Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa
File: 8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa (raw, json)
Hash identifier: KpvO8IWbSGTOfjfycUgdrrf84glELyn27WOsA9sqcQY=
Subject key identifier: F1:CF:FE:24:94:91:69:60:1D:96:0B:E7:E4:76:C4:32:B2:AF:45:F2
Certificate issuer: /CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Certificate serial: 01942143821959D1B7A63C27AD17FB486EFE
Authority key identifier: 7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa
Signing time: Wed 01 Jan 2025 09:47:39 +0000
ROA not before: Wed 01 Jan 2025 09:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196972
IP address blocks: 193.105.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 12:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:82:19:59:d1:b7:a6:3c:27:ad:17:fb:48:6e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d00ef4f3bf65b87cfa02ef7b4a6589ba2de4ff7
Validity
Not Before: Jan 1 09:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1cffe24949169601d960be7e476c432b2af45f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6b:db:b6:65:f0:82:fc:43:c2:36:aa:bd:e7:
c8:24:ee:f2:5a:17:e8:a9:00:9f:6b:48:cf:be:f0:
a5:d6:29:1b:c4:b6:53:db:12:9b:f2:52:35:b7:16:
28:aa:4e:3f:c7:72:0d:70:b8:09:77:69:02:ed:ed:
25:45:9d:48:3a:bb:85:f6:b8:c9:97:14:b9:51:e8:
c0:47:cc:78:f9:af:34:95:65:0f:81:53:aa:07:e3:
55:15:c8:27:06:b4:97:dd:1d:f6:f5:20:e7:c9:eb:
55:f0:19:b5:48:ba:95:f2:af:aa:85:7d:d3:50:77:
75:d6:91:53:6b:fe:3a:8a:be:d5:42:e7:d5:cf:ea:
f3:92:90:33:fc:a1:69:44:84:64:df:02:d4:09:fc:
b6:63:ba:fc:1b:a2:f2:50:99:ba:29:72:46:a8:fc:
2e:cf:f0:2a:79:e3:30:bc:d8:27:78:aa:18:55:af:
a1:6d:10:93:24:dd:9a:7f:99:47:fd:42:2b:d0:4f:
66:a6:dc:c1:1b:28:fb:66:fe:09:6a:ff:55:80:fc:
94:cf:49:7d:fe:f5:29:97:55:00:80:01:11:c9:f0:
52:c0:a6:b4:68:2b:d3:a9:8a:4b:3a:72:aa:a2:f0:
ef:3a:18:d0:4f:34:b5:5a:3d:8f:c1:8a:ba:3b:26:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CF:FE:24:94:91:69:60:1D:96:0B:E7:E4:76:C4:32:B2:AF:45:F2
X509v3 Authority Key Identifier:
keyid:7D:00:EF:4F:3B:F6:5B:87:CF:A0:2E:F7:B4:A6:58:9B:A2:DE:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDvTzv2W4fPoC73tKZYm6LeT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/8c_-JJSRaWAdlgvn5HbEMrKvRfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/dd61e3-f8cc-4f83-a8c4-de9d0401a6f6/1/fQDvTzv2W4fPoC73tKZYm6LeT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.192.0/24
Signature Algorithm: sha256WithRSAEncryption
17:35:f9:e3:7f:4f:45:db:d8:59:8a:05:38:74:a1:33:eb:bb:
e0:c8:ca:4c:ff:b9:39:36:70:7d:b4:78:a4:d8:d3:9e:34:81:
75:12:c3:f5:fa:ef:d5:60:9d:05:ed:68:5e:05:d4:5d:df:58:
66:0c:eb:46:61:c8:a5:22:15:ee:18:5b:64:8e:6c:1b:5a:90:
00:3d:6a:b1:aa:a0:ae:78:7f:17:89:b7:eb:eb:48:61:56:87:
c4:67:74:58:74:dc:ed:3a:93:ff:3e:49:f9:2e:1f:42:f4:26:
ef:74:de:d1:37:48:ea:1f:1f:6b:3d:e2:9a:2b:36:a2:cc:a9:
e5:ed:bc:76:8a:ce:0d:87:31:00:74:4b:aa:ee:f8:63:39:c3:
e5:61:8b:ba:21:4d:85:09:d2:6b:64:c4:c2:e8:99:aa:47:d2:
f0:d3:d6:2d:1c:0a:04:35:ae:ce:6b:82:e0:95:6d:f2:93:e9:
8a:93:40:ab:ec:e7:f7:e0:0f:6a:25:56:a0:e1:54:9e:81:f5:
c1:d6:6c:80:d4:01:c6:d6:b9:5e:70:57:a5:1c:8f:2a:1d:3c:
1f:38:7c:d3:16:de:37:16:77:f3:fa:15:6e:e8:c8:72:cc:20:
19:92:b2:6f:23:53:df:da:e1:bd:dc:ea:d6:e9:a2:66:df:75:
f3:e1:5f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:48 2025 by rpki-client