Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/CCa8r2qpCvCDgqqDcfo4PuokNhg.roa
File: CCa8r2qpCvCDgqqDcfo4PuokNhg.roa (raw, json)
Hash identifier: kaZQfZ66nJ9UAy07CUOVheGM2eaFszN0P5WDSIi6z7o=
Subject key identifier: 08:26:BC:AF:6A:A9:0A:F0:83:82:AA:83:71:FA:38:3E:EA:24:36:18
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 0194266C20A6CA3AA535E96E16C57D91B6D4
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/CCa8r2qpCvCDgqqDcfo4PuokNhg.roa
Signing time: Thu 02 Jan 2025 09:50:07 +0000
ROA not before: Thu 02 Jan 2025 09:50:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63956
IP address blocks: 94.250.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:20:a6:ca:3a:a5:35:e9:6e:16:c5:7d:91:b6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 2 09:50:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0826bcaf6aa90af08382aa8371fa383eea243618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:73:9e:62:96:25:b8:81:91:06:ed:c2:07:
55:ad:6a:da:97:6a:c7:0d:c1:5f:5a:03:33:12:77:
14:1d:da:39:7c:4c:b7:60:2e:a8:2f:ce:8a:db:9f:
d5:d2:a6:0e:d7:f9:4e:2e:18:25:2a:4d:a2:46:d1:
cb:53:6c:3b:34:97:11:55:ed:b5:d7:90:a1:1d:f9:
4a:73:18:f9:6b:7a:da:85:4b:cc:fc:6e:08:bc:e8:
fa:88:d8:62:28:ba:58:10:fc:d4:7f:2c:24:fb:6e:
96:f9:a4:04:7a:e3:71:47:b7:46:0a:1c:e8:6f:7d:
f0:c6:af:d9:30:38:bb:0f:db:f5:e3:1b:34:de:a0:
9c:e2:2a:ef:c0:8b:e1:c7:f1:46:ef:d8:6f:94:7e:
c3:9e:b6:53:26:8d:7f:96:a6:44:4a:64:5e:d6:75:
d4:91:c3:de:af:1c:03:4a:b2:4e:e9:f2:85:27:9a:
61:a3:66:ef:f7:bf:e8:3e:85:de:84:18:08:b7:2d:
a7:f4:c9:4e:c3:86:3c:d1:de:e2:2c:49:db:ad:31:
05:85:e4:19:17:f5:31:95:ed:bc:d6:47:59:e5:e1:
20:23:10:58:3b:37:72:f5:74:5f:49:98:1e:f1:e2:
c8:3b:15:6c:e6:28:89:d7:da:b0:3c:62:1e:a2:2c:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:BC:AF:6A:A9:0A:F0:83:82:AA:83:71:FA:38:3E:EA:24:36:18
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/CCa8r2qpCvCDgqqDcfo4PuokNhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.207.0/24
Signature Algorithm: sha256WithRSAEncryption
34:56:c4:ae:04:1a:f1:9a:77:c8:11:67:a1:84:22:e2:ee:e2:
e4:30:0b:da:a8:14:b8:ec:af:61:d8:39:62:8f:39:db:51:66:
83:8f:bd:2d:69:c9:9d:6f:83:64:69:bc:4e:26:19:14:8d:ee:
0b:1d:c0:6b:18:5a:d7:0d:a4:e2:6c:06:f7:10:fa:13:3a:31:
cb:9a:a6:8e:7d:94:6d:c7:49:bb:61:69:bc:cf:55:40:b8:fc:
15:59:dd:54:12:6c:7a:4d:29:33:52:2c:a0:28:99:9f:e9:80:
9a:c9:fc:1b:14:a9:4b:dd:3b:4b:40:bf:0a:f4:04:46:ea:7b:
c7:e9:03:dd:c8:75:98:7f:4e:bc:7a:b4:31:82:d2:ef:ee:f9:
f6:f3:e5:8e:63:f6:28:9f:9d:82:15:8f:27:1c:dd:ff:a8:5e:
79:ae:27:bf:25:28:38:ac:c1:f9:f0:a2:81:5c:0f:63:d1:07:
d5:54:32:d8:1f:f8:bc:33:06:ac:3d:bc:7e:75:95:64:f1:74:
44:c4:bf:c9:06:29:73:e1:c7:82:ab:10:1f:de:9e:bd:40:07:
45:fd:18:fb:50:2e:95:c1:35:e6:b7:cb:57:22:2f:57:30:4d:
da:72:55:37:8e:a6:3c:7c:63:6c:6e:52:6e:53:54:3b:c3:c1:
23:00:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:16:45 2025 by rpki-client