Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/7qLq7aTWNHbxDovy4cDmNUB81ok.roa
File: 7qLq7aTWNHbxDovy4cDmNUB81ok.roa (raw, json)
Hash identifier: 45Whc0u7xWoUwZs881UVCIUC5K/sXDTJpbpU9JZ3Gm0=
Subject key identifier: EE:A2:EA:ED:A4:D6:34:76:F1:0E:8B:F2:E1:C0:E6:35:40:7C:D6:89
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 0194274812FE48EA72FD796DC56AF76466D5
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/7qLq7aTWNHbxDovy4cDmNUB81ok.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30848
IP address blocks: 94.185.124.0/23 maxlen: 23
94.185.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:12:fe:48:ea:72:fd:79:6d:c5:6a:f7:64:66:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eea2eaeda4d63476f10e8bf2e1c0e635407cd689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a2:22:9e:73:28:5f:2d:c4:ef:db:8c:6b:38:
f8:6a:8e:5e:5e:59:bd:f9:0c:03:3a:6c:fe:07:9f:
d8:92:61:44:a1:a2:d3:25:ac:4e:93:16:24:44:1c:
3b:b3:2f:3f:3a:93:ee:9c:7f:7c:d2:52:65:3d:f2:
62:2c:d3:02:ce:a5:d1:e5:63:91:99:9c:62:a0:3a:
92:f9:87:ae:ef:46:de:75:37:09:eb:cc:c4:f2:dc:
8c:89:08:50:8a:60:f3:81:6c:8d:8a:20:25:f9:be:
31:b9:49:90:7f:1d:fc:b2:a2:af:c9:a8:b9:bc:23:
c6:ab:a2:1c:ba:d1:11:5f:4c:a1:98:bb:b5:43:de:
02:af:03:43:71:c1:f4:cf:10:9c:81:87:df:aa:b5:
90:51:86:8c:e1:fb:6f:a7:52:bb:c9:eb:20:02:c8:
c2:29:fc:1a:d6:5d:2c:04:c1:7e:11:66:4f:66:7a:
c3:4f:69:1f:2a:45:92:12:fd:f0:60:b4:38:60:cb:
79:cb:89:a1:e7:e7:00:20:ff:54:43:80:69:34:71:
80:22:63:78:ad:06:6b:07:15:b5:85:55:3a:91:79:
ea:7f:e7:d8:18:54:ef:7e:82:27:0d:52:99:f1:26:
47:3e:7c:a5:82:3c:4d:82:98:83:7b:75:67:5b:04:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:EA:ED:A4:D6:34:76:F1:0E:8B:F2:E1:C0:E6:35:40:7C:D6:89
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/7qLq7aTWNHbxDovy4cDmNUB81ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:87:94:c6:86:7a:47:27:41:2a:bd:b9:b2:2c:d0:02:28:ff:
76:d5:1c:08:df:35:8a:fb:71:af:65:12:a6:df:65:b1:9d:17:
1e:31:b4:ee:21:54:cf:d5:5a:4c:b0:20:a9:e4:eb:81:99:d2:
5b:a2:5b:ce:b1:be:12:ea:f7:bf:dd:84:11:22:3f:75:ee:8b:
42:8c:9b:7f:37:c3:2b:f5:73:d9:aa:14:4b:c4:12:1e:8c:2f:
36:a5:ec:66:a2:99:d1:1d:a7:8d:20:a7:fd:91:30:80:f2:5f:
50:2c:86:5d:15:3d:0c:60:37:24:dc:82:5e:9e:cc:89:15:00:
f0:13:93:09:d7:10:3b:5e:45:88:49:37:61:b4:f1:5b:f2:aa:
ec:25:3c:82:25:10:7a:2b:5e:ee:d4:3e:b3:73:0b:9c:70:0d:
2f:e4:d4:8a:a9:ce:ef:9e:4f:33:b6:99:5d:9e:b2:2b:39:ab:
ec:d4:00:68:bb:09:0b:b8:fa:64:eb:f9:b5:3d:a7:18:f8:42:
85:6d:01:fc:7e:fb:84:ed:11:d9:df:71:9d:44:b7:0c:b9:cd:
f6:e8:44:59:d9:78:ce:08:d1:56:ed:62:93:6a:89:11:9c:41:
e3:0a:ef:64:bd:0b:f8:7e:73:ca:a8:4f:4d:87:a7:6c:a1:0c:
9c:b3:6f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:18:12 2025 by rpki-client