Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/qOhrpnYZCzUpUKZB3MFNa4-HHEI.roa
File: qOhrpnYZCzUpUKZB3MFNa4-HHEI.roa (raw, json)
Hash identifier: 6oJMsP2H8bztySGaS8Vu2F0xQVmbFj5CBgjWIqAhkAo=
Subject key identifier: A8:E8:6B:A6:76:19:0B:35:29:50:A6:41:DC:C1:4D:6B:8F:87:1C:42
Certificate issuer: /CN=a4947a653dec53d179d5724f2514c7256db69df8
Certificate serial: 0194228E29DF4E11FDA2FC36B9FFC34381A3
Authority key identifier: A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/qOhrpnYZCzUpUKZB3MFNa4-HHEI.roa
Signing time: Wed 01 Jan 2025 15:48:49 +0000
ROA not before: Wed 01 Jan 2025 15:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52160
IP address blocks: 194.247.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:29:df:4e:11:fd:a2:fc:36:b9:ff:c3:43:81:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4947a653dec53d179d5724f2514c7256db69df8
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8e86ba676190b352950a641dcc14d6b8f871c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d6:88:bd:28:5d:d5:43:63:7f:f8:b1:5b:58:
79:fa:5c:75:36:c1:ba:67:9a:a8:1f:1e:91:7a:52:
d4:63:90:5e:11:9b:2c:f6:68:f3:c0:c3:9f:cd:be:
35:ce:22:75:db:4c:72:45:67:fb:3b:ce:31:fc:b1:
7d:a2:ae:46:cb:72:f0:f9:22:57:ad:5b:45:fa:28:
32:1b:5b:86:ac:cc:7e:6d:c9:6c:30:88:56:f9:be:
6b:b3:16:38:64:45:97:80:b9:28:27:62:ba:14:b7:
21:2f:87:bb:3c:d9:f6:70:6e:57:2e:c2:e0:c9:b5:
e6:c3:72:8f:b7:11:94:28:53:cb:5b:5e:43:e8:16:
25:5d:d8:0d:74:be:f1:a4:09:a1:b5:15:f1:a5:d4:
b5:36:a3:f2:dc:a9:8e:b1:37:48:73:cd:cb:d1:90:
6b:44:26:3c:69:88:7f:e8:76:d7:1a:19:03:41:8f:
74:17:3b:4d:a3:30:1a:78:aa:80:01:7f:0e:4d:72:
e9:9c:56:7c:f2:5b:e9:4f:a7:e0:4b:88:dc:70:34:
83:52:a2:5c:31:af:c3:00:bc:9a:07:3b:fb:d6:ee:
24:bd:30:94:56:e8:b9:8c:5d:aa:ea:ae:9a:5f:64:
47:ce:92:e9:be:f4:7b:a0:85:ff:c8:f6:46:9f:bb:
10:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E8:6B:A6:76:19:0B:35:29:50:A6:41:DC:C1:4D:6B:8F:87:1C:42
X509v3 Authority Key Identifier:
keyid:A4:94:7A:65:3D:EC:53:D1:79:D5:72:4F:25:14:C7:25:6D:B6:9D:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJR6ZT3sU9F51XJPJRTHJW22nfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/qOhrpnYZCzUpUKZB3MFNa4-HHEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/76706c-124c-4dbf-aef8-73dba1dddca7/1/pJR6ZT3sU9F51XJPJRTHJW22nfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.50.0/24
Signature Algorithm: sha256WithRSAEncryption
95:37:cb:4f:b4:e3:d7:e4:af:d8:5c:dd:b5:32:a0:e1:9c:5e:
be:87:5d:c2:28:22:ae:4b:3e:08:a6:36:fa:63:4d:66:b1:4f:
17:56:e5:6c:4c:51:ac:3c:cc:d4:30:67:89:39:3f:78:59:eb:
81:7a:1d:be:ba:13:ec:dd:9d:5f:2a:8c:b1:99:73:9e:4a:5c:
62:88:45:ca:ac:48:a9:f6:e6:63:4b:2f:2c:22:8e:2e:6d:f3:
71:6e:b8:34:d5:8a:e0:74:1d:4c:d7:d0:b9:83:3c:ff:34:3d:
32:bb:00:8f:f8:88:e2:3f:bd:f5:0b:c6:15:69:ea:e9:61:07:
74:7e:99:6d:6a:59:7d:c6:6b:85:9c:5b:02:8e:8b:49:e3:86:
c3:f3:07:eb:3e:6f:a8:92:a7:b9:58:e3:2b:37:4b:c5:c2:1f:
51:83:bd:92:fa:c2:72:74:4f:86:45:d4:f6:ec:1d:3a:d6:6f:
f3:7a:c1:7d:08:90:62:34:ee:8f:ee:9a:f6:b1:b7:bc:81:4c:
bf:e6:35:7a:72:b6:4f:a5:bc:ae:f7:f9:d5:64:fd:2e:48:64:
42:15:5f:cf:4f:c5:17:bc:30:ee:94:ac:ea:d7:4f:5e:39:9f:
79:41:df:60:30:6a:e2:35:18:ab:5b:76:cc:fe:e9:ab:c6:f7:
41:8d:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:13 2025 by rpki-client