Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/w6oGfXG1HUlIcmR_T7GHYm--FfQ.roa
File: w6oGfXG1HUlIcmR_T7GHYm--FfQ.roa (raw, json)
Hash identifier: rZN+V6wHEkftLsHN04aNlus1y0z/GKLyR3A/cwLc9Xg=
Subject key identifier: C3:AA:06:7D:71:B5:1D:49:48:72:64:7F:4F:B1:87:62:6F:BE:15:F4
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01942746BFBBFD3D63F72C93ABD9DDECB224
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/w6oGfXG1HUlIcmR_T7GHYm--FfQ.roa
Signing time: Thu 02 Jan 2025 13:48:55 +0000
ROA not before: Thu 02 Jan 2025 13:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216082
IP address blocks: 212.68.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:bf:bb:fd:3d:63:f7:2c:93:ab:d9:dd:ec:b2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 13:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3aa067d71b51d494872647f4fb187626fbe15f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:63:6f:68:8c:04:9d:6e:36:d9:3a:53:12:
61:6f:e2:55:62:8a:e1:13:75:27:cc:c7:1d:86:fb:
ba:6a:1e:11:54:66:04:8e:21:c6:78:78:7f:ed:47:
8e:1f:87:5a:79:7a:9e:ec:68:96:50:cc:b1:bc:3f:
47:05:75:49:90:60:45:34:a8:dd:20:24:da:c1:2a:
2e:ff:24:56:2a:b5:e5:5d:07:b8:b2:77:82:21:15:
8a:92:e9:ae:fd:ac:82:0c:20:f8:f4:48:d6:c5:53:
c7:79:fc:87:79:e8:00:c6:17:ce:d3:14:e3:7e:a6:
1d:78:18:40:a8:8c:02:3f:fd:d6:e7:32:28:66:13:
a4:87:e0:f5:4e:e0:ef:9a:04:a1:11:f4:4d:52:5b:
2a:92:18:13:c9:0e:18:bd:51:f7:bf:e6:8c:67:64:
fc:ba:db:1c:44:c3:71:31:12:11:f5:43:44:1b:3c:
ff:83:7c:10:7b:f8:31:ae:bf:11:75:a3:7d:7f:2b:
3c:c6:88:a8:1b:0c:e3:44:9e:85:b6:de:de:a9:8a:
9c:44:e0:c6:55:bd:b5:98:75:d8:95:72:95:a1:10:
e3:2d:e9:f9:33:83:9c:ee:73:4a:f2:46:21:62:58:
2c:8e:86:f5:9d:8d:7c:c0:1c:39:ec:ad:1a:d8:ef:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:06:7D:71:B5:1D:49:48:72:64:7F:4F:B1:87:62:6F:BE:15:F4
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/w6oGfXG1HUlIcmR_T7GHYm--FfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.39.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:45:2b:43:39:16:db:87:ce:04:40:81:90:cf:f7:dd:04:e3:
8e:53:50:c3:6e:1b:0d:fd:87:51:e9:13:f7:4d:86:09:8f:dd:
a6:6c:97:42:41:f8:92:1b:89:b0:d2:d6:8a:e0:2d:97:08:c9:
cb:a5:e8:6d:65:a6:65:f8:49:c9:a3:6c:1e:77:13:e1:56:99:
fc:1f:23:36:60:a9:68:85:c3:43:0c:54:e9:8c:d6:1e:ad:af:
78:50:ee:5c:0f:56:59:7f:d3:a1:89:2f:52:f9:96:f8:da:d8:
be:38:5e:88:71:ec:58:e4:05:3a:83:e7:6e:67:84:38:67:fc:
16:fa:e3:ce:5e:42:bd:15:fb:c9:1d:f7:d0:33:cc:da:04:73:
4f:c8:a0:ec:27:8d:68:78:88:85:cd:43:a6:6e:08:46:10:f0:
7c:cd:03:8a:55:ad:e7:9d:6f:df:08:dd:a0:5e:fc:db:9c:07:
ef:52:8c:d0:5a:db:43:09:14:21:26:15:8e:51:70:1f:d9:a8:
2d:3a:77:d9:db:34:5a:c9:62:56:d0:9b:1e:d8:52:07:71:be:
37:10:f5:37:85:89:64:e0:13:3b:be:c2:00:14:3f:aa:91:bc:
07:66:e7:66:0c:12:33:d3:82:bf:00:ff:61:b1:65:b2:a1:d1:
16:88:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:12:59 2025 by rpki-client