Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa
File: e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa (raw, json)
Hash identifier: HGLblEw2HtaEUIxL5jALfeyy40mvJ9+sofWltk0ijmU=
Subject key identifier: 7B:AA:A0:73:80:F4:2C:E6:E2:04:39:06:F8:96:1E:14:9D:17:D5:1F
Certificate issuer: /CN=381203337b0cd06fcfc045588f097cbc24153a75
Certificate serial: 0194258F518E7A8FB7F1DB63C996799E0370
Authority key identifier: 38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209846
IP address blocks: 192.16.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:51:8e:7a:8f:b7:f1:db:63:c9:96:79:9e:03:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381203337b0cd06fcfc045588f097cbc24153a75
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7baaa07380f42ce6e2043906f8961e149d17d51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:a4:64:85:ce:eb:bd:cb:77:db:e0:a5:7e:
4e:b6:be:d6:75:74:7a:e4:51:d5:d1:77:aa:42:fc:
d1:53:8c:9b:6c:44:7c:6a:a2:b9:56:a2:a0:17:e7:
58:13:12:0e:01:a4:43:d8:fa:4e:33:78:c0:0a:7e:
7c:41:17:6a:01:97:00:3a:0d:fa:1d:f1:d7:84:b6:
c5:ce:19:71:9a:45:83:c8:2c:b3:fa:4c:3a:22:99:
64:41:ca:66:ef:7d:92:73:64:3a:d6:2c:37:27:8b:
d3:0c:7a:b8:ee:61:1f:2d:57:f9:75:17:53:ea:b5:
50:e5:4f:f2:09:b7:8d:dd:47:48:40:cc:05:ee:99:
05:83:20:cc:b2:bf:52:fb:e7:e5:9b:96:98:3d:c4:
b8:de:10:3e:4a:c4:4b:bd:69:24:0b:16:b1:5e:a0:
5f:20:40:ef:4f:2a:02:fc:56:bf:86:9a:58:7a:ae:
19:cc:45:a6:f7:d4:87:60:8c:4e:0b:be:32:a5:5a:
87:81:66:6a:9c:83:c9:f1:89:58:7a:b7:ba:b0:59:
78:7e:36:66:64:58:19:90:60:eb:72:43:01:8c:be:
c4:a4:1f:47:61:23:36:b1:07:82:03:5f:eb:54:1c:
99:d1:e1:b1:76:81:2c:34:d3:a5:7e:09:d7:5b:b6:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:A0:73:80:F4:2C:E6:E2:04:39:06:F8:96:1E:14:9D:17:D5:1F
X509v3 Authority Key Identifier:
keyid:38:12:03:33:7B:0C:D0:6F:CF:C0:45:58:8F:09:7C:BC:24:15:3A:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBIDM3sM0G_PwEVYjwl8vCQVOnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/e6qgc4D0LObiBDkG-JYeFJ0X1R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4cf5ad-a6ca-44ff-9d18-c5c64b13421d/1/OBIDM3sM0G_PwEVYjwl8vCQVOnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.16.137.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b6:d7:bb:55:07:93:c6:9a:41:02:47:2e:fb:7a:0a:1c:65:
28:ea:d6:3e:c3:fa:46:87:98:f6:e1:d0:60:ed:cd:ec:b1:3b:
9d:62:6d:42:64:94:7a:71:57:cb:d2:34:6f:c6:13:e2:32:53:
55:5a:85:64:9c:6f:8f:66:65:b5:32:c3:9c:1f:eb:61:fe:7f:
c7:36:a8:20:86:0c:b7:c5:4e:d5:e7:66:a2:5a:8d:49:9f:97:
28:1a:15:bf:de:b1:fa:a6:2e:b2:70:94:66:53:e4:81:08:57:
6b:60:04:95:fd:04:e0:18:1f:3f:a8:61:9c:d2:9d:a7:d8:ba:
d0:ec:8e:7c:01:b2:15:6a:43:68:7d:fb:a8:9e:37:3c:a9:fd:
15:b2:f9:64:1f:ef:07:21:13:5b:ac:d4:f3:c3:ca:f3:62:a4:
e9:2b:ac:81:8d:48:d4:f1:c2:d3:4e:73:b5:b9:be:73:53:91:
2d:c2:15:e3:80:74:d5:30:17:69:a0:b0:46:cf:22:dc:ce:fc:
98:51:15:13:92:80:4e:30:e4:d4:b4:6a:65:b9:89:b9:9e:ab:
02:6b:a7:80:db:17:d0:a0:3d:a3:54:db:07:5e:8e:40:9b:5f:
3d:ea:d1:e2:26:0d:30:8a:b4:55:ec:27:7d:7d:60:76:b8:e5:
78:a1:5e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:51:20 2025 by rpki-client