Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa
File: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (raw, json)
Hash identifier: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=
Subject key identifier: 4A:CE:6F:F2:AA:82:7C:F8:27:C2:9C:8C:E7:4B:43:C5:12:E0:AC:41
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 01942369D496D8703E606FAB1B4004DF9A9F
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa
Signing time: Wed 01 Jan 2025 19:48:45 +0000
ROA not before: Wed 01 Jan 2025 19:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 193.30.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d4:96:d8:70:3e:60:6f:ab:1b:40:04:df:9a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ace6ff2aa827cf827c29c8ce74b43c512e0ac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:1c:ee:47:0e:23:72:2f:42:0c:59:1a:00:
5c:83:0e:f1:74:8f:3a:b6:92:ce:a6:2f:22:09:0f:
76:69:0f:d1:48:a4:91:9e:b2:e5:e0:14:c0:ab:9e:
e0:11:0e:e4:8b:c9:26:5c:16:b5:a5:f2:29:d1:f7:
38:c4:70:b0:78:15:78:86:04:2f:5f:e0:cd:dc:1b:
d5:3f:ad:c3:76:bc:fd:8c:8a:20:7b:74:dc:01:2b:
86:f7:48:46:c6:2e:71:99:13:f4:28:bc:52:20:04:
99:e2:a3:de:20:a9:9c:10:f0:69:e6:e3:55:8f:9d:
0e:05:45:cf:6f:d0:60:b3:5a:3a:8e:7a:52:51:db:
ae:e3:ac:9d:4a:ab:10:71:08:b7:70:11:a1:0d:32:
cd:77:5b:16:4b:ea:8e:69:dc:24:83:d6:bd:42:62:
56:49:26:8d:63:98:ee:02:1c:ce:15:b4:47:3d:f7:
ce:2e:d1:5c:b4:51:c0:13:61:9e:58:3b:d7:53:67:
bb:6f:28:f0:14:ef:99:6e:5f:a8:37:5e:01:61:97:
36:32:dd:3f:cc:bd:a5:66:f6:b4:04:34:50:26:70:
99:b8:2d:e4:fe:a2:2c:82:9c:c9:7f:ae:0b:a0:53:
f6:4a:91:f8:01:15:f3:4b:6c:5e:6b:a6:32:6d:2c:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CE:6F:F2:AA:82:7C:F8:27:C2:9C:8C:E7:4B:43:C5:12:E0:AC:41
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:09:9d:e5:79:e9:78:d1:a2:f7:b4:d3:93:5e:81:c0:8d:d6:
ed:ee:1f:4a:51:cb:d7:d4:c6:eb:5d:2d:ae:7c:71:cf:0a:ee:
35:e1:d2:c0:61:34:aa:71:c8:9b:24:2c:f5:bd:2a:a6:ae:51:
0b:8b:91:08:bb:4b:dc:8a:f4:74:e6:13:e6:43:8b:37:95:12:
6d:68:6c:c8:cb:0c:1b:ba:ed:ee:3e:71:8e:b8:7c:af:7d:ce:
16:e3:90:3e:8f:d3:d7:bf:08:9d:f7:17:b5:e6:ef:01:69:60:
64:ac:c8:51:da:f6:42:d1:10:7a:e8:e4:bb:58:69:7d:e8:d9:
b6:1f:75:b5:a2:2f:b1:3a:c1:fd:9d:4a:5e:ab:26:88:2b:e4:
58:4b:fb:2c:ec:d1:79:a0:de:f0:d7:d2:01:13:bc:f2:6a:8c:
b0:e2:17:55:96:f5:c9:c4:f0:c0:4d:d4:da:fd:08:32:59:4e:
69:e0:3f:e0:06:03:ca:23:81:43:78:a4:f4:fa:52:21:71:d2:
41:3d:39:14:d0:71:3a:58:6e:69:8d:a3:67:ed:c8:3a:d6:ed:
be:e6:80:43:97:0d:34:ca:d7:db:6a:9b:bb:2c:de:05:81:bc:
5d:79:0b:e0:4c:4b:c4:9d:75:d1:9a:08:37:ef:3c:0c:17:69:
c4:8b:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:41:42 2025 by rpki-client