Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Y8xHHV3Pz0BXSq1EpOCt1lc9Ho0.roa
File: Y8xHHV3Pz0BXSq1EpOCt1lc9Ho0.roa (raw, json)
Hash identifier: at+SCTW0OiTwjDv+Yugc79MZVAsBJgUCI4Eq6f4ChqU=
Subject key identifier: 63:CC:47:1D:5D:CF:CF:40:57:4A:AD:44:A4:E0:AD:D6:57:3D:1E:8D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942220072AEF128124BEBA906493F8743A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Y8xHHV3Pz0BXSq1EpOCt1lc9Ho0.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196609
IP address blocks: 195.110.14.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:07:2a:ef:12:81:24:be:ba:90:64:93:f8:74:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63cc471d5dcfcf40574aad44a4e0add6573d1e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:51:94:a7:02:82:42:bd:eb:09:bd:4f:fc:
07:51:7e:58:5d:a3:f1:af:69:e4:89:1b:e4:be:3c:
6c:24:5d:0e:dd:af:25:e0:bc:7f:ce:e2:b3:33:f4:
25:32:7d:f0:03:de:ec:4e:ff:50:b4:df:d2:ac:c2:
b1:cf:c4:b6:cf:d7:a7:c7:c2:e5:cd:81:9a:da:e9:
c4:11:0c:43:98:8b:93:02:16:e7:01:54:0f:9b:7f:
38:d7:2f:62:45:56:2b:a5:74:8e:e2:65:0d:0e:64:
0e:a1:84:ee:02:83:9e:d9:bb:2b:cd:f5:50:59:0a:
c0:f3:0a:9c:8d:0e:a9:30:f6:34:6c:20:a3:9f:0b:
29:3b:6c:c5:89:a7:3f:9a:72:93:65:90:c1:23:5d:
e0:31:03:7b:1c:bd:e3:83:43:49:1a:66:fb:57:e0:
5b:3c:12:22:22:95:c3:d4:fa:40:8a:b6:7b:de:5f:
15:0c:44:0c:3d:10:e8:e7:a9:61:c5:3d:8c:02:c9:
de:65:83:11:c8:b8:ee:ae:b6:93:f0:62:cb:3d:bc:
cb:4f:1e:15:61:73:48:ee:9c:49:c0:c4:66:7a:5a:
b7:bf:3a:8b:a5:6e:ca:a0:6c:39:68:ea:6b:28:38:
94:17:80:ed:3f:87:29:46:99:98:87:b4:49:08:2e:
b8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:47:1D:5D:CF:CF:40:57:4A:AD:44:A4:E0:AD:D6:57:3D:1E:8D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Y8xHHV3Pz0BXSq1EpOCt1lc9Ho0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.14.0/23
Signature Algorithm: sha256WithRSAEncryption
10:88:39:2a:a5:25:2a:ac:ec:f4:62:da:4e:78:e9:b5:57:27:
7c:20:a3:3f:71:a3:d7:ca:72:78:0a:58:95:9d:81:a6:4b:3f:
8d:ff:a2:95:33:d9:75:79:9e:71:e4:f5:45:75:5c:ff:70:c1:
79:d8:43:0f:8c:3a:be:25:76:ce:96:8a:ac:36:cb:e1:f8:2a:
f9:1c:b5:69:08:c2:80:d3:c9:e4:f7:2e:d8:23:0c:e2:fb:40:
4e:67:3f:38:93:82:ef:40:95:e4:fd:f1:ad:90:ac:87:bb:cb:
39:22:46:30:bf:e1:a7:3d:45:3e:eb:2d:8a:e0:f3:d0:a9:04:
a6:ce:05:0c:6c:02:d2:f4:cc:bb:0c:31:18:77:ee:9e:7c:2c:
43:d1:1b:89:fd:4f:ce:97:97:9d:bd:4b:df:58:a1:96:35:a2:
15:d3:9f:0a:0b:01:2b:3d:cc:70:f4:cb:5f:d7:99:74:c7:1d:
5d:18:26:e2:b3:0f:e1:2a:75:40:90:0a:21:73:86:5d:aa:b0:
4a:fe:47:c2:9a:d9:27:08:7d:5c:8d:48:ce:4e:81:58:f0:71:
51:40:e3:08:fa:cc:c8:e8:cc:a3:6e:b4:cb:44:94:ce:cd:1b:
5f:96:3b:32:cf:03:80:7b:2d:32:30:e8:ae:3a:9d:b3:72:4f:
08:ee:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:48 2025 by rpki-client