Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4t9hXLi-AQ25RClVveLqM2wIY3M.roa
File: 4t9hXLi-AQ25RClVveLqM2wIY3M.roa (raw, json)
Hash identifier: yUF8b2UpqonKNmgAOYiMkidgxKjOqzWx7idepEF20yg=
Subject key identifier: E2:DF:61:5C:B8:BE:01:0D:B9:44:29:55:BD:E2:EA:33:6C:08:63:73
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428275C5056E41F9EB463C64DF07E2217
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4t9hXLi-AQ25RClVveLqM2wIY3M.roa
Signing time: Thu 02 Jan 2025 17:54:15 +0000
ROA not before: Thu 02 Jan 2025 17:54:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48614
IP address blocks: 212.192.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:5c:50:56:e4:1f:9e:b4:63:c6:4d:f0:7e:22:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2df615cb8be010db9442955bde2ea336c086373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:83:98:88:6c:54:21:c1:29:5a:a7:be:c9:
7f:b3:50:00:9e:fe:c4:75:f9:33:4a:d1:5f:ca:8a:
12:db:18:a1:c7:93:83:75:9e:b1:aa:88:2d:b4:0c:
2c:a3:6a:13:5c:ca:8a:93:77:42:2f:f4:34:1d:a4:
5c:15:76:f8:98:3f:03:8d:8c:fd:21:d1:9f:82:74:
2a:41:f0:24:75:03:63:67:99:28:11:69:af:0a:72:
65:79:5b:72:c7:24:c8:68:ad:c6:e9:42:03:e4:c3:
5a:b0:5d:77:67:4f:9d:98:49:74:19:de:4a:28:63:
fe:3c:ee:60:90:fb:39:ce:57:40:6e:47:6a:1e:30:
fc:67:59:b9:41:9a:f3:23:19:1b:32:34:49:10:41:
3f:1d:38:91:be:14:44:f9:7a:0b:e7:ae:0f:9e:04:
7f:4b:bf:0e:ac:46:0e:3a:c6:13:8d:0d:99:2d:30:
e7:4a:d5:33:b4:f8:b7:55:89:6a:c4:8c:30:79:d4:
97:a6:c3:eb:88:90:54:1c:4b:36:ad:72:63:ba:78:
a1:d6:b9:17:f2:27:08:54:ec:94:54:63:b7:ef:32:
1e:80:05:e6:1e:a9:aa:ea:54:22:d7:64:cf:bb:ac:
ab:f5:a1:1d:91:9d:a9:b2:93:26:35:a2:cc:d4:ff:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DF:61:5C:B8:BE:01:0D:B9:44:29:55:BD:E2:EA:33:6C:08:63:73
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/4t9hXLi-AQ25RClVveLqM2wIY3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.24.0/22
Signature Algorithm: sha256WithRSAEncryption
37:57:8b:af:99:fa:b5:33:00:49:16:38:dd:7d:3f:4d:84:65:
59:f4:d5:7d:f4:4a:05:77:7c:bb:8c:05:84:6a:7d:cb:46:5f:
df:7b:d1:d8:75:98:fe:07:7c:35:54:cb:4e:24:8f:b1:62:96:
e5:55:a1:ef:78:4c:9e:92:07:d8:c8:ee:2d:98:69:25:f9:29:
d3:88:ba:14:b0:c3:09:78:f6:da:c7:fc:a8:e3:74:bd:22:b2:
32:a2:33:95:9f:49:66:b4:5b:59:76:ce:98:5e:c5:36:ac:a1:
da:e6:d6:9b:11:7e:7b:b5:20:d3:ec:1b:8d:19:58:6c:79:68:
07:6b:b3:e0:ca:3b:5e:1b:3f:ef:90:8a:a3:f1:ee:2a:bc:b1:
94:76:60:05:57:7e:38:66:9c:58:fb:71:f7:f1:39:91:d6:a9:
9f:d7:7b:92:68:97:80:a2:39:e4:9b:52:8d:ec:7b:3c:63:ec:
62:56:6d:99:fe:2b:0b:87:fd:77:4b:1e:0d:cc:8a:a3:49:df:
73:80:35:c7:c1:18:5b:8b:de:f0:81:46:08:01:b8:bf:1f:b0:
f9:f9:bd:8b:7e:e0:58:20:73:0d:f3:80:0f:ce:b4:81:60:dc:
b6:8e:d3:0a:e1:42:16:c7:01:13:ea:80:05:e4:9c:43:db:8e:
1c:7d:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:04:13 2025 by rpki-client