Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kQdkMGoTIS3e-cKuF0JekW3iC4Y.roa
File: kQdkMGoTIS3e-cKuF0JekW3iC4Y.roa (raw, json)
Hash identifier: Tghf1UyoRbsjotOVenZJWgJa7A4Uxn5+xqnkzSar0uc=
Subject key identifier: 91:07:64:30:6A:13:21:2D:DE:F9:C2:AE:17:42:5E:91:6D:E2:0B:86
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0194258F863E53DABB98803CDA3D3037502F
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kQdkMGoTIS3e-cKuF0JekW3iC4Y.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 195.178.151.0/24 maxlen: 24
212.111.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:86:3e:53:da:bb:98:80:3c:da:3d:30:37:50:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=910764306a13212ddef9c2ae17425e916de20b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:4f:14:8f:23:73:18:66:9b:05:e1:e6:d8:
98:54:43:7f:c9:89:76:88:19:6f:72:5e:43:a0:c6:
0d:f2:f9:3a:2d:9b:9f:d1:83:2d:22:f5:5f:f3:27:
06:34:35:67:e4:9a:df:7e:6e:1c:33:de:9a:b5:20:
bf:4f:a8:91:cf:a5:e2:73:d5:38:11:98:18:76:83:
87:bc:38:12:e6:64:c6:ed:2b:ac:d4:73:98:2f:52:
d8:6f:9e:f0:1f:e2:01:7d:99:ef:ad:aa:a8:4a:b8:
f6:d5:e9:9a:a5:a1:bd:c6:4c:47:e0:e7:21:76:db:
97:d1:3f:95:54:5c:82:09:9c:d6:05:e2:db:0d:5d:
40:bc:bb:7a:e5:d7:f9:5a:05:1e:75:20:fb:99:d4:
e6:5a:70:91:c1:fe:cf:23:9d:ec:6e:cd:3f:66:63:
54:9f:c5:7e:ce:cd:b4:97:e7:f6:8a:39:9f:67:58:
78:ef:54:40:2e:af:a2:75:5d:b8:4d:37:73:b5:10:
5d:1f:1a:ba:f8:4b:df:c2:54:af:e2:c9:4c:d2:ef:
42:0d:34:76:87:99:fc:d7:ae:71:71:da:e1:59:7e:
92:f4:2b:c9:2f:33:e3:ac:92:1e:3f:97:96:60:cd:
f2:cd:35:96:61:fa:2e:a4:f6:13:96:8e:fe:d0:19:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:64:30:6A:13:21:2D:DE:F9:C2:AE:17:42:5E:91:6D:E2:0B:86
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/kQdkMGoTIS3e-cKuF0JekW3iC4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.151.0/24
212.111.216.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:de:76:e6:4e:27:18:54:bd:a3:12:6b:26:d2:38:26:9c:e3:
23:19:c5:53:0e:6b:65:ed:ae:d7:bf:9e:8a:d9:cf:30:18:63:
b6:aa:43:c5:8d:09:1e:96:39:ae:f3:00:3e:08:b8:15:3d:5a:
38:ac:7a:47:f5:3a:1c:8a:8a:7d:bd:09:7f:ff:65:c0:00:8d:
15:b3:92:af:79:19:df:45:47:f4:ef:9b:05:76:c2:42:80:f9:
2f:4c:6e:b7:ed:2d:11:ad:bc:90:79:c7:16:5b:30:ff:a0:71:
8e:5c:71:56:bb:38:8f:59:8b:ee:5f:f5:c9:61:de:a5:f8:35:
80:d2:67:21:98:e9:a2:9b:2b:1d:72:ad:40:b8:ba:89:64:3e:
14:8a:f0:45:34:d7:d3:85:86:c5:6a:c8:e9:e3:74:19:86:3a:
51:5d:0d:b2:4d:bf:0b:69:9e:c0:89:a4:ee:ad:2c:d9:8a:ac:
eb:09:d2:c1:39:97:09:54:2a:f0:72:fd:cc:75:11:89:11:86:
f1:77:ce:db:ca:5e:2c:03:bf:72:15:54:49:2d:b8:88:3f:ac:
a0:d4:34:a6:4b:0b:73:66:43:03:71:63:14:8b:af:02:aa:fc:
19:22:a8:95:fa:29:58:a6:9d:0f:e4:7e:8d:12:78:a6:0c:5d:
8b:78:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:04 2025 by rpki-client