Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/tQFm8_0UalWx_GNEJk78DCdPVcg.roa
File: tQFm8_0UalWx_GNEJk78DCdPVcg.roa (raw, json)
Hash identifier: 82EiZfNTrL4ROOme4BcpcSeDD5HvtJ2vPvjWPWMdBZU=
Subject key identifier: B5:01:66:F3:FD:14:6A:55:B1:FC:63:44:26:4E:FC:0C:27:4F:55:C8
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067CE379B911117CC6C9F875BAF478A
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/tQFm8_0UalWx_GNEJk78DCdPVcg.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51817
IP address blocks: 194.209.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ce:37:9b:91:11:17:cc:6c:9f:87:5b:af:47:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b50166f3fd146a55b1fc6344264efc0c274f55c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5b:50:16:18:b3:0d:9c:23:17:af:68:72:01:
3b:ee:80:ac:2e:71:6c:79:db:3a:69:88:bd:69:7e:
8c:02:ae:e1:d7:8f:6a:c8:fc:73:60:e4:bf:fd:5c:
a6:88:84:39:6f:70:6e:25:1f:ca:59:29:f5:5b:57:
3d:06:b5:90:d1:36:5e:d5:3f:2a:d6:14:9d:72:8c:
51:71:6e:f1:b6:46:d5:4a:94:d4:6c:77:05:2a:7e:
39:52:cb:02:90:a0:2d:f5:10:1b:15:fe:d7:2d:1a:
1d:47:82:55:49:91:f4:9c:75:4c:2f:d1:dd:39:a9:
01:c3:74:d4:08:0b:04:8c:4f:06:e1:29:43:30:ce:
d2:3c:08:f5:73:87:b6:02:76:0d:8a:62:54:9a:bc:
ea:d6:af:4d:ea:79:61:8e:79:17:bb:35:da:02:26:
67:bb:a0:0e:7e:7c:88:f7:c4:1e:08:0f:fa:8a:33:
6b:af:31:de:63:ce:ff:98:21:b9:64:26:73:48:38:
58:c5:92:8f:ba:a6:81:bf:b9:19:6f:78:5a:c7:b9:
af:bf:a1:14:ba:4a:9f:3e:ed:e4:55:5c:bb:89:89:
39:5b:da:91:e7:8c:ef:89:38:10:45:f0:ac:da:49:
8b:c6:ed:ff:72:e9:b7:b1:24:ff:cf:7c:4f:94:c0:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:01:66:F3:FD:14:6A:55:B1:FC:63:44:26:4E:FC:0C:27:4F:55:C8
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/tQFm8_0UalWx_GNEJk78DCdPVcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.170.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:e6:d8:a3:51:66:50:31:fa:ce:31:e4:4d:af:e0:84:e8:bb:
f8:6c:7b:b0:93:77:54:23:b9:75:a1:9d:66:63:3b:a6:4c:af:
d7:dc:c0:e3:37:ba:d5:80:26:84:98:bd:58:f1:35:85:3f:56:
fa:a0:3a:ec:a6:1a:f2:d4:44:a4:78:eb:8d:01:7a:87:a6:73:
01:10:ec:27:b5:f1:8d:cd:28:c0:57:fd:26:ab:97:9b:53:b5:
80:2b:ce:c5:34:9c:c1:28:16:e1:94:24:5b:c5:14:73:3c:1e:
39:db:ca:66:17:20:8a:b0:ef:e5:5a:eb:a3:e4:b9:96:ed:79:
56:eb:7b:a7:c9:17:cf:6b:cd:dc:0f:fe:ad:de:b2:66:96:e4:
51:d5:48:1b:33:36:9d:0f:07:fd:92:bf:a4:ba:05:43:31:c7:
a6:47:cc:cf:61:f3:9f:fc:8b:8c:5b:fd:7f:5f:7c:c5:d3:e8:
da:42:51:d3:48:08:19:53:35:44:07:ad:e7:e4:49:a7:cf:ca:
84:b7:ee:c0:ca:66:78:74:5f:db:f9:10:aa:06:a1:e1:cc:62:
a8:95:a6:f6:a8:a2:eb:b3:33:e8:d2:48:6e:59:50:0d:c6:d1:
67:bf:ed:56:02:a4:9b:ed:6d:06:02:81:50:29:c7:3a:c4:02:
eb:9f:79:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:31:51 2025 by rpki-client