Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/cHrqG1kNUS1CYIyeDpx1eAA0ZJs.roa
File: cHrqG1kNUS1CYIyeDpx1eAA0ZJs.roa (raw, json)
Hash identifier: zkPVDnObrepzaJvXzbvs6uE0l2sUph/kYKdG56cmSw4=
Subject key identifier: 70:7A:EA:1B:59:0D:51:2D:42:60:8C:9E:0E:9C:75:78:00:34:64:9B
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0194228DACD0F25DDE6428C69B6DFE20AB37
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/cHrqG1kNUS1CYIyeDpx1eAA0ZJs.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203611
IP address blocks: 213.14.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ac:d0:f2:5d:de:64:28:c6:9b:6d:fe:20:ab:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=707aea1b590d512d42608c9e0e9c75780034649b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:c8:07:f3:56:0e:ba:1a:80:93:96:e2:8e:
e9:fc:de:3f:4c:fa:60:06:58:da:67:18:04:8a:dd:
b2:d5:60:ea:7d:77:fe:0f:8d:ee:f9:2b:80:30:d0:
67:c4:01:47:78:77:13:37:ee:3f:31:be:41:d2:05:
e8:50:7b:95:69:c9:37:ae:c1:12:8b:d4:07:93:bd:
4e:5b:a3:b0:0b:1a:d9:67:eb:32:b2:f5:7f:7b:93:
9f:38:71:57:24:3c:40:1c:18:15:95:2e:ae:c8:65:
6a:01:4e:a4:fa:6c:2d:b0:da:e6:ab:9c:50:46:26:
29:c5:ee:0e:04:5a:58:03:2e:6c:c7:a2:6d:e9:dc:
21:ec:8f:1c:69:45:b2:00:d1:d3:b6:7d:b1:c7:36:
74:ff:fc:71:28:b5:cc:04:49:9e:da:fc:68:2d:f4:
4b:57:01:af:6e:98:6c:f5:ff:e6:86:91:8a:e3:d8:
08:5f:72:d2:cc:89:9e:3f:32:da:17:ac:9a:f6:1b:
ac:3c:fa:11:04:66:e7:f9:01:35:9e:c8:18:b2:68:
a9:87:dd:54:f3:d5:a1:cb:d6:39:d2:51:37:95:87:
70:3e:07:e4:31:2c:59:64:56:ec:fb:d2:df:ee:4a:
8c:2a:e6:de:65:6c:20:69:21:f5:e5:8a:92:12:07:
45:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7A:EA:1B:59:0D:51:2D:42:60:8C:9E:0E:9C:75:78:00:34:64:9B
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/cHrqG1kNUS1CYIyeDpx1eAA0ZJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.243.0/24
Signature Algorithm: sha256WithRSAEncryption
72:73:bb:bb:1d:c7:bb:e3:04:d7:5b:90:41:7e:d8:a5:73:e8:
39:e9:d8:21:f3:de:85:0e:cb:d0:37:b0:98:05:a0:61:da:6e:
57:5a:98:db:4a:57:25:4a:de:00:a0:72:d8:f8:2a:18:78:f9:
7d:e8:8e:45:1b:1c:27:a4:67:6e:fa:fc:a9:3c:08:be:1a:2c:
e6:cf:ae:61:71:78:16:57:6a:46:d3:f3:33:f9:50:fa:84:99:
3f:ce:83:0c:df:de:2f:09:a0:58:06:2e:3e:cb:59:cb:1b:85:
69:6b:d1:98:27:5a:fa:ea:78:40:c2:84:3a:87:87:5a:40:c3:
a7:b2:3e:86:11:2a:65:b2:e1:4e:af:d4:5e:29:07:1c:e8:17:
4c:e1:02:f9:e0:23:b7:ec:cb:da:cd:e7:85:1b:60:09:07:90:
c9:2a:b3:22:30:c1:16:ff:a6:65:a3:08:92:d6:9f:74:2d:96:
07:c6:b8:38:fd:7f:1d:41:9f:9e:b2:62:27:d5:20:04:42:3c:
b5:f0:73:d7:03:04:cf:8b:4c:e0:e1:d8:ea:2b:3c:c8:fa:fd:
b3:fb:ca:86:91:0b:84:0b:e9:d7:aa:06:b8:d6:b5:1d:6c:f8:
c9:b3:0d:dd:91:d3:f1:40:3d:c7:05:eb:33:71:9f:27:d2:a6:
8a:71:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:32:10 2025 by rpki-client