Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa
File: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (raw, json)
Hash identifier: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=
Subject key identifier: 7A:19:77:33:3A:1A:90:73:32:02:12:3A:0F:D6:37:0B:2F:86:3C:24
Certificate issuer: /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial: 01942686DF3A0218E96E238DC41CF40A723A
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa
Signing time: Thu 02 Jan 2025 10:19:20 +0000
ROA not before: Thu 02 Jan 2025 10:19:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203625
IP address blocks: 185.129.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:86:df:3a:02:18:e9:6e:23:8d:c4:1c:f4:0a:72:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
Validity
Not Before: Jan 2 10:19:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a1977333a1a90733202123a0fd6370b2f863c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:a4:d9:1d:22:bf:8d:30:d2:0e:ab:3e:26:
62:88:bd:31:cd:62:f8:d7:a0:0d:eb:81:f8:ca:53:
cf:f1:25:f3:75:00:a7:2d:a1:b7:76:f4:01:4e:18:
71:c1:46:9c:0d:ed:b4:5b:ed:34:6d:5a:ea:b9:18:
0f:91:e2:e0:6b:92:87:ee:3a:cf:7e:ea:c9:42:88:
6c:6e:e9:0f:3b:0f:4e:20:49:84:63:5e:bb:d7:0a:
40:4e:36:a7:a7:cf:3c:9f:61:ff:8e:44:ea:41:9c:
9a:64:35:e2:93:82:d3:26:02:67:da:c4:af:4c:7b:
fb:25:fe:02:76:19:b7:27:ba:b6:fb:a0:9f:06:fb:
9e:18:23:dd:cd:81:d5:a4:5e:03:83:34:56:01:46:
e5:3c:a7:98:a3:ab:ab:dc:b9:d1:77:f1:00:0a:cc:
6f:03:8c:00:3f:f1:6a:ef:a3:d2:d5:55:23:03:cf:
6b:69:27:92:22:cb:c2:e0:2b:de:a9:5c:f5:16:96:
04:3c:15:65:c8:81:8e:d8:cc:57:f1:f3:d7:30:41:
0b:78:74:15:c4:fd:62:7f:23:37:86:be:b2:1e:9b:
10:82:89:d3:f2:b3:ed:d6:c4:68:c6:34:52:f3:7a:
a7:4d:6f:aa:e8:3a:7f:9b:db:c1:0a:8d:a4:81:db:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:19:77:33:3A:1A:90:73:32:02:12:3A:0F:D6:37:0B:2F:86:3C:24
X509v3 Authority Key Identifier:
keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:21:ee:bc:90:46:76:69:61:0b:cd:6d:7d:61:c9:bf:62:58:
4d:a8:08:d5:20:4a:c4:8b:cd:1d:4c:cf:7e:92:cb:09:76:7e:
9a:7e:d3:1d:67:a0:ac:68:61:a1:d5:5b:e8:bf:94:f0:6c:a8:
c4:24:4b:fe:07:f8:18:08:cd:ea:1e:7a:45:2a:15:28:67:92:
32:0b:0d:9a:b7:a9:97:aa:8c:a1:4a:be:65:0b:dd:68:c6:7f:
92:fa:04:98:51:52:67:ad:c9:6b:c5:26:e7:e6:81:d3:e9:a3:
4b:9b:b7:41:e6:d9:d9:32:77:09:79:aa:33:4d:2d:b0:d2:99:
13:3b:2e:b4:9b:66:32:87:9a:42:b3:eb:45:5a:ca:dd:cd:43:
a4:62:eb:12:aa:f4:24:c9:73:50:bb:44:32:c7:5c:43:6c:b6:
7a:e2:84:0d:06:0c:d5:fb:e7:bd:91:c2:6d:8c:ad:1c:a3:4d:
a1:b8:27:e2:37:5b:b4:90:b4:72:72:37:05:e7:e1:a8:0c:57:
3d:ba:ce:82:f3:a8:d2:30:35:16:0a:32:b8:55:77:6d:7d:e2:
ca:d5:51:9e:c1:84:ad:9b:9a:33:3f:b7:6b:cf:dc:06:db:42:
ff:15:37:dc:57:74:2f:38:79:da:75:70:25:de:86:6d:5e:d7:
12:45:24:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:20 2025 by rpki-client