Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/c0VABkCar31XiscCxUkIQ_Rxce0.roa
File: c0VABkCar31XiscCxUkIQ_Rxce0.roa (raw, json)
Hash identifier: cf7jye0IdY66qCDg3OUxdm94WOD1lqyzZWuTus8fa+4=
Subject key identifier: 73:45:40:06:40:9A:AF:7D:57:8A:C7:02:C5:49:08:43:F4:71:71:ED
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2FDC7FDFEAC53950DCBD325BBEA4D
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/c0VABkCar31XiscCxUkIQ_Rxce0.roa
Signing time: Thu 02 Jan 2025 01:48:17 +0000
ROA not before: Thu 02 Jan 2025 01:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207485
IP address blocks: 159.148.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:fd:c7:fd:fe:ac:53:95:0d:cb:d3:25:bb:ea:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73454006409aaf7d578ac702c5490843f47171ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:90:5d:93:35:db:bc:3e:6d:0c:c3:93:21:
8d:2a:64:95:c8:76:46:4b:1d:0b:8f:ca:15:25:29:
85:03:ad:d7:72:1c:e8:78:33:84:72:cb:74:b6:cf:
07:da:4e:4a:89:79:2f:bf:1b:8a:dc:b2:d2:40:12:
f1:dd:fd:a4:ca:6d:42:4c:8d:13:72:0a:16:db:bd:
9b:6e:fa:52:8e:45:43:6f:83:cd:11:b2:25:91:7f:
9a:cf:a8:89:73:01:52:7b:42:4d:db:85:e1:fa:96:
6a:91:34:4b:42:1f:3c:0f:e9:28:97:c7:e0:9e:71:
f7:01:ff:b0:54:0f:5d:33:ef:24:7e:9b:8f:71:34:
b6:08:f6:9c:46:a3:96:65:df:d3:06:85:eb:d1:2a:
9c:5a:cc:14:7c:f5:a2:4d:80:aa:c7:a5:ca:c9:5c:
39:cb:b9:35:72:ec:f7:7b:20:3f:98:4a:c0:0f:26:
b5:61:40:b8:05:b6:17:a7:15:ad:14:28:a7:70:37:
f5:9c:3d:95:24:66:24:5b:3f:c1:bf:cb:72:92:6f:
b2:c2:77:e1:fe:4c:bd:ca:7d:12:ce:fe:5e:49:e1:
02:b1:ac:78:49:73:5e:cd:c5:94:10:2e:9e:bf:5e:
36:6b:56:3e:43:c3:d2:4a:51:aa:19:b5:63:3b:72:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:45:40:06:40:9A:AF:7D:57:8A:C7:02:C5:49:08:43:F4:71:71:ED
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/c0VABkCar31XiscCxUkIQ_Rxce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ba:ba:79:bc:68:3e:61:b4:87:27:cd:3a:10:19:2b:d2:1c:
8f:43:33:46:84:2e:5f:54:23:35:86:85:21:4d:52:bb:e3:e1:
fd:78:59:83:12:d1:7a:68:3c:8e:b5:a6:76:58:75:eb:8b:54:
72:02:9e:20:08:9b:87:66:63:dc:b6:7a:2c:b5:fa:5d:57:d9:
77:3d:03:28:50:94:7d:11:3b:ac:3d:e7:be:c6:82:e1:d5:ec:
8d:04:ed:f1:a2:bd:27:79:c6:d7:5a:06:9b:9d:05:10:f1:a1:
10:5d:0e:63:57:c2:14:23:7d:d7:ec:c3:86:d7:5b:c7:ac:a5:
40:a0:b1:c1:30:7d:62:c6:66:c6:2f:5d:f8:8f:6a:52:6d:d2:
01:a8:c6:df:b4:4d:c4:6a:be:ab:43:e9:72:9f:96:67:c4:72:
1a:f5:79:b9:70:66:f5:cc:77:86:7c:bb:7c:22:13:18:48:b8:
d2:60:16:71:cd:7f:ad:ae:46:f0:b1:8f:99:be:2b:e0:23:e1:
83:16:86:0a:cb:0a:05:59:9a:01:1d:e2:40:2d:65:64:20:7b:
f2:2d:17:16:56:09:f4:50:b7:a3:7e:1a:ab:ba:ed:e0:81:c3:
e1:d0:ae:04:a8:f0:8a:c3:44:c1:43:c2:6b:fa:f4:94:07:fd:
7d:9f:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:13 2025 by rpki-client