Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/2c-138nK4yanjA_nFYFgRI3qkq8.roa
File: 2c-138nK4yanjA_nFYFgRI3qkq8.roa (raw, json)
Hash identifier: eVkYs1Oz0s5AD5JOgKA2ZQfEyufJILyJFXY8+OH1Q4o=
Subject key identifier: D9:CF:B5:DF:C9:CA:E3:26:A7:8C:0F:E7:15:81:60:44:8D:EA:92:AF
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 019427B57E6610D4FA7E77E919B30AD934F6
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/2c-138nK4yanjA_nFYFgRI3qkq8.roa
Signing time: Thu 02 Jan 2025 15:49:53 +0000
ROA not before: Thu 02 Jan 2025 15:49:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134351
IP address blocks: 195.206.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:7e:66:10:d4:fa:7e:77:e9:19:b3:0a:d9:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 2 15:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9cfb5dfc9cae326a78c0fe7158160448dea92af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:27:f9:82:3e:2d:62:63:a0:ea:fc:c0:d3:
0c:c1:1f:bc:92:71:4b:c2:ab:84:c9:13:dc:28:17:
9b:91:8c:9a:b9:3d:19:a7:eb:ee:e3:3a:8d:bd:7f:
c4:45:d5:7a:0f:83:43:17:72:10:e9:07:0c:0a:a5:
95:fd:d7:1f:33:00:a2:28:94:fe:51:4c:7a:ce:6b:
52:85:e0:6e:31:83:37:a1:0e:e8:43:e3:f8:a5:b7:
97:f9:09:f7:66:53:72:f5:51:5c:7b:b3:6d:90:6e:
33:35:65:a2:fe:e9:75:76:1e:50:74:34:8f:2e:8b:
f6:f1:cb:63:a3:87:97:f1:40:1f:4d:4a:51:28:9b:
5f:8a:91:dd:c1:86:f5:c2:3e:7e:ed:81:1d:7e:ee:
cd:68:40:92:d6:ac:9e:9d:94:03:20:10:81:78:7a:
7a:22:d0:68:bd:3a:b5:17:b4:8e:14:d9:3a:80:a7:
5e:a0:f3:dc:9c:fa:5b:1f:f4:3b:10:55:ed:1f:6c:
6b:e0:1a:af:dc:d1:08:7d:f6:2d:20:64:35:15:ac:
41:43:9f:46:86:a2:62:0d:fc:5e:3b:fe:e7:7a:8a:
0e:86:0c:a2:24:fe:47:bf:e2:76:01:5d:49:89:f3:
44:b1:c6:66:3b:ac:8d:7a:55:f8:bc:ab:b9:e4:5b:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CF:B5:DF:C9:CA:E3:26:A7:8C:0F:E7:15:81:60:44:8D:EA:92:AF
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/2c-138nK4yanjA_nFYFgRI3qkq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:3b:47:de:b8:25:99:73:5e:f5:0a:f5:28:ef:55:36:d7:6f:
e2:21:7b:c7:3e:70:a5:c5:f8:8c:b3:c7:1d:42:05:76:88:fd:
d5:b9:dc:27:ce:33:ff:9b:5d:61:41:51:2d:bd:71:2d:0f:52:
61:fd:44:26:0c:d1:aa:b5:8a:8a:ea:a3:74:51:14:0e:98:76:
9b:d5:af:ea:8d:7b:b9:14:bb:04:c2:f0:5b:c1:5c:4b:0d:96:
24:97:3f:61:4b:e1:13:92:29:ac:f6:c0:07:54:a6:08:21:90:
6d:db:c6:b0:e2:c8:67:14:a5:7f:68:21:01:7b:b5:aa:5d:20:
3c:19:cf:25:82:6d:ad:90:af:de:8b:7e:66:56:9e:02:f1:29:
55:56:8c:d8:ab:2a:67:88:da:ed:13:01:54:11:6b:fc:0f:13:
29:ee:00:92:9f:1d:31:f8:7f:da:1a:1d:2a:03:20:0b:e0:b8:
dc:74:cf:6b:b0:fc:06:a1:df:95:29:ca:60:3d:7b:32:5d:75:
45:b0:47:be:d9:a8:2b:cf:49:54:2d:d6:68:82:13:89:04:7c:
21:61:f5:8b:90:c6:53:a7:90:d2:6d:23:df:ec:28:38:ba:a0:
7d:af:1f:d6:19:21:7a:3e:52:9e:28:1b:e4:66:cb:64:91:f9:
c8:9f:49:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:15 2025 by rpki-client