Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa
File: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (raw, json)
Hash identifier: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=
Subject key identifier: FA:85:7C:C0:EC:4C:E7:69:45:04:06:5E:96:F9:49:D4:28:4B:56:11
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 0194266B91B8AC348047FF2D0FC76866CB15
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 78.142.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:91:b8:ac:34:80:47:ff:2d:0f:c7:68:66:cb:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa857cc0ec4ce7694504065e96f949d4284b5611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:d7:77:45:c4:98:49:d1:74:5c:ae:cf:84:
5a:91:54:99:c5:ad:89:66:90:25:41:10:ed:c9:6f:
8d:35:a0:5f:35:93:7e:a8:9c:03:a0:7b:3d:30:b2:
16:10:94:f2:1e:d8:dc:5b:ec:9e:0d:e0:b9:29:99:
b0:a2:34:9b:40:be:b7:cc:d8:8c:d1:36:f6:52:f9:
96:7a:e4:29:22:8c:81:96:aa:7d:d2:a5:c9:e9:58:
1d:ca:2f:5c:a8:90:42:ce:42:93:4b:b7:b3:67:fb:
b9:ee:1f:46:15:f4:bd:17:48:82:49:a3:f5:33:ed:
fd:6b:3e:e7:1b:d1:95:2b:b8:b7:30:2a:ac:02:6b:
aa:dc:f5:f3:43:3a:8f:5b:bc:03:87:68:fa:6c:e9:
8b:d3:8c:ed:ee:63:ec:a4:d6:6f:a7:5d:49:ca:e8:
ae:9f:c5:42:d1:9d:c0:72:95:fa:f2:01:b1:68:f5:
af:92:3a:6c:06:cc:8d:f4:1c:88:3c:3f:ed:55:ad:
b7:63:e6:5f:97:09:c4:fc:6d:fa:2b:8e:cb:81:9e:
35:93:42:48:e3:c0:82:9e:cb:31:16:f9:f9:36:64:
97:3b:39:da:23:23:77:af:f6:c8:95:d8:f0:19:f0:
43:b8:43:e6:55:2c:c5:fd:b2:d8:70:65:59:3f:96:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:7C:C0:EC:4C:E7:69:45:04:06:5E:96:F9:49:D4:28:4B:56:11
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.218.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b6:87:ce:32:08:23:61:07:f6:6f:3f:0d:18:33:e0:a9:b2:
47:fe:e0:ff:c5:d0:40:b9:1f:b3:f9:b2:3a:20:78:6e:6f:e6:
3a:f1:fc:26:48:1e:e7:1e:ca:2b:bf:e8:75:ad:30:50:30:22:
ee:b5:f7:c9:bd:12:db:68:be:78:74:1b:3d:9f:e0:e1:62:25:
14:bf:67:63:3e:4c:c9:4e:74:51:ca:30:33:d4:51:28:b0:6c:
6e:5a:f2:3e:15:85:9a:b5:4f:ed:03:08:fa:55:bb:2c:56:2b:
85:67:0b:6b:52:da:ed:15:01:8b:6e:57:71:13:19:fc:8c:97:
7d:fa:2b:25:44:5e:11:6b:d9:39:7d:55:53:90:b5:ad:ce:c1:
78:e7:94:5e:8c:e5:01:6f:0d:29:4b:ec:6c:35:60:ec:c5:26:
32:5f:88:1a:1c:0d:ea:d0:61:75:f2:64:dc:50:1c:68:93:75:
b2:d4:c1:9f:a1:cd:bc:af:58:d9:2f:17:99:7f:a8:38:ba:2a:
a2:9a:9f:cc:de:69:c4:dd:a3:1b:63:18:92:00:81:a8:de:bd:
05:02:32:d2:f3:ed:dd:dc:b4:81:7f:03:d8:b7:ec:29:42:72:
68:6f:ca:cc:fb:16:d2:53:05:dd:22:2f:03:f2:66:15:0d:a6:
63:77:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:18:14 2025 by rpki-client