Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KuF4ue4WCpo9rkxpmFwrcvdY4Fg.roa
File: KuF4ue4WCpo9rkxpmFwrcvdY4Fg.roa (raw, json)
Hash identifier: mDglcU+ejWF6maeri87nYumCMR5TqAvQ6yrF4fqZWb4=
Subject key identifier: 2A:E1:78:B9:EE:16:0A:9A:3D:AE:4C:69:98:5C:2B:72:F7:58:E0:58
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019493D79540B5812CF5740C06280199CF6C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KuF4ue4WCpo9rkxpmFwrcvdY4Fg.roa
Signing time: Thu 23 Jan 2025 15:46:06 +0000
ROA not before: Thu 23 Jan 2025 15:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51765
IP address blocks: 185.34.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:d7:95:40:b5:81:2c:f5:74:0c:06:28:01:99:cf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 23 15:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ae178b9ee160a9a3dae4c69985c2b72f758e058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:d8:ab:02:d8:b8:18:15:2f:d1:03:86:e0:
fd:69:6b:34:fd:ef:e4:7d:9d:70:bd:2e:0c:54:c2:
8c:85:c3:18:8c:87:f9:91:a7:87:0e:90:49:32:02:
96:9d:f1:9b:7f:2d:33:6a:d6:8b:de:e2:d8:02:42:
08:4e:33:fc:8b:3b:de:5b:6a:55:01:56:06:26:1a:
db:4f:f7:3d:00:ad:1d:8b:69:0c:1d:f6:76:9f:a9:
85:5f:db:20:46:60:e4:a4:51:f5:52:21:ef:52:45:
38:a6:6c:1c:2d:ef:92:8e:08:69:f6:b0:21:16:57:
03:d3:dc:02:46:3e:b2:fa:f3:8d:87:7f:14:d9:d2:
6f:63:35:c5:e5:3b:db:0b:9e:0d:f9:b8:e9:13:69:
8e:84:b3:7c:b9:32:26:fa:96:eb:44:62:0c:df:d2:
c4:ff:1e:63:f0:ac:a9:61:87:a2:a7:46:b4:a1:9d:
e9:e9:32:80:bd:2e:ea:c9:d1:f4:4d:7a:b8:3e:5d:
f7:23:bc:1f:21:43:91:08:86:9c:8a:55:a0:2e:63:
bd:5e:31:c9:16:4d:d6:f9:ef:b4:a3:08:bb:68:e8:
1c:e0:44:aa:00:3b:40:61:ef:1d:66:5c:7d:4e:ed:
ba:be:6c:91:38:d0:0f:78:5f:5b:4d:a2:39:3f:ef:
07:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E1:78:B9:EE:16:0A:9A:3D:AE:4C:69:98:5C:2B:72:F7:58:E0:58
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/KuF4ue4WCpo9rkxpmFwrcvdY4Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.101.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c6:fd:84:c0:f4:83:b1:67:ab:3e:18:b1:62:c9:6e:47:3a:
2a:fe:76:4c:e6:a1:be:29:23:c7:88:d4:36:1f:17:8b:2f:16:
58:2f:e1:31:e9:c2:1d:90:44:a5:e1:28:11:fe:62:5e:ef:5c:
38:8f:23:f4:ac:11:8b:50:92:9d:ed:a2:c4:16:18:60:ff:e0:
f0:5c:eb:e5:7e:d3:a7:a0:36:d2:b7:93:6a:2e:28:54:92:22:
3a:c4:ee:b6:3b:a8:40:4d:b8:86:c3:9f:d4:f9:18:41:9f:05:
a8:28:f4:a7:6c:04:73:fb:4d:9d:42:06:c3:ab:6f:ec:f3:98:
23:a8:c4:a3:ca:85:8f:0c:6f:6a:38:66:d7:f7:67:5d:a8:d7:
79:42:0d:64:c0:53:2e:ea:e7:9b:57:50:1a:39:92:f2:e1:a5:
3b:84:8a:a7:ce:0d:ae:19:68:a9:97:d0:ee:8d:10:f2:de:ff:
af:7c:48:3a:a2:50:43:73:86:21:fe:57:02:45:3a:77:46:ef:
1c:75:fe:0c:72:75:0e:aa:dc:fe:df:cd:0e:7b:e3:23:77:b8:
52:ad:e2:76:01:c8:f7:fa:ad:39:6f:b7:1c:c4:f5:24:ad:c3:
1e:fc:ca:74:68:60:31:dd:ce:b6:6e:04:91:4b:d0:a0:65:ec:
cf:e5:38:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:42 2025 by rpki-client