:fc:cc:84:a1:16:64:fc:1b:b7:54:ab:65:
c8:7f:a0:b3:e9:2f:45:7f:51:58:f1:64:f2:c3:08:f5:5a:52:
6e:e4:ae:75:e8:71:87:f9:2c:47:33:ae:26:f3:82:1e:cd:1c:
7e:c4:10:25:c0:d1:89:61:bb:c1:9a:89:e7:36:81:8b:0f:5a:
c5:16:9f:04:0d:5a:28:f9:56:e9:2a:13:2b:0e:f1:cb:09:32:
65:0f:aa:54:02:bb:9d:23:b4:f8:f3:01:d3:68:d9:82:24:fb:
b8:74:87:b1:8e:6d:bf:8c:2c:10:ca:26:7b:e6:1e:dd:a6:56:
1d:15:af:3c:eb:5a:04:83:21:82:3f:83:6c:6b:cb:7f:8d:f2:
0b:a7:fc:64:d3:bf:ac:10:c6:0c:5c:07:ea:b5:7a:91:68:3a:
37:89:ba:79:f7:7f:2b:af:91:9d:4e:07:4a:71:f6:83:6d:34:
2d:30:ac:02:f6:b6:b1:aa:90:10:6c:5a:0f:11:50:64:a3:82:
9e:68:07:d3:86:37:a6:a9:35:a5:8f:f3:f3:3a:15:c4:ed:f3:
69:15:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:21 2025 by rpki-client