Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/H75yNsZV8o-iuN_dRwaBecVqpcQ.roa
File: H75yNsZV8o-iuN_dRwaBecVqpcQ.roa (raw, json)
Hash identifier: 03sxJ3tLp8f6GmJCfpbqvc7OMqBO9bexIigwSbLh2vQ=
Subject key identifier: 1F:BE:72:36:C6:55:F2:8F:A2:B8:DF:DD:47:06:81:79:C5:6A:A5:C4
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428276FFFA144B172FB9A8328EC4CC9D2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/H75yNsZV8o-iuN_dRwaBecVqpcQ.roa
Signing time: Thu 02 Jan 2025 17:54:20 +0000
ROA not before: Thu 02 Jan 2025 17:54:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214238
IP address blocks: 212.192.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:6f:ff:a1:44:b1:72:fb:9a:83:28:ec:4c:c9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fbe7236c655f28fa2b8dfdd47068179c56aa5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:2c:4f:95:50:7a:e6:2a:d0:9a:7e:cd:f1:
f0:05:d4:5b:30:6f:17:5a:92:e5:36:f5:82:6a:ff:
f5:be:54:4d:7c:df:ff:5a:6b:0f:e3:16:04:ff:7b:
58:c5:d1:1d:e1:ea:04:f6:1d:d9:4d:b5:ab:88:78:
d2:78:d7:e0:ba:63:cf:2a:ad:7c:32:ed:33:de:27:
8d:08:5c:50:34:25:6b:4d:1e:af:c9:a4:74:3d:e0:
c6:44:86:67:f9:f2:9d:46:dc:47:38:fe:d0:ac:49:
d4:4e:95:41:bf:35:64:b5:a2:e6:30:3b:9e:3f:12:
4b:01:2a:6b:ad:10:7c:bc:81:c0:08:72:03:02:7e:
94:ab:8b:fb:9e:1f:f4:95:a4:19:e5:59:5c:18:df:
9b:72:da:98:04:a0:18:6b:e0:80:fd:fa:d2:c4:e6:
a7:c4:94:9a:79:50:2c:d1:ad:75:d6:f8:cf:bb:5e:
21:c5:18:b1:cd:57:bb:20:c7:0c:2a:00:ef:13:c8:
d1:be:6c:d3:d0:ce:31:30:f4:ec:2e:39:92:2e:32:
6b:f5:0e:72:62:16:a4:3c:66:2b:3b:d0:71:83:11:
68:b9:3a:7c:89:ca:89:00:ad:b0:4d:43:c8:f8:67:
0a:ae:6c:3d:57:37:47:f8:35:2e:33:40:e4:43:51:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BE:72:36:C6:55:F2:8F:A2:B8:DF:DD:47:06:81:79:C5:6A:A5:C4
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/H75yNsZV8o-iuN_dRwaBecVqpcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
91:23:0d:4f:e9:62:ec:4e:9f:1f:9f:a7:be:57:7a:bb:33:7b:
df:fd:9f:fe:6e:56:e8:1b:c9:9a:62:45:06:ec:0d:e5:08:e9:
1f:5a:6f:11:db:90:30:29:1a:b6:50:98:9f:69:a3:b7:17:26:
f9:fb:a8:75:89:07:67:ad:f6:42:61:01:59:ee:c0:0a:56:3c:
aa:9a:12:39:17:98:94:2a:1e:bd:d8:fb:fe:3d:95:7c:79:30:
ce:49:6c:bc:26:c6:47:d8:9b:cd:23:8e:af:48:63:78:8c:18:
dd:73:6b:0c:cb:ff:df:fa:b3:07:04:a2:d7:0b:67:93:52:f1:
c0:51:a8:9c:80:e3:e6:58:ed:10:5e:4e:c5:b4:a4:e0:c5:80:
9d:21:bb:cc:4b:24:90:86:f8:75:5c:78:63:52:97:8b:5f:07:
cb:32:6f:15:81:c3:c5:64:ae:5f:54:ce:db:65:dd:6f:6d:44:
6c:76:d6:4e:cb:3d:64:38:6a:69:7c:9a:4b:30:e9:f4:15:72:
23:ad:f2:85:d8:e6:6f:72:2f:71:95:75:3a:78:88:35:9a:93:
b2:16:5b:51:d8:cb:a1:a8:15:a4:77:96:41:b0:1f:3b:dd:a6:
c3:b4:bd:54:b0:3d:c6:18:c5:09:50:68:98:5b:bd:35:40:d5:
c0:0f:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 13:02:30 2025 by rpki-client