Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eA-m4nFC6kxWduztRvkm-CKMrQ0.roa
File: eA-m4nFC6kxWduztRvkm-CKMrQ0.roa (raw, json)
Hash identifier: TDknQ/pJ/NPsWGCq1PTWID8WVJws14ZF2rHbFZhOV1Q=
Subject key identifier: 78:0F:A6:E2:71:42:EA:4C:56:76:EC:ED:46:F9:26:F8:22:8C:AD:0D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01949879306EA33583F1D6C56675838BD565
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eA-m4nFC6kxWduztRvkm-CKMrQ0.roa
Signing time: Fri 24 Jan 2025 13:21:06 +0000
ROA not before: Fri 24 Jan 2025 13:21:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214961
IP address blocks: 195.177.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:79:30:6e:a3:35:83:f1:d6:c5:66:75:83:8b:d5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 24 13:21:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=780fa6e27142ea4c5676eced46f926f8228cad0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:56:73:91:ae:87:7d:e6:aa:c7:76:ea:d2:
59:67:80:83:ea:44:23:38:0d:92:a7:af:7d:c6:cc:
50:89:1c:d3:4c:fa:2a:19:ab:0a:fa:57:a6:1b:a1:
e6:73:1d:b9:21:b3:54:52:9e:07:b3:80:6a:6b:ef:
5b:bf:10:f3:71:86:24:8b:5a:21:3c:bd:c7:28:99:
bc:a0:3f:92:92:b2:b1:99:8f:46:07:e5:30:aa:79:
1c:4e:d8:6b:72:5b:50:87:2d:7a:e2:b5:49:c0:6e:
d4:23:f5:aa:37:06:c1:de:17:93:a8:9c:7f:96:12:
61:ad:ca:0b:66:88:42:36:f6:12:27:c7:34:38:12:
ab:8f:b0:52:75:be:6f:4d:93:f7:b4:70:7e:8e:5b:
77:ca:9b:92:f6:86:10:b5:a5:8a:3b:63:99:97:30:
f3:ed:21:9b:ea:bf:7f:f1:b2:dd:72:4f:2e:e8:7a:
37:5e:55:33:2d:17:83:98:c0:5c:79:c9:25:f6:5e:
ee:ca:c4:47:00:a5:f1:00:a0:98:9b:07:39:1c:7d:
c4:db:58:78:72:3d:a8:96:23:7a:12:cc:26:9f:fc:
35:04:c9:81:24:d7:8b:36:0b:1f:73:d2:3a:d6:55:
8d:ab:04:c7:ce:04:d9:90:ab:33:af:a6:cb:c8:8a:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:0F:A6:E2:71:42:EA:4C:56:76:EC:ED:46:F9:26:F8:22:8C:AD:0D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eA-m4nFC6kxWduztRvkm-CKMrQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.94.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f0:fd:6a:3b:45:02:03:2e:30:35:8f:3c:92:19:40:bd:a0:
b3:bb:76:36:a4:e0:8a:25:61:ad:74:9e:5e:8e:85:03:13:aa:
05:eb:38:25:b0:47:12:28:df:b6:bc:d7:64:05:a5:e5:51:c0:
66:1c:66:20:b4:3a:d2:5e:fb:fd:e2:5b:b0:c1:27:1a:46:1c:
2d:0b:c3:b9:ab:b0:db:b7:71:71:b0:f0:df:f5:28:22:8d:8c:
28:c6:13:98:3e:f5:7c:a2:2a:a1:97:31:9c:03:f3:41:04:fe:
b7:e8:72:1b:b0:e5:93:3b:3e:9d:bb:3c:3e:58:4e:c1:0b:27:
f1:81:a1:d4:a3:5c:d1:ac:92:17:34:27:09:04:b0:5b:2a:c0:
c6:91:b3:14:74:c8:60:cd:fc:37:6f:13:74:07:82:b4:0b:a6:
e9:01:73:a4:58:4e:f2:b2:73:f3:47:f2:64:62:fe:eb:c4:5b:
74:29:11:94:f0:a6:3d:19:f1:d0:34:0a:4b:c2:ee:84:e9:50:
61:3a:6b:20:ea:98:af:52:ee:62:d1:69:9a:6f:2e:9b:a3:46:
b6:df:20:bc:f1:40:11:e2:94:93:98:e7:75:48:7f:98:de:65:
c1:6e:34:50:61:26:6f:b6:15:c7:06:93:c0:cd:9e:41:41:a4:
ee:35:21:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:24 2025 by rpki-client