Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa
File: jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa (raw, json)
Hash identifier: 6PfMRUJs2ydpnjPkR93o1yH/0S/+dpkr0n+r8qVdIsA=
Subject key identifier: 8F:01:D9:D3:C8:11:44:78:FB:41:BF:EF:23:5E:10:21:5C:66:02:EA
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 019427B6944E23D8BD2BE8D4D0DD21EE9AB2
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa
Signing time: Thu 02 Jan 2025 15:51:04 +0000
ROA not before: Thu 02 Jan 2025 15:51:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.29.56.0/24 maxlen: 24
194.29.57.0/24 maxlen: 24
194.29.58.0/24 maxlen: 24
194.29.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:94:4e:23:d8:bd:2b:e8:d4:d0:dd:21:ee:9a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Jan 2 15:51:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f01d9d3c8114478fb41bfef235e10215c6602ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:f6:0d:24:fe:99:c1:ab:bc:80:b7:b2:8f:
7e:7a:2f:51:73:3b:57:8d:17:44:48:54:ad:f7:9d:
50:aa:cc:7f:ec:9e:77:52:93:f8:18:d2:71:74:0f:
1a:79:1d:fa:40:e1:58:22:c8:6c:b9:88:0b:32:3d:
6a:7e:7a:38:e9:c4:43:9a:04:3c:af:7e:48:3c:2f:
15:8d:47:0d:38:14:2f:35:f4:22:9e:1c:44:8f:8b:
4a:23:7b:7e:a6:ed:df:63:be:61:d8:1d:cf:70:df:
1a:2c:bc:3c:41:e4:dd:34:35:a3:a2:09:fe:58:cb:
26:fa:a3:18:1a:fa:c2:e0:16:08:53:8f:2c:f1:2c:
16:54:76:14:dc:58:29:5c:f1:63:20:68:24:30:16:
97:25:c5:07:70:08:ee:a7:74:91:3d:16:5d:94:c3:
da:47:5c:97:c2:5c:ab:eb:5e:82:83:00:60:09:39:
00:78:fd:05:62:36:35:8a:1f:28:2a:f4:97:e6:49:
6a:61:58:3b:cc:35:9b:b4:2f:6c:ba:5f:61:00:0a:
cb:51:3e:2d:1a:b4:eb:6d:79:e8:b8:02:75:e8:00:
c5:f1:07:b3:82:7b:f6:69:37:f4:52:7b:cd:43:db:
98:00:f1:0f:45:8e:78:17:4b:71:15:42:19:ec:56:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:D9:D3:C8:11:44:78:FB:41:BF:EF:23:5E:10:21:5C:66:02:EA
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.56.0/22
Signature Algorithm: sha256WithRSAEncryption
27:77:cf:db:1c:f7:ad:9c:19:b3:43:26:da:fd:1a:a0:9e:ac:
ab:88:77:94:cc:f1:c1:51:c3:7a:d5:f4:aa:34:6f:41:fc:67:
29:90:c6:bd:1d:2d:75:c5:23:f7:43:bb:7b:dc:f8:41:4f:4b:
78:a6:3d:33:e6:0a:27:df:a1:85:67:85:a2:93:5b:f7:8c:be:
f6:db:29:f6:0d:df:46:d4:19:5d:f4:b8:20:61:4c:7c:5e:84:
da:9a:e0:7f:ed:78:2f:8d:84:ba:87:4b:75:72:b2:27:c4:14:
39:22:9a:1a:1a:d3:2e:7f:11:59:50:a7:74:48:ae:e9:e4:00:
f4:0f:60:6c:72:47:6d:a1:d6:9b:20:12:03:a0:45:32:ef:9b:
7d:4d:f7:85:1a:35:27:b7:76:df:ee:59:09:57:90:2b:c1:44:
b3:92:29:22:ca:34:62:81:8f:17:16:4f:5e:6c:d4:54:eb:b3:
1b:1a:5f:0b:c6:a1:82:31:18:a9:1e:d0:bb:b4:79:3e:9b:20:
1c:a5:08:92:13:1d:41:8d:5d:40:94:8b:79:8b:94:0d:2d:14:
33:c4:7a:c8:20:c4:6f:00:2b:01:09:96:b2:5b:87:0f:79:3b:
c1:da:28:45:58:30:69:76:81:a4:9c:12:93:48:f0:db:77:a4:
60:64:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:53 2025 by rpki-client