Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/00lUHR0HsWF62e0OhdTMmz1D8cI.roa
File: 00lUHR0HsWF62e0OhdTMmz1D8cI.roa (raw, json)
Hash identifier: 7/l5GLFu9biLRhRjYyy3+K05xs5xfnn4gHwWEjQvlNY=
Subject key identifier: D3:49:54:1D:1D:07:B1:61:7A:D9:ED:0E:85:D4:CC:9B:3D:43:F1:C2
Certificate issuer: /CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Certificate serial: 019423D737F61B0917AA178E198A8AD391C9
Authority key identifier: E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/00lUHR0HsWF62e0OhdTMmz1D8cI.roa
Signing time: Wed 01 Jan 2025 21:48:14 +0000
ROA not before: Wed 01 Jan 2025 21:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20712
IP address blocks: 194.62.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:37:f6:1b:09:17:aa:17:8e:19:8a:8a:d3:91:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4f51741df136f9389254efde4ba9adcfb0de6bf
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d349541d1d07b1617ad9ed0e85d4cc9b3d43f1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:ce:03:93:8d:67:51:56:8d:19:9b:4e:d1:
1a:fa:48:89:f5:cc:87:23:24:77:f8:54:27:9e:d9:
c0:7d:33:86:f9:9c:cc:76:bd:b9:3d:5e:32:fc:1b:
35:1a:87:29:8a:c2:a5:89:66:a2:48:e6:9b:96:2d:
36:ce:5a:5f:12:2b:c7:86:d8:22:59:da:bf:ea:62:
55:c0:ad:3c:95:63:30:1d:b0:00:dc:12:a9:31:57:
d5:53:17:39:ca:2f:a1:6b:57:40:42:f6:2b:21:78:
b2:25:dc:98:88:37:b4:18:c7:5d:d7:a2:15:51:cf:
5e:6d:bf:d3:e0:3d:3b:89:98:99:b5:f9:56:59:cc:
2f:2e:02:b8:88:ba:40:fa:c0:45:d1:4b:51:ac:93:
be:cf:17:d2:28:10:4d:c8:80:19:d8:39:c8:43:2e:
56:04:f3:f0:47:cb:03:79:b9:fc:41:92:dd:59:2e:
20:c6:9b:90:ef:bf:94:18:f1:ed:c6:31:f7:cc:e4:
bd:ad:cc:6c:d5:ac:f4:e8:f9:9d:81:e3:1d:7b:a1:
89:9d:82:b0:e2:7e:01:a7:21:d3:89:31:68:a3:1b:
3a:a7:10:bc:82:b0:27:55:4b:4e:29:14:a1:43:ad:
47:1f:90:a7:67:b2:f9:7c:a7:fe:05:9c:a8:99:e3:
a4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:49:54:1D:1D:07:B1:61:7A:D9:ED:0E:85:D4:CC:9B:3D:43:F1:C2
X509v3 Authority Key Identifier:
keyid:E4:F5:17:41:DF:13:6F:93:89:25:4E:FD:E4:BA:9A:DC:FB:0D:E6:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PUXQd8Tb5OJJU795Lqa3PsN5r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/00lUHR0HsWF62e0OhdTMmz1D8cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/af1b93-d6e3-453d-91cc-41d735bd8c03/1/5PUXQd8Tb5OJJU795Lqa3PsN5r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.124.0/24
Signature Algorithm: sha256WithRSAEncryption
96:6c:86:6b:f0:bc:e9:46:15:f0:f2:64:5f:9b:50:db:ad:00:
b0:cf:39:83:53:89:50:63:ca:0c:15:3c:18:c5:15:10:8a:bd:
81:d9:3e:ca:12:78:b0:3a:82:3c:f7:f5:56:31:ab:4e:2c:01:
89:47:47:e4:aa:6e:2d:d9:a3:2a:4d:9b:5e:d8:3b:bb:6d:22:
e5:01:50:25:c2:9d:b9:ad:38:4a:ef:b2:04:cb:4f:d7:a2:89:
c2:67:4a:bf:9c:c9:28:83:fa:1a:a7:06:81:45:16:b9:74:05:
3a:39:b7:47:7a:88:62:fc:98:53:f1:79:d7:15:bf:a1:5a:f5:
48:01:09:33:9f:cc:71:2b:92:29:dd:a2:5c:02:b4:eb:04:f9:
ff:f3:03:50:f8:10:33:0a:74:c8:05:cf:8a:95:7f:80:11:0d:
ba:31:b1:b7:2e:1f:18:f4:11:93:7b:8a:cc:2c:78:15:c7:dc:
1f:b9:78:75:0e:44:c6:05:68:0a:19:60:f2:73:d2:bd:d0:29:
1b:51:6e:8a:19:82:93:86:fb:6c:b7:70:91:39:22:ad:8f:e1:
aa:b7:8b:76:c8:a8:de:98:2a:54:b8:0b:73:80:9c:ca:97:53:
c3:b1:2d:b4:c2:ec:12:e1:53:13:8e:b7:e3:b4:30:ed:58:9b:
0c:af:29:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:10 2025 by rpki-client