Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cHTqgQ_NnfmXD5nJT3kIZZjFwZA.roa
File: cHTqgQ_NnfmXD5nJT3kIZZjFwZA.roa (raw, json)
Hash identifier: FFUjE0CNLElcLM8zGnjnylibB9AZ8Bqd7Lg40pgUPDk=
Subject key identifier: 70:74:EA:81:0F:CD:9D:F9:97:0F:99:C9:4F:79:08:65:98:C5:C1:90
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC1294097B6D2DB7F1BEC0B5E2EFC5
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cHTqgQ_NnfmXD5nJT3kIZZjFwZA.roa
Signing time: Wed 01 Jan 2025 17:48:52 +0000
ROA not before: Wed 01 Jan 2025 17:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64470
IP address blocks: 193.46.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:12:94:09:7b:6d:2d:b7:f1:be:c0:b5:e2:ef:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7074ea810fcd9df9970f99c94f79086598c5c190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:37:cf:6e:03:be:d5:aa:e5:e2:08:e6:7e:
99:e6:62:29:4d:38:e9:78:10:af:62:d5:57:86:08:
58:a0:14:57:b8:22:0b:5f:b0:19:14:a3:42:ba:ce:
46:fb:29:27:f5:b4:89:8e:03:dc:13:dd:cc:89:7a:
f0:7c:62:22:b8:e0:01:a7:85:da:57:57:00:03:41:
60:86:79:0b:62:f2:5a:c1:61:d7:20:16:31:8e:c3:
68:40:0e:cd:62:f1:85:ce:e2:eb:5c:1c:81:d5:3e:
a2:0c:4c:b1:22:b4:c7:89:4d:e6:73:29:dd:c2:64:
f2:3f:c5:d8:73:b5:52:06:31:9d:d2:a1:00:97:e4:
9f:81:4e:ff:ca:95:47:a7:ff:47:7c:46:51:40:e1:
3a:35:22:15:8f:a5:60:20:8a:f7:c0:18:23:9d:3a:
3a:f1:47:69:fb:89:26:ab:15:57:5d:c9:ca:c9:d2:
f1:64:e4:8d:45:57:45:bd:18:02:56:b5:39:9c:32:
bf:f0:9a:75:c8:bb:d4:e9:c6:34:3c:ff:a9:c7:b4:
aa:36:90:12:b2:4a:8d:75:97:28:6a:a5:a3:05:87:
e8:57:3a:47:46:6c:0c:13:ba:dd:54:43:c3:a0:a3:
ad:9e:fb:bf:fa:fe:e1:83:18:54:0d:7c:f0:78:f6:
eb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:74:EA:81:0F:CD:9D:F9:97:0F:99:C9:4F:79:08:65:98:C5:C1:90
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/cHTqgQ_NnfmXD5nJT3kIZZjFwZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:20:b0:e4:56:71:23:0e:9e:fc:69:95:12:8f:ca:3d:d8:7f:
c8:10:c8:5e:9a:61:34:2a:0c:2a:02:6a:db:eb:b6:31:5f:54:
c2:ae:c7:d1:ee:9f:72:e9:b8:c8:85:1f:a8:4c:e9:6b:4c:3b:
f8:ce:b0:ff:03:ba:79:1d:cc:75:ca:55:00:ac:a5:9b:27:0c:
75:43:a1:01:75:77:70:ab:4a:f2:9f:de:55:03:91:45:8d:8e:
be:d0:5e:d2:0b:3b:a8:36:df:70:b2:f9:84:c0:a8:7b:a9:d7:
c9:8f:15:9a:75:61:4c:9c:b0:da:35:bf:61:a2:f3:32:c3:42:
7c:46:11:ae:a5:22:de:3f:ec:26:9e:7e:56:c7:a8:36:16:a1:
fb:e6:90:ef:4e:8b:e1:b2:35:b9:06:ce:42:37:74:c9:3b:f5:
48:ae:ae:eb:a9:ec:76:3b:c2:57:6f:a7:3f:3c:87:69:83:67:
9e:19:cc:4c:88:42:f9:24:1f:51:2b:53:0d:20:46:e6:a5:2f:
23:4d:5f:84:bf:77:d3:93:2e:2c:4c:92:e2:e7:c9:e6:52:a0:
65:93:02:9d:e5:a6:da:9e:71:ac:b6:d3:d4:db:2b:a2:80:f2:
84:f2:69:e6:a2:26:7d:76:05:0b:88:0e:cc:2b:a3:4c:f5:ae:
e5:c8:41:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:03 2025 by rpki-client