Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa
File: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (raw, json)
Hash identifier: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=
Subject key identifier: 34:EA:AC:ED:94:2B:AE:7D:DA:8B:CA:3C:49:FA:F9:42:05:FF:CE:86
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 0194236A01DE25D154EA2D59D2A194060BCC
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa
Signing time: Wed 01 Jan 2025 19:48:57 +0000
ROA not before: Wed 01 Jan 2025 19:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202910
IP address blocks: 185.151.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:01:de:25:d1:54:ea:2d:59:d2:a1:94:06:0b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 1 19:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34eaaced942bae7dda8bca3c49faf94205ffce86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fc:a8:a9:42:dc:61:43:98:74:64:35:83:37:
04:d1:7b:ea:96:ec:41:98:8a:76:ae:83:49:4c:71:
82:dd:c4:06:62:fa:06:bd:f5:9f:8d:13:72:6d:d4:
70:27:d6:0a:1f:ac:cd:30:eb:ed:a2:20:60:43:83:
cb:ef:bd:7f:64:63:6b:cf:77:6d:9d:01:15:bf:17:
a9:fb:36:1a:8e:b9:6c:07:8f:fc:42:13:c6:e3:2e:
a4:27:aa:2e:e6:0d:11:12:8f:3a:cb:72:97:3f:39:
d0:20:e3:93:9d:b3:d0:35:06:f2:bb:e0:25:d1:c8:
cd:d6:0d:d5:63:c6:0e:c9:00:1a:10:9e:38:7d:e2:
3b:4b:49:47:a1:ed:91:28:4e:a0:5d:ee:bd:11:78:
7b:d5:d5:1a:28:1a:11:91:8e:88:f9:58:89:56:0a:
4a:9b:97:3e:42:a0:9e:73:d8:4e:32:c3:ab:cc:02:
01:59:81:e8:e3:4f:5d:3c:30:b1:01:e7:7c:8a:ca:
f8:fd:26:53:02:3c:16:f7:3d:fe:ae:ff:db:25:53:
32:50:ab:4d:d6:56:c2:0a:8a:9e:43:3c:fb:80:92:
08:8c:b1:55:33:18:10:17:b9:c2:02:ec:77:75:b6:
f9:57:07:b7:7a:46:d2:37:1f:31:f6:20:31:70:00:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EA:AC:ED:94:2B:AE:7D:DA:8B:CA:3C:49:FA:F9:42:05:FF:CE:86
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.16.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:73:e6:2e:58:34:f1:0a:f0:e0:45:36:9e:70:5e:31:65:2c:
74:d3:23:e5:e9:b5:00:be:a4:f2:17:e9:b4:bb:d5:e0:e8:a3:
50:e6:dc:55:df:77:b2:bf:3e:29:f5:a0:0e:b7:87:89:26:34:
00:52:56:a5:c7:44:5d:4c:22:41:4d:a7:0f:24:4e:5d:39:4d:
a5:cc:2c:bb:eb:80:ff:e7:0a:15:fe:76:ee:ab:76:99:c6:66:
6a:e2:fa:e4:ea:25:bc:60:95:c1:16:8f:7b:c6:3c:1e:ea:a0:
cf:4a:d7:51:2a:24:59:3c:43:3e:75:68:b8:3e:ce:3d:bf:be:
d5:01:ea:4d:08:7e:6d:16:6b:48:b9:91:1c:06:47:f6:78:21:
d9:cc:e9:72:66:01:72:47:dc:d7:5c:60:a0:32:70:2d:30:be:
c7:ec:6c:59:e4:ad:a6:b5:91:5c:c6:cd:48:ed:37:b6:12:7b:
fb:ee:d2:81:f2:5d:12:2a:24:48:a0:0b:e7:f1:cb:ac:18:c1:
9d:f7:c2:1a:fc:dd:bd:c9:39:45:79:a5:0e:10:0d:ba:2a:53:
29:fc:6e:ba:7a:5c:32:13:bb:d8:82:00:e7:e2:fe:72:d0:2f:
1c:d5:71:2c:a8:dd:5f:13:22:af:24:4f:cd:14:5d:9c:d4:80:
97:d9:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:47 2025 by rpki-client