Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/INmTHMZsE_SqbdFkgIPWEnnNnuA.roa
File: INmTHMZsE_SqbdFkgIPWEnnNnuA.roa (raw, json)
Hash identifier: gXbWH54C+drRJZnXbEzI0DFd2J+yU0HljjT/VTaNTPc=
Subject key identifier: 20:D9:93:1C:C6:6C:13:F4:AA:6D:D1:64:80:83:D6:12:79:CD:9E:E0
Certificate issuer: /CN=c69594075f31c513a1337e91759290037e667bf9
Certificate serial: 0194266C407EDE06FE1CE0B5871F53E5E79C
Authority key identifier: C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/INmTHMZsE_SqbdFkgIPWEnnNnuA.roa
Signing time: Thu 02 Jan 2025 09:50:16 +0000
ROA not before: Thu 02 Jan 2025 09:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56998
IP address blocks: 194.164.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:40:7e:de:06:fe:1c:e0:b5:87:1f:53:e5:e7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69594075f31c513a1337e91759290037e667bf9
Validity
Not Before: Jan 2 09:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20d9931cc66c13f4aa6dd1648083d61279cd9ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:31:06:0b:af:16:e9:3f:fc:7b:78:69:48:
4f:dc:27:31:2b:0b:ad:89:13:16:15:a1:eb:d1:d1:
cf:80:8b:2e:08:bd:5f:ec:73:11:f3:e3:83:e6:de:
c8:de:0b:e9:ce:fe:f7:59:30:9b:1a:fa:26:8a:af:
13:eb:72:e4:56:09:16:84:34:d3:69:cd:b2:1b:27:
e0:98:69:d7:a7:a7:0b:2f:13:c3:3d:3f:b6:7f:27:
71:36:b6:f3:58:bc:c5:66:be:12:da:c9:7d:0d:9c:
78:63:98:ff:bc:fb:2b:d3:de:1d:d0:dc:e2:44:84:
8b:0d:56:c7:05:56:a3:66:83:5a:00:0f:fb:42:f3:
35:49:b8:b0:32:b1:da:28:97:91:4a:34:6d:63:e2:
8f:8b:85:b1:a6:e8:31:16:26:23:f0:44:83:8f:fa:
88:6f:24:ed:d6:ff:0c:6d:ea:02:9a:15:94:87:f9:
00:26:94:4e:a0:ca:a9:66:6f:28:d9:a2:80:14:cc:
95:e4:ec:14:75:2a:f5:ff:3d:c3:c0:5e:3f:85:f1:
f6:68:8a:4e:a1:9c:63:25:7a:18:4c:68:31:82:ac:
d8:90:aa:0b:37:f4:d1:0a:fd:22:4e:05:94:6d:8a:
d5:0a:f2:8f:25:66:05:34:55:55:be:07:64:75:95:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D9:93:1C:C6:6C:13:F4:AA:6D:D1:64:80:83:D6:12:79:CD:9E:E0
X509v3 Authority Key Identifier:
keyid:C6:95:94:07:5F:31:C5:13:A1:33:7E:91:75:92:90:03:7E:66:7B:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpWUB18xxROhM36RdZKQA35me_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/INmTHMZsE_SqbdFkgIPWEnnNnuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/80bebe-b647-4b9d-ab76-2289c77a2d39/1/xpWUB18xxROhM36RdZKQA35me_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b4:e9:ac:d8:60:70:ad:98:de:8f:5a:39:e1:65:0b:28:1d:
fe:dd:ef:d9:a7:47:9d:23:f3:00:13:7a:a8:d0:7a:c6:d1:8e:
1a:e7:a8:5b:b1:54:ef:1b:f5:23:5e:0a:f0:85:86:af:95:f3:
96:d1:58:57:e4:18:ac:6b:55:dc:f5:d5:d5:b6:d2:2e:42:b2:
27:45:8b:6d:fd:c4:a6:48:1b:c5:d6:de:32:10:ad:20:5d:06:
c4:79:30:97:36:fc:8f:3a:6f:d4:92:73:6a:5b:ea:56:cb:17:
76:18:f2:88:87:fd:de:0c:22:b8:27:5e:e0:74:6d:c5:65:7e:
3d:24:a9:65:13:47:12:18:b2:5d:47:ed:ba:29:10:7a:f3:b9:
21:89:f5:cd:29:c4:01:26:8e:8a:c7:fc:4c:7e:d6:59:e1:e0:
7c:e9:49:9b:57:c3:13:5d:bb:f1:22:3c:33:d5:cf:db:8d:b1:
b7:86:a4:dc:d5:83:50:3b:00:bf:5b:fd:2b:b0:f5:8e:2e:f7:
55:6b:66:81:84:de:65:61:d9:3f:f9:54:40:c1:d7:93:af:b6:
fa:a4:d8:26:47:3a:a6:5f:03:31:72:67:23:34:ec:c6:c8:b2:
77:e5:bd:30:1f:6d:45:38:74:21:b8:0b:d8:a2:67:71:ec:b3:
b5:b7:8e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:03:34 2025 by rpki-client