Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/t2bPxtc37O7_UaSx43VqFjBQeQ8.roa
File: t2bPxtc37O7_UaSx43VqFjBQeQ8.roa (raw, json)
Hash identifier: TQAVmYhnwd2Kv49WbSb4VDqVmwGOcSo0dPabg2IvysA=
Subject key identifier: B7:66:CF:C6:D7:37:EC:EE:FF:51:A4:B1:E3:75:6A:16:30:50:79:0F
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 019423D7E85FAC9376F5B4109F9C542E9FC6
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/t2bPxtc37O7_UaSx43VqFjBQeQ8.roa
Signing time: Wed 01 Jan 2025 21:48:59 +0000
ROA not before: Wed 01 Jan 2025 21:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208099
IP address blocks: 194.124.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e8:5f:ac:93:76:f5:b4:10:9f:9c:54:2e:9f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 21:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b766cfc6d737eceeff51a4b1e3756a163050790f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:0d:a9:52:22:93:f0:16:c9:f0:4f:d6:89:
6c:09:ee:e9:98:8f:89:f9:d3:31:9f:1a:8c:8a:aa:
1e:00:cf:66:97:b9:e1:f6:c7:ac:07:88:1d:70:d8:
b5:e2:42:d0:88:0f:d9:7d:1c:92:2f:7f:68:d9:99:
ca:89:82:87:31:6f:26:dc:d1:fc:a9:17:00:51:78:
c3:e8:08:dc:ee:f5:f0:7c:ce:b5:4b:0f:fe:6c:d0:
da:da:57:04:93:e3:45:90:30:88:99:03:ca:37:97:
22:ed:25:a3:6c:2e:5d:33:c7:13:a8:d4:fe:ad:50:
7a:5f:8e:9a:3b:50:0b:fb:5b:d0:5b:c9:f6:a3:98:
e0:1b:5f:b0:2c:58:41:0c:b6:ba:08:a2:89:83:0b:
12:c7:32:86:e4:8a:38:e8:c5:15:73:91:52:fc:db:
37:b7:f8:0a:74:db:88:88:de:81:1c:99:e7:a5:19:
ee:df:97:d8:36:59:3d:2b:b1:22:28:b8:e0:a2:09:
42:f2:b5:12:ad:c5:2a:12:0f:5e:7c:d2:f9:38:80:
1c:4e:4a:97:db:90:cd:ba:78:4c:ba:1d:4d:57:4a:
93:0f:93:40:7b:b5:c7:b3:9a:1c:92:c0:ad:aa:b1:
e3:67:84:0a:94:37:66:23:3a:fa:9d:0b:47:49:53:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:66:CF:C6:D7:37:EC:EE:FF:51:A4:B1:E3:75:6A:16:30:50:79:0F
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/t2bPxtc37O7_UaSx43VqFjBQeQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:50:47:2f:15:fc:e3:70:2d:f0:0c:c8:56:76:71:67:b8:01:
fe:79:7e:2a:66:e5:aa:3f:a1:82:3c:4d:b5:c8:b6:15:1d:6d:
8b:13:98:33:61:5c:86:ac:c7:05:b6:bd:ea:10:31:44:c0:de:
e0:4f:35:46:6c:17:90:72:ac:24:2f:3e:6a:77:af:25:e3:d0:
54:bb:4f:43:eb:3f:9a:10:3c:ca:aa:dd:96:99:6c:71:ad:25:
be:3a:6e:e9:bf:44:72:93:c9:4d:e3:91:f5:5f:e1:fb:39:ee:
e4:db:c3:f5:87:2b:74:40:f2:5b:74:83:25:41:97:0c:ce:c1:
ba:45:69:d8:2b:d7:bb:2a:59:4f:ff:eb:91:b6:d3:0f:54:99:
6f:bd:c9:93:c9:40:18:b5:01:3c:7c:f7:1d:ac:ac:c3:3b:96:
37:45:15:04:6a:28:27:a0:f0:8a:13:8c:97:a0:ac:7b:8d:31:
60:32:bd:a9:be:56:2c:6e:19:c5:5f:30:33:e7:7f:8d:f8:16:
1a:e4:cf:f5:55:47:ec:34:00:4a:ce:05:51:8c:0e:d7:ed:0a:
ad:74:19:e0:79:06:c8:07:cc:0e:9f:ae:7a:7e:85:bf:21:e4:
de:c8:d5:2e:05:3a:40:1f:da:93:44:9e:23:85:8a:3c:3d:db:
63:cd:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:55 2025 by rpki-client