Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/lO_bhdVoi0rApHqZUYrR4e0dET0.roa
File: lO_bhdVoi0rApHqZUYrR4e0dET0.roa (raw, json)
Hash identifier: L6ri99HTG/n8zl4aG6bBJmgMqEKOzJ8HTJ12NQEy2Ow=
Subject key identifier: 94:EF:DB:85:D5:68:8B:4A:C0:A4:7A:99:51:8A:D1:E1:ED:1D:11:3D
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 019464A1C765A284A8989FC73311FD279F9D
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/lO_bhdVoi0rApHqZUYrR4e0dET0.roa
Signing time: Tue 14 Jan 2025 11:45:11 +0000
ROA not before: Tue 14 Jan 2025 11:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59989
IP address blocks: 185.100.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:a1:c7:65:a2:84:a8:98:9f:c7:33:11:fd:27:9f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 14 11:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94efdb85d5688b4ac0a47a99518ad1e1ed1d113d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cf:9e:f0:1d:47:cb:7d:2c:52:c7:37:b9:40:
7b:8c:85:19:d7:33:43:6c:2f:4e:db:76:57:04:b3:
67:82:52:db:6b:7c:3a:51:ca:62:39:90:fa:c9:7c:
c5:c4:02:be:b6:21:f9:e3:aa:d4:a6:f1:23:fe:b2:
81:95:07:36:e2:f1:4b:83:90:fe:d5:6f:63:7d:1e:
fd:93:cc:8a:63:ca:2a:d1:e9:92:cd:b4:41:73:fa:
46:e6:36:a5:7c:82:f9:03:f4:92:35:ab:d5:1d:d6:
86:28:c3:b4:f6:9d:63:f1:15:38:e3:fd:48:b2:1f:
f0:81:46:d4:f7:de:8f:ed:21:0a:e2:e9:e8:5a:32:
88:11:be:f9:32:a3:b0:cb:55:d4:cf:1b:33:0f:b3:
69:d4:d2:3d:45:3a:1c:36:37:54:e7:a8:2d:a2:fa:
59:30:a8:f3:a8:d3:4a:cc:fb:ec:50:94:dc:4f:4c:
e1:f3:6f:b7:93:d7:95:36:c9:c1:98:da:af:03:5c:
7f:09:2d:67:ae:30:17:5d:f4:6f:49:f0:04:29:ee:
0f:98:be:b8:dc:dd:3d:dd:0f:3f:1b:dd:64:33:90:
de:53:b9:9d:d2:f9:3d:89:0f:dc:f6:fa:1f:17:e9:
fb:72:43:c6:33:19:31:1c:f8:b5:ff:12:ef:77:9d:
d4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EF:DB:85:D5:68:8B:4A:C0:A4:7A:99:51:8A:D1:E1:ED:1D:11:3D
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/lO_bhdVoi0rApHqZUYrR4e0dET0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.171.0/24
Signature Algorithm: sha256WithRSAEncryption
32:7c:15:81:bd:71:a3:7f:3b:11:4b:56:aa:81:10:9f:b5:eb:
5d:ce:ae:98:01:ce:28:31:39:0b:40:c1:11:3e:07:92:0a:89:
cc:cc:95:c2:74:46:9b:b2:dc:e5:02:09:11:b2:d9:68:d6:bf:
80:99:6d:85:65:5c:42:c5:43:5b:28:17:b5:04:38:c7:b7:a3:
26:e1:e8:a6:eb:fe:f4:eb:49:a4:12:39:43:74:03:43:a4:e7:
10:83:16:18:49:4b:7f:69:6a:6d:89:e7:41:d9:33:7a:0e:b8:
9d:0f:fa:4e:13:b9:e3:d2:ce:76:68:b8:17:01:b6:53:b6:80:
cb:55:a4:c4:f4:a2:e3:26:0a:e4:7f:04:16:1e:d2:15:7a:46:
04:95:fd:37:4a:8a:43:45:3e:6d:db:24:c3:54:1f:b7:42:15:
18:ed:73:1e:de:66:e1:b4:a0:65:d2:8f:30:f9:e2:80:26:f1:
7b:fe:2e:3d:20:7a:45:79:27:1f:69:84:8e:04:de:8b:87:96:
86:3b:4c:7d:52:55:4e:73:4e:b1:57:fd:c8:d9:aa:16:b8:96:
1c:23:2a:f7:ea:e7:7c:47:e8:7e:03:0b:9a:a2:78:08:47:ab:
fb:16:9f:ab:61:3a:55:a6:88:52:60:6f:be:1d:f9:09:99:10:
cb:74:49:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:54 2025 by rpki-client