Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/H6hSTGzUXYO8wuCS7_uXx0OkwsQ.roa
File: H6hSTGzUXYO8wuCS7_uXx0OkwsQ.roa (raw, json)
Hash identifier: C3R1uTE0vZQdguq3OxSn35ovF8rEDK/1GfpIlJlHImc=
Subject key identifier: 1F:A8:52:4C:6C:D4:5D:83:BC:C2:E0:92:EF:FB:97:C7:43:A4:C2:C4
Certificate issuer: /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial: 019426D997E0E72C2510F45E9FD952BCC4D9
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/H6hSTGzUXYO8wuCS7_uXx0OkwsQ.roa
Signing time: Thu 02 Jan 2025 11:49:41 +0000
ROA not before: Thu 02 Jan 2025 11:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 94.101.106.0/24 maxlen: 24
2a14:7cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:97:e0:e7:2c:25:10:f4:5e:9f:d9:52:bc:c4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fa8524c6cd45d83bcc2e092effb97c743a4c2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:8b:89:f8:07:ea:1f:30:44:61:49:11:57:
03:5e:fd:5d:94:db:2a:9b:3f:67:1c:3e:82:c9:1a:
e1:55:6e:72:72:f1:5a:d6:bd:c5:97:f4:a0:e7:1f:
58:92:c7:58:3b:d4:58:e4:1f:2e:7f:6e:2a:98:2a:
ba:da:3a:d1:95:2e:3c:50:e2:30:4c:ea:0e:fc:71:
b3:de:a0:76:29:57:86:c0:a9:78:fa:f6:35:90:dd:
c9:d0:14:61:9f:8c:61:bb:5c:db:30:74:ce:bb:86:
27:15:c9:9c:2d:87:ae:94:cb:0e:17:32:4e:29:dd:
fa:3f:bf:59:fc:60:59:6a:0a:9a:76:7b:9e:89:01:
fc:45:45:8b:7b:03:72:7d:d0:25:08:06:be:eb:14:
0f:19:a7:a5:2b:c9:9b:dd:f5:47:33:f0:82:6f:82:
42:7c:2a:27:58:de:ca:bb:cc:d4:a8:c4:6d:54:7d:
18:d4:e7:82:e1:0a:51:f0:7f:1f:fe:e5:36:4d:8d:
9e:2d:50:78:86:80:21:f4:32:45:90:d8:bb:55:ca:
20:2c:8d:f6:a3:70:5c:fd:be:e0:71:a9:53:70:9e:
db:5f:7a:8e:73:61:10:6c:2a:30:0b:39:0f:e5:91:
2b:84:33:dd:ba:98:3d:c6:ba:ce:24:ac:01:f8:40:
e4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:52:4C:6C:D4:5D:83:BC:C2:E0:92:EF:FB:97:C7:43:A4:C2:C4
X509v3 Authority Key Identifier:
keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/H6hSTGzUXYO8wuCS7_uXx0OkwsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.106.0/24
IPv6:
2a14:7cc0::/29
Signature Algorithm: sha256WithRSAEncryption
3d:ad:ae:8d:6e:2a:07:37:af:43:64:15:fb:c1:0a:c9:97:f1:
4e:8c:8f:41:db:1d:c7:08:3e:b2:16:62:92:0c:e4:6a:3c:2a:
a8:4d:91:df:b1:b1:a6:e6:d9:54:d2:1f:41:a0:77:37:6d:1d:
16:c6:11:c6:2e:74:3a:13:30:f7:9d:d2:e8:47:75:0a:62:16:
64:ac:d6:b8:9c:98:ad:80:9b:46:29:22:31:c4:c7:09:93:01:
3b:f2:65:35:93:59:b9:9b:b0:47:8f:71:52:a1:bb:03:30:75:
f9:b7:84:5a:8a:8f:5b:c5:5c:c0:2e:20:66:5d:ff:70:76:1f:
e4:2e:af:31:5d:05:de:e2:b6:e1:50:1b:88:a8:c7:a5:dc:d2:
96:78:38:84:3a:9d:57:10:84:11:be:75:7c:b7:51:f6:37:e0:
83:70:61:e9:5e:48:da:6b:7d:02:c8:16:1b:85:90:b7:51:77:
01:be:d4:5c:89:6e:15:2f:39:1e:c7:ab:95:5b:bf:2b:69:6e:
a2:48:79:ba:5f:3c:a2:9d:cd:53:f1:72:a0:05:d1:3d:ae:13:
da:78:37:76:77:68:4c:88:bb:59:ce:cd:06:f6:75:38:00:76:
c4:e7:d4:01:f4:d4:d5:59:c1:c9:a1:16:74:42:cf:21:d5:0f:
c6:80:2a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:49:23 2025 by rpki-client