Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/hofEb4DxTmo8-bHoq5_u1SjHWxg.roa
File: hofEb4DxTmo8-bHoq5_u1SjHWxg.roa (raw, json)
Hash identifier: hCqP+IxiyDQrp0AjJaVxMj1A1H2iMztGikQq20Whf3E=
Subject key identifier: 86:87:C4:6F:80:F1:4E:6A:3C:F9:B1:E8:AB:9F:EE:D5:28:C7:5B:18
Certificate issuer: /CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Certificate serial: 01941FFA1A7CA64E2A314AECC792ECB5E399
Authority key identifier: AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/hofEb4DxTmo8-bHoq5_u1SjHWxg.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212605
IP address blocks: 185.184.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1a:7c:a6:4e:2a:31:4a:ec:c7:92:ec:b5:e3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1c29c95d248cbffa744ab34e47eacca73550d1
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8687c46f80f14e6a3cf9b1e8ab9feed528c75b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:4f:f5:af:94:65:8a:a2:a5:15:ad:4d:83:
a8:b5:57:d3:fe:5e:87:8f:cf:65:16:7f:64:ae:37:
63:6d:98:e4:2a:6f:8c:a1:82:77:1d:4a:07:27:c3:
7d:98:dd:73:f9:38:ed:8e:2b:39:1f:65:d2:64:1e:
cf:32:d1:df:5c:5b:b1:19:bb:20:e0:15:61:eb:82:
cc:a0:ed:4a:9d:30:2f:35:6a:c2:ab:e9:99:4f:3f:
8d:13:f5:07:f3:0b:fd:1c:e6:09:e4:5e:ff:bb:7c:
73:48:95:16:b0:4e:b5:0b:b0:c0:5c:b4:65:59:e9:
69:66:f1:28:53:b9:24:55:16:e0:c1:ff:9a:ae:7f:
b5:2f:22:fd:c1:20:54:69:a3:f7:56:d8:03:b5:1f:
30:73:19:9c:55:09:08:79:db:1e:20:7e:d3:1c:e1:
9e:b0:ea:6b:e6:e3:a8:3b:87:fe:e8:76:15:10:83:
f9:d3:0d:c3:44:ec:71:5e:29:a8:15:71:ee:84:fb:
d8:3c:bb:9c:1a:56:73:4c:a5:cd:d4:94:6c:71:03:
e7:e7:94:e9:7f:01:4f:04:9a:56:d1:12:f7:59:4d:
03:1b:b4:0f:3f:3e:b3:bb:c1:c0:1a:2d:cd:8f:9b:
37:19:ca:de:2d:44:51:e9:51:e2:1b:47:33:a9:02:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:87:C4:6F:80:F1:4E:6A:3C:F9:B1:E8:AB:9F:EE:D5:28:C7:5B:18
X509v3 Authority Key Identifier:
keyid:AB:1C:29:C9:5D:24:8C:BF:FA:74:4A:B3:4E:47:EA:CC:A7:35:50:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxwpyV0kjL_6dEqzTkfqzKc1UNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/hofEb4DxTmo8-bHoq5_u1SjHWxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/9aea8c-2199-4d46-91ed-ea66844149ee/1/qxwpyV0kjL_6dEqzTkfqzKc1UNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d6:ae:22:d8:57:77:f6:c9:b6:bd:d9:73:90:d6:4a:d9:75:
65:07:fe:fa:df:33:af:4b:aa:eb:83:3b:19:0f:5e:21:14:2a:
b5:f8:88:70:6a:96:d3:c3:ce:d3:5b:ef:ec:56:00:8d:84:46:
60:66:70:9c:db:2c:aa:6c:94:df:df:22:56:8c:8f:19:09:5f:
e6:e5:68:07:12:58:7d:10:c5:d4:18:0e:df:62:ef:aa:c8:a0:
bd:19:03:ab:aa:00:39:99:8b:de:44:0e:04:db:0a:80:1a:7b:
df:ec:7f:9b:1b:94:61:5a:7c:67:49:36:cb:a8:55:b8:86:89:
3b:08:30:41:89:86:f9:76:a3:b6:ae:95:fc:41:cd:43:8a:2f:
4e:32:21:c3:48:7f:72:a5:7a:f9:07:21:ce:b1:13:55:74:f1:
15:06:54:72:0a:e9:78:45:3c:86:7c:25:5d:27:b9:bc:e7:0a:
ad:b9:c1:1d:25:15:48:a2:f0:60:67:13:2c:f0:b3:98:49:11:
39:f6:e0:64:a5:2b:b5:35:99:08:c2:b5:2d:2c:59:26:1d:b9:
d8:f7:2b:d5:ca:d6:8f:0f:b6:75:53:6b:d5:a4:51:1f:15:21:
88:f9:a7:7c:8f:28:95:33:99:ca:4e:a0:7e:2e:12:1d:b0:2c:
fd:4d:5c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:16 2025 by rpki-client