Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/4eCNH1R9CpTtO2SN6ER3IXHq3JI.roa
File: 4eCNH1R9CpTtO2SN6ER3IXHq3JI.roa (raw, json)
Hash identifier: Q9zvCe6qoTuNlUxMuJhOFGoFxuAGyHxDdlXdoOlYcPc=
Subject key identifier: E1:E0:8D:1F:54:7D:0A:94:ED:3B:64:8D:E8:44:77:21:71:EA:DC:92
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 019427B54BAF0DDF8D85D796E15EFEAB9009
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/4eCNH1R9CpTtO2SN6ER3IXHq3JI.roa
Signing time: Thu 02 Jan 2025 15:49:40 +0000
ROA not before: Thu 02 Jan 2025 15:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 194.246.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4b:af:0d:df:8d:85:d7:96:e1:5e:fe:ab:90:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Jan 2 15:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1e08d1f547d0a94ed3b648de844772171eadc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:2b:ad:b2:23:89:68:84:74:28:d9:b7:0a:
00:22:aa:f3:27:dc:3d:1d:2f:6c:ab:af:03:31:54:
70:7d:94:83:0e:b1:ce:c2:1a:2e:36:d4:e1:cb:44:
ba:b2:e4:60:df:94:e5:12:e2:e1:a8:72:f1:59:43:
4d:1a:f9:bb:4f:cb:d9:ab:6e:c2:d6:50:4c:a3:f6:
c4:ed:08:21:58:7c:e2:c6:14:6d:59:dc:6a:68:4f:
c3:4a:af:c7:19:47:87:10:f2:35:d5:14:51:7a:04:
22:65:03:1c:8a:ed:ca:a9:23:f9:a7:08:c9:ed:36:
7c:2e:0a:b1:3e:f7:01:8f:df:20:16:68:12:b5:b4:
e2:2b:3c:64:1a:c4:c6:a8:ac:a4:da:e4:79:8b:96:
1f:31:8d:2b:3d:05:54:f9:77:58:bd:c8:d0:76:cc:
a1:4c:6f:99:5d:4b:fb:c7:90:76:8e:69:ac:19:58:
f2:87:77:39:0a:a4:70:5a:4d:ab:30:25:ff:79:d2:
ab:d3:56:29:7b:ee:43:0d:61:a0:e6:ca:d6:10:45:
28:74:c6:37:84:11:23:98:4e:a6:a6:29:aa:2a:d3:
73:9f:6a:52:69:89:ea:92:d5:74:be:7f:a3:c6:6d:
fc:54:24:9b:8a:4e:f1:0a:ea:c9:76:90:de:d8:4b:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E0:8D:1F:54:7D:0A:94:ED:3B:64:8D:E8:44:77:21:71:EA:DC:92
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/4eCNH1R9CpTtO2SN6ER3IXHq3JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.34.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d0:d5:2d:68:9b:88:b3:37:4b:c1:f3:c4:67:69:81:72:67:
fa:96:12:dd:a8:9a:0d:a9:2b:85:a8:59:c9:a0:dd:59:e6:85:
94:99:8e:e5:2a:fa:35:d3:11:74:e7:ee:a8:66:30:8a:92:98:
f2:6e:ab:f3:d8:52:38:75:2d:5b:10:56:00:a3:67:1f:ab:0a:
d4:8e:a3:b6:35:06:9a:79:5c:70:8a:a3:f4:00:cf:83:53:2c:
86:05:39:6d:2c:d8:d2:6e:19:8c:2c:3f:0d:5f:bc:f2:6d:12:
fa:d0:0d:74:83:a2:1f:48:3d:d2:ba:1c:62:20:a5:a9:83:06:
73:60:d4:eb:84:d3:22:d2:4a:bc:0a:bb:05:c7:43:28:af:e6:
a9:34:8e:35:3e:b1:4a:0c:88:41:0c:16:cb:f3:d6:d1:e2:e0:
ef:e8:68:71:dc:e9:dd:3f:31:f7:ad:a5:d7:bd:3c:7a:d4:86:
bc:24:d2:3a:1f:e4:10:31:c5:46:f6:fa:2e:0d:d7:66:cb:ae:
47:52:6d:7e:35:f8:de:e5:06:30:ab:ce:40:a1:89:ac:00:44:
73:71:bc:99:43:6b:5c:fd:c7:c9:c6:30:6b:c5:53:35:dc:99:
f3:f9:82:32:ab:d6:bb:14:62:6f:62:8e:89:b2:51:e2:99:17:
5e:57:26:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:17 2025 by rpki-client