Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wO_Ehe5EVMVX9-GEuKx1TIgeaCI.roa
File: wO_Ehe5EVMVX9-GEuKx1TIgeaCI.roa (raw, json)
Hash identifier: TA/8BiKlKTerzbTNDkQesF4n/01dWnr0PBDjsRPMANM=
Subject key identifier: C0:EF:C4:85:EE:44:54:C5:57:F7:E1:84:B8:AC:75:4C:88:1E:68:22
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428276A6B9A736ADCF3165F9D618EF926
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wO_Ehe5EVMVX9-GEuKx1TIgeaCI.roa
Signing time: Thu 02 Jan 2025 17:54:19 +0000
ROA not before: Thu 02 Jan 2025 17:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 94.177.145.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:6a:6b:9a:73:6a:dc:f3:16:5f:9d:61:8e:f9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0efc485ee4454c557f7e184b8ac754c881e6822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:28:5b:a2:be:5c:5a:eb:de:e0:2d:37:be:
53:e1:42:60:0d:80:10:3c:5b:78:70:e1:94:1b:44:
1f:b8:07:b9:73:de:0e:69:e7:ea:df:ef:bd:69:44:
c2:43:cd:00:d7:d1:69:2e:a5:16:27:17:d9:15:1a:
7b:1a:62:82:65:95:94:43:ee:c9:3a:8a:8a:a1:cd:
9a:85:52:09:a0:76:10:dc:a2:69:68:a8:e6:55:88:
4f:53:f6:10:96:0c:92:c0:49:08:35:f0:e4:89:b0:
f8:a9:a7:c1:f3:c0:41:eb:e6:2e:02:db:56:55:e2:
e7:b3:74:3c:ad:17:d7:00:6c:aa:fb:10:73:bd:4d:
21:6c:18:38:34:2c:2b:99:09:28:d1:fa:ea:5e:16:
6f:b1:3b:cb:b0:4b:12:b5:ee:06:a3:be:4a:8d:e1:
3d:06:29:6c:cf:a2:ca:d8:84:46:30:c9:d4:fa:e4:
20:d9:65:2e:21:25:c6:51:02:5f:80:1b:d4:34:5c:
ab:d6:f6:fc:ee:e6:d8:e9:57:80:ad:ac:29:c4:fc:
09:3c:95:37:fc:ab:81:29:fa:36:9b:c1:e2:a2:10:
01:18:e0:c9:c2:70:12:04:4e:c0:ac:2b:49:32:3c:
dc:ce:42:4f:c0:12:02:c7:cb:7f:ba:86:8a:fb:8c:
3c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EF:C4:85:EE:44:54:C5:57:F7:E1:84:B8:AC:75:4C:88:1E:68:22
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wO_Ehe5EVMVX9-GEuKx1TIgeaCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.145.0/24
212.192.6.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7d:10:d9:95:56:39:3d:c1:09:00:b0:86:07:74:c4:20:df:
07:7e:51:ab:fb:2e:38:40:cb:3c:09:f9:c5:80:18:58:8f:cd:
1e:fb:68:32:55:3d:52:f9:f5:6a:b1:95:d5:fd:77:16:93:37:
8f:93:c9:74:df:c2:c2:c6:43:bd:63:f2:83:e9:82:cf:a3:f5:
26:9c:6d:96:7b:7c:b4:d9:7b:a8:f1:ed:5f:7a:41:ed:01:31:
77:85:d1:22:65:23:26:1e:b0:c5:ed:53:95:ea:eb:a3:01:4d:
b0:2e:0e:15:55:a3:60:0d:00:23:56:70:60:78:0c:d3:e2:6c:
20:24:08:be:c8:5f:2e:f7:38:4f:65:61:5f:41:68:16:4f:a4:
15:a3:cd:12:7a:60:1a:4e:23:e1:c2:12:ac:37:42:de:4c:3d:
20:b8:da:17:3c:15:67:86:04:8c:46:1e:71:f4:33:96:bf:6d:
66:3a:d0:87:15:a8:66:0e:77:a3:e5:e5:6a:ee:6c:0d:f4:20:
d0:81:43:78:6c:60:85:a1:c2:07:44:54:9a:b8:21:33:56:15:
e7:80:86:37:e3:c2:6e:06:bc:c3:04:1d:64:8f:ee:de:b5:a0:
b1:0d:ad:8d:f5:6c:64:31:2c:c7:29:68:87:c4:c1:95:cd:f5:
1d:99:b5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:46:27 2025 by rpki-client