Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/jQGsEYW9nQYMqDgRdjHs5yh307o.roa
File: jQGsEYW9nQYMqDgRdjHs5yh307o.roa (raw, json)
Hash identifier: ZPgtlYS7YpDV/s/35ryF75mYWk1md56zE0UQWzxn7Gk=
Subject key identifier: 8D:01:AC:11:85:BD:9D:06:0C:A8:38:11:76:31:EC:E7:28:77:D3:BA
Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial: 019423D6A199426D6DE036ABCE6DAC41BF42
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/jQGsEYW9nQYMqDgRdjHs5yh307o.roa
Signing time: Wed 01 Jan 2025 21:47:36 +0000
ROA not before: Wed 01 Jan 2025 21:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 185.119.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a1:99:42:6d:6d:e0:36:ab:ce:6d:ac:41:bf:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Validity
Not Before: Jan 1 21:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d01ac1185bd9d060ca838117631ece72877d3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:85:89:69:18:d0:0d:b1:21:e1:92:58:a1:07:
a9:7e:7c:66:11:ec:3c:8a:41:4a:81:36:7f:e8:46:
7d:f8:d0:1a:d2:4d:47:00:29:bb:1c:7e:87:c4:da:
e8:c3:28:19:33:86:c8:6c:11:96:18:4a:12:20:ba:
fd:12:49:6b:bc:53:ea:f4:27:87:15:3f:c6:df:be:
34:05:c5:3b:71:18:cc:31:4d:3d:f6:3c:8a:b1:38:
47:8f:27:7e:e0:d2:d2:54:6f:23:79:7b:60:1b:c6:
7d:98:b8:88:99:f5:e2:5f:d6:e0:fd:a3:c0:56:a4:
2a:cf:60:dd:26:48:20:d0:b4:20:b3:8e:8e:e0:04:
37:b7:1c:3b:18:b1:7e:75:83:e9:f3:7b:49:4f:04:
03:58:cc:5d:85:9a:46:c2:d9:da:6a:7d:30:63:0a:
cb:50:ef:b5:16:c9:18:3a:09:a9:65:83:fe:07:a5:
f2:62:38:99:88:11:1d:cd:8f:b9:25:be:70:19:f0:
bd:7d:72:a9:29:04:57:95:6c:8c:e3:dd:af:79:ea:
15:62:5c:41:c4:40:54:f3:19:1d:06:4a:cc:b8:5f:
c4:d0:95:44:b8:77:ee:ea:74:cb:5b:04:81:9a:97:
4c:02:fa:0e:06:ea:e7:c8:45:7d:6b:23:8d:c0:d5:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:01:AC:11:85:BD:9D:06:0C:A8:38:11:76:31:EC:E7:28:77:D3:BA
X509v3 Authority Key Identifier:
keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/jQGsEYW9nQYMqDgRdjHs5yh307o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.196.0/24
Signature Algorithm: sha256WithRSAEncryption
50:b5:2b:4e:d8:92:77:ed:be:a3:4d:1a:1a:0b:8b:93:9a:28:
1a:47:8d:f2:07:fa:28:11:14:3d:ea:2d:58:ab:26:57:f0:59:
43:1a:b7:23:79:38:8e:55:2a:ae:82:20:5c:be:d5:7e:99:23:
ed:cf:d8:09:b7:bd:58:5f:f9:e9:7b:e5:40:60:7b:a1:b7:8f:
9e:21:45:55:cc:59:82:0e:54:f6:98:27:18:6c:19:d3:80:16:
03:fc:c2:15:af:5c:ec:6b:0e:64:30:ac:72:ad:c0:33:ac:98:
2b:3e:24:80:0a:2d:36:2c:4d:d3:d9:00:f0:5a:74:f4:2f:6f:
94:a9:ea:9f:5a:62:4e:dc:d5:bb:d1:c3:ba:81:56:57:d2:b7:
ea:71:e3:59:23:49:95:60:4c:61:ee:d0:52:ba:c4:64:a9:39:
b4:d2:26:0f:a1:59:e8:8e:9e:10:9b:74:4a:89:f0:a2:5e:f8:
a0:25:b8:89:9f:6b:a9:23:05:33:02:f5:7e:14:e2:0e:3a:2c:
0f:ef:cd:79:05:cf:ff:9f:db:f5:e1:1e:6c:da:c4:97:57:76:
87:82:ca:8a:43:be:9a:d5:97:c8:71:9b:6b:d0:fb:68:2c:0d:
3d:a1:41:d8:08:e5:b9:64:a7:a3:06:ad:05:2d:1a:f5:26:b5:
6b:f2:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:54 2025 by rpki-client