Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/beDTfoEw8JrpyA7o-7IsGMLO3qQ.roa
File: beDTfoEw8JrpyA7o-7IsGMLO3qQ.roa (raw, json)
Hash identifier: JijN8NLmhAHCAt1CbtDEM+Af0+4e4xafU2Z2Ic6jOkE=
Subject key identifier: 6D:E0:D3:7E:81:30:F0:9A:E9:C8:0E:E8:FB:B2:2C:18:C2:CE:DE:A4
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 019426D8998A38F36156DDAC96B542607D84
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/beDTfoEw8JrpyA7o-7IsGMLO3qQ.roa
Signing time: Thu 02 Jan 2025 11:48:36 +0000
ROA not before: Thu 02 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 195.210.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:99:8a:38:f3:61:56:dd:ac:96:b5:42:60:7d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Jan 2 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6de0d37e8130f09ae9c80ee8fbb22c18c2cedea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:71:5b:22:0c:62:a8:28:b6:85:44:e5:d3:
0f:66:84:b1:24:7d:96:b1:8c:9f:7d:62:a4:c6:6f:
75:ec:0a:90:4d:4d:bf:54:64:64:53:a6:38:18:f0:
09:c2:61:c7:4b:e4:91:94:1d:23:a6:ac:05:b3:bc:
4e:ee:6a:44:3c:2b:6d:cc:67:6f:55:2c:bc:da:dc:
7e:e2:55:b0:6f:2f:3d:85:43:cc:c8:f3:b0:d3:43:
b7:74:ce:fd:7c:35:20:41:b3:eb:a8:b9:8f:f2:b5:
38:26:68:e0:05:af:b1:6b:49:dc:03:8f:76:85:cd:
d6:d7:e0:7e:b4:00:8d:ec:89:75:11:39:84:68:8c:
f4:37:f0:7b:ea:bd:bf:7a:9d:49:4a:2b:02:07:11:
51:ac:95:a8:fd:b6:90:4a:94:7c:2f:c9:54:6e:97:
5f:a6:73:96:70:ca:b0:56:e1:f1:6f:d4:ce:95:97:
9e:9b:84:f7:9d:52:aa:a6:ce:29:47:46:12:58:3c:
ab:7d:8f:b4:03:fc:f7:53:0a:b8:19:8a:50:b8:7f:
2f:1c:b0:39:72:a2:c3:6d:24:75:3f:c7:e0:9f:48:
48:39:6b:06:67:82:a6:1d:e7:49:b9:a6:41:f3:8a:
a5:69:f9:a4:99:c4:94:ee:ef:98:ad:5b:51:a3:72:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:D3:7E:81:30:F0:9A:E9:C8:0E:E8:FB:B2:2C:18:C2:CE:DE:A4
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/beDTfoEw8JrpyA7o-7IsGMLO3qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.112.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:0a:73:90:93:72:85:e7:3d:48:b2:e5:ac:3b:40:7d:89:2a:
0e:ca:06:2d:24:06:33:34:44:d3:1c:f9:1e:e4:7d:45:81:d7:
20:60:3e:ca:54:a0:b7:f9:ec:c5:a0:78:8d:79:5d:cf:7c:22:
b5:d7:e5:a6:0f:de:25:61:b8:91:5c:29:9e:48:bd:40:ca:f7:
55:94:ed:94:ca:8d:4f:13:cb:18:13:6e:57:49:88:40:3a:15:
f5:ae:73:41:3f:a1:bb:d3:ee:25:c9:62:5b:88:28:94:1e:cb:
66:99:e1:27:4a:03:a9:b0:b0:89:02:ab:8c:8a:dd:d6:96:9b:
9d:d7:25:18:e7:5c:08:e3:51:c9:43:8e:13:ca:ed:e4:4c:e0:
03:4a:26:e5:55:31:20:cb:5e:59:9d:ea:6a:38:02:09:38:8a:
d0:46:38:60:76:70:20:b4:13:eb:64:4e:26:f4:c7:b4:18:94:
0f:04:34:35:30:07:61:f1:37:7a:91:9d:34:df:8f:fe:bc:2c:
13:9a:b7:6f:0d:ac:bb:f4:a4:c8:82:af:0a:9d:53:ca:5a:fc:
85:57:96:ed:08:b3:a2:1f:ca:84:15:17:9d:fc:ae:6c:7a:37:
99:6e:17:25:2d:cf:3d:69:c2:be:4e:d8:41:72:91:e6:e3:ed:
ce:5f:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:41:21 2025 by rpki-client