Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa
File: 0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa (raw, json)
Hash identifier: dfbeFrG20UF3jAoNCZUQnOLXn1JG2r7gMGzts7DU6SI=
Subject key identifier: D2:4B:D5:41:C7:76:7B:84:A7:42:1D:F1:2C:DE:16:F4:87:B8:B2:E6
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 0194282631D2B20A3FB70EEAA5A0CEE4A17C
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa
Signing time: Thu 02 Jan 2025 17:52:59 +0000
ROA not before: Thu 02 Jan 2025 17:52:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12325
IP address blocks: 194.8.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:31:d2:b2:0a:3f:b7:0e:ea:a5:a0:ce:e4:a1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jan 2 17:52:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d24bd541c7767b84a7421df12cde16f487b8b2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e1:53:ef:c0:e9:c5:60:c9:c1:8e:88:65:fa:
d7:62:d3:ae:55:63:ad:45:4b:ee:67:4c:a3:36:51:
b8:a5:30:80:31:21:e0:25:9a:9f:57:cd:20:ea:f3:
4f:06:99:68:dc:bb:9d:48:c1:13:86:80:56:ef:23:
a3:f4:f9:bd:cf:dd:30:56:9c:eb:4b:50:ed:52:ea:
23:f2:17:38:2e:5f:37:39:2f:9f:bb:34:17:3a:b2:
3a:95:d9:b3:3d:fe:e3:54:c4:b1:09:3c:9d:2b:aa:
03:21:fd:58:67:d7:6d:54:2b:60:e0:43:e4:77:a4:
74:70:c1:f1:99:f1:23:16:66:ed:e8:07:5c:ed:d9:
07:e6:05:af:b4:e2:15:5a:09:d1:b3:fb:e6:3a:a6:
15:f3:7c:78:ad:57:1a:77:40:d5:fd:68:a8:24:70:
61:ab:52:c4:35:d1:57:e6:10:bc:c2:cd:6f:07:bb:
89:d5:4d:44:da:e7:60:80:fd:25:ae:3d:c8:ec:24:
9b:28:e4:e5:b2:36:3c:40:b8:28:e9:eb:35:e4:e8:
68:03:64:b8:50:9e:ff:a7:70:9f:46:19:fb:72:32:
e6:58:42:92:c7:d9:02:a8:be:7f:0d:4c:21:41:d2:
df:1b:16:31:65:8f:ec:6f:a9:7d:2c:3e:d0:7f:0d:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4B:D5:41:C7:76:7B:84:A7:42:1D:F1:2C:DE:16:F4:87:B8:B2:E6
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.80.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b7:e2:55:c3:19:30:25:59:e8:fe:8e:ac:14:3b:06:d2:d6:
da:05:bb:52:9e:73:15:8c:c2:cf:07:d4:0e:26:32:13:77:7c:
f5:8e:ba:9e:21:f6:e2:d5:0b:ac:48:77:b6:a2:b2:be:9b:18:
6c:94:03:90:25:b9:74:ac:d1:31:6b:9c:70:9f:c4:b2:47:94:
dd:f8:91:57:c8:48:67:f3:6f:f0:5e:2f:aa:22:da:60:27:f3:
ef:fc:7d:f8:a6:ea:80:b8:50:e4:8c:82:d8:c1:79:7b:c9:fc:
82:97:7f:d1:16:88:79:9e:39:49:da:f8:84:ef:b4:07:7a:0c:
5e:f3:35:01:03:de:ee:c4:a1:cc:c6:fe:f7:72:3d:28:01:85:
a6:5b:b2:c8:b1:e7:0d:f7:55:c4:a3:10:5b:8f:8d:b0:07:a6:
c6:6b:83:59:00:e0:e1:bb:1a:6c:eb:8b:6e:32:20:29:c2:f3:
e8:65:73:47:f8:97:3f:b4:9e:9c:3f:1f:20:21:89:24:43:53:
dc:7f:22:04:59:98:8d:2a:64:f1:de:0f:4d:af:af:b7:1b:98:
f3:62:db:9a:92:3d:47:a2:e7:6f:4d:c1:8b:f9:55:ff:11:a4:
13:81:03:8e:eb:93:8b:d8:47:e9:ab:8d:c8:51:5d:2e:77:e0:
a9:f9:6a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:39:08 2025 by rpki-client