Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/a9hV5v7mUiE4DnyjTCLFaLF9E48.roa
File: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (raw, json)
Hash identifier: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=
Subject key identifier: 6B:D8:55:E6:FE:E6:52:21:38:0E:7C:A3:4C:22:C5:68:B1:7D:13:8F
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 01941FFA80C38D9C3E44D4DE32651FB58E69
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/a9hV5v7mUiE4DnyjTCLFaLF9E48.roa
Signing time: Wed 01 Jan 2025 03:48:18 +0000
ROA not before: Wed 01 Jan 2025 03:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43366
IP address blocks: 91.215.4.0/22 maxlen: 24
194.140.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:80:c3:8d:9c:3e:44:d4:de:32:65:1f:b5:8e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Jan 1 03:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bd855e6fee65221380e7ca34c22c568b17d138f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:de:52:67:8d:7b:22:60:59:95:fe:cc:fc:
3c:63:f8:f8:22:7c:6a:03:ca:99:f8:1c:d7:17:56:
86:12:7a:c1:35:9c:24:93:90:5a:b2:76:d2:bd:7d:
c6:f0:06:f5:65:d8:a5:2f:84:69:b0:2d:74:42:a1:
ae:28:c9:bd:04:d3:1c:d4:0e:0f:fa:04:52:a7:12:
dc:61:0c:30:5f:15:c2:43:13:c1:61:81:d4:bd:f5:
6c:9c:8a:4c:30:62:38:e0:1d:c6:cf:0e:19:9a:16:
7d:a0:7d:c9:06:b4:fb:42:ba:6e:4f:ef:fa:16:07:
fe:00:f7:44:9a:75:80:63:14:e0:60:67:19:aa:a3:
72:8b:2b:59:8a:ae:16:19:8e:ec:df:78:fc:b9:c1:
c6:dd:f1:4f:c5:f5:af:26:d3:e1:fe:05:21:9e:ae:
00:30:9b:eb:9c:ab:9e:1a:d6:1b:ee:1a:4a:66:f3:
75:9d:30:1c:de:93:9a:ab:03:cd:3d:7a:90:99:fd:
f5:b9:df:7f:e5:f0:8c:bd:6a:70:d1:9d:3e:23:5a:
b0:24:2f:cc:9d:82:46:90:75:6d:ea:c4:dd:ba:a4:
15:72:35:c1:73:bf:8a:fd:9c:1a:0b:fe:1d:09:53:
21:f0:b3:2a:68:18:37:e5:26:fd:a3:89:fa:00:8f:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:55:E6:FE:E6:52:21:38:0E:7C:A3:4C:22:C5:68:B1:7D:13:8F
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/a9hV5v7mUiE4DnyjTCLFaLF9E48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.4.0/22
194.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
84:66:4d:10:2f:99:7d:24:ef:d7:df:01:64:ab:93:68:40:07:
d1:c4:b5:29:70:42:c7:8a:4c:60:75:2d:e0:4f:6b:70:b7:0b:
f9:79:38:dc:e0:88:45:e5:b0:06:e5:57:b0:5a:73:9f:24:be:
db:43:51:3e:21:30:19:d5:c7:80:70:59:d8:f5:9c:00:df:6c:
77:cb:37:01:61:9b:25:86:41:b7:c1:14:60:cc:83:86:ce:96:
1b:1e:ed:ac:a1:c7:38:21:13:01:08:9f:85:ea:0d:30:2c:7f:
4c:1f:8e:bb:5e:b7:94:0a:5d:24:6b:a4:82:31:dc:15:f5:0f:
33:fb:39:88:ea:29:ad:49:3a:98:3c:43:4b:97:2f:82:50:d3:
a6:55:e5:0c:23:1f:45:75:74:9e:70:d4:fd:cb:9e:10:c7:92:
e6:6f:3b:8d:9a:31:66:b6:bb:4f:ee:4d:ec:c9:20:8c:39:38:
64:ce:a1:ad:cc:6f:74:67:64:9d:c9:3c:7a:dd:0c:f1:4d:cd:
4e:e3:03:3b:e3:ca:34:81:a0:a5:9d:8a:9a:52:4c:a7:9d:00:
a4:0e:dc:1a:df:9e:cc:f5:e4:71:6d:b8:fd:5f:89:f4:41:3e:
fa:cc:c4:18:16:5f:20:a7:da:f6:d6:a0:4a:cc:27:2b:5d:80:
ef:2f:57:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:50:37 2025 by rpki-client