Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/KOQetqGXnr-_jcGLAAJM_EFGncg.roa
File: KOQetqGXnr-_jcGLAAJM_EFGncg.roa (raw, json)
Hash identifier: J0d7xN2IM4WNzPNloLfdHQukDngK3dzlCPcUmKT74Iw=
Subject key identifier: 28:E4:1E:B6:A1:97:9E:BF:BF:8D:C1:8B:00:02:4C:FC:41:46:9D:C8
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 01941FFA36AFF00AF86B6175F111D6AB0FC9
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/KOQetqGXnr-_jcGLAAJM_EFGncg.roa
Signing time: Wed 01 Jan 2025 03:47:59 +0000
ROA not before: Wed 01 Jan 2025 03:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8412
IP address blocks: 193.187.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:36:af:f0:0a:f8:6b:61:75:f1:11:d6:ab:0f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Jan 1 03:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28e41eb6a1979ebfbf8dc18b00024cfc41469dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:ca:d5:fd:95:dc:25:ed:90:ca:5d:47:5c:
28:db:00:7e:ce:d3:35:d4:90:01:7f:cb:a5:17:bd:
27:ed:22:d2:11:88:1c:8f:f5:9e:af:d8:a9:69:e0:
86:32:a6:55:3a:a3:a4:f8:5d:5c:6d:25:5b:d5:56:
95:43:91:10:77:8f:39:a2:e2:43:d4:69:ae:c4:eb:
97:f1:c7:33:54:ec:33:0a:69:5f:37:96:d7:09:14:
61:e6:92:7d:30:44:e5:c8:09:7a:f8:e6:01:f6:7a:
a1:3b:89:a8:a7:38:b7:25:2e:fd:45:e3:32:25:d7:
51:11:f0:94:92:b8:e7:3c:0a:83:18:61:f5:5c:b5:
04:fe:79:2c:3f:e2:cd:8a:e5:0a:18:67:56:f1:be:
4e:c5:54:cd:5f:8a:5f:e6:75:73:b4:26:3c:0c:48:
8a:6a:d5:65:2a:a1:63:33:d7:5b:a7:a8:94:87:3b:
62:6d:14:a8:74:96:c2:ab:ac:c7:da:7b:4f:5a:cd:
7c:72:34:96:ec:45:aa:ca:14:e3:13:d6:89:36:50:
ff:e7:47:8b:5e:be:51:13:88:6e:76:96:51:da:53:
85:ec:e6:14:4a:5c:90:3c:67:b4:31:46:c7:c3:69:
fd:25:f7:97:8b:fe:e0:f0:e9:ce:ab:c6:2a:db:bb:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:1E:B6:A1:97:9E:BF:BF:8D:C1:8B:00:02:4C:FC:41:46:9D:C8
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/KOQetqGXnr-_jcGLAAJM_EFGncg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.248.0/22
Signature Algorithm: sha256WithRSAEncryption
63:40:17:fe:63:13:7d:59:71:02:0d:44:54:f3:39:27:e3:da:
d9:98:16:f4:9d:42:78:d3:dd:77:6f:d6:e4:c6:9b:6d:68:e5:
72:e3:c6:30:9e:d0:7b:59:a7:7c:bb:d4:16:e8:4f:be:a0:45:
db:c1:74:d9:9c:25:8a:6f:64:d4:6b:88:fe:5b:fa:a0:0f:c3:
e2:11:1e:92:ca:48:18:61:99:23:03:1d:49:19:bf:98:4a:63:
84:58:ad:1e:71:c2:5b:78:e5:77:83:92:82:8a:47:bf:5b:73:
1c:b7:4b:aa:db:66:8d:16:00:2e:9f:25:85:55:83:6e:3e:79:
96:f1:d6:1d:b5:26:ee:e6:fa:21:e2:cc:97:65:07:f3:36:8b:
0d:33:56:57:b2:d3:cd:30:34:c9:40:a9:fe:7e:b6:69:08:5d:
89:cb:79:a7:79:38:d0:34:99:0b:dd:94:87:2d:b7:50:fb:9a:
98:f2:40:b2:5a:34:40:d0:38:d4:2f:ed:10:7f:cb:7c:90:d6:
88:fe:71:0b:19:2c:f3:63:d1:11:64:89:62:e4:69:0d:0d:23:
04:a6:ee:69:bf:f9:7e:f5:89:14:0c:7b:d8:f7:5f:77:1a:24:
af:48:43:5f:1a:df:44:1a:37:d9:b0:0f:fc:52:f3:61:61:7a:
82:27:56:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:50 2025 by rpki-client