Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/CEH26SsbgBXa-XRDjPR4dutITU8.roa
File: CEH26SsbgBXa-XRDjPR4dutITU8.roa (raw, json)
Hash identifier: 45+vY3NG1v7bfBUPDZYQRwEM4pvEI9SIrsWhw3tfGJE=
Subject key identifier: 08:41:F6:E9:2B:1B:80:15:DA:F9:74:43:8C:F4:78:76:EB:48:4D:4F
Certificate issuer: /CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Certificate serial: 019424B3BF5825C16AD859A0055FD0F554F3
Authority key identifier: 67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/CEH26SsbgBXa-XRDjPR4dutITU8.roa
Signing time: Thu 02 Jan 2025 01:49:07 +0000
ROA not before: Thu 02 Jan 2025 01:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60465
IP address blocks: 185.30.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:bf:58:25:c1:6a:d8:59:a0:05:5f:d0:f5:54:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67af9014b0dedd2c04840ae385b5339f6c6790f5
Validity
Not Before: Jan 2 01:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0841f6e92b1b8015daf974438cf47876eb484d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:ac:63:31:7f:c1:37:85:9c:1b:df:d8:73:
36:4f:41:57:c9:04:7a:a6:95:2d:77:d4:90:0e:c8:
39:a7:5d:81:11:54:53:1b:af:76:ba:9a:5f:9f:fa:
05:86:ed:c4:6c:06:2a:4d:34:5a:30:97:95:7b:db:
f5:e3:5e:4e:f1:5c:79:dd:4d:f1:02:d6:ab:db:69:
0d:ce:60:4b:ed:46:b7:12:45:3b:5b:26:04:12:fa:
ce:91:e3:c6:99:1d:e6:17:ce:37:cc:8e:4b:b8:f2:
50:35:cc:a4:1f:9f:e1:43:7d:71:76:9d:76:50:8a:
11:20:94:b4:9d:10:8a:b0:13:eb:7c:b1:b1:e6:53:
86:b7:e9:e6:42:66:25:4b:46:be:76:f0:d5:57:19:
37:ba:9c:eb:59:9b:ab:ea:6b:9d:11:60:ee:01:76:
e4:dd:2b:a4:f2:c3:ce:be:0f:4a:a0:71:f1:7d:79:
05:bd:1c:de:1c:54:3e:7b:11:f1:62:fd:8f:be:af:
e5:19:d8:6b:32:5f:b3:b2:5d:54:b5:4d:c6:b7:b8:
e6:38:7a:30:a2:5e:37:63:7e:26:5d:81:60:b6:17:
61:5f:fb:fb:06:c5:14:93:e9:71:5e:0e:0c:14:bf:
33:e8:b5:fb:62:d4:12:24:6d:92:e0:68:e4:ed:d8:
21:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:F6:E9:2B:1B:80:15:DA:F9:74:43:8C:F4:78:76:EB:48:4D:4F
X509v3 Authority Key Identifier:
keyid:67:AF:90:14:B0:DE:DD:2C:04:84:0A:E3:85:B5:33:9F:6C:67:90:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z6-QFLDe3SwEhArjhbUzn2xnkPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/CEH26SsbgBXa-XRDjPR4dutITU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7c66b0-c808-45a1-9b50-5e758e81eff6/1/Z6-QFLDe3SwEhArjhbUzn2xnkPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.104.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:9c:23:1e:af:40:f0:7a:21:ec:87:f7:77:2f:77:e2:13:f4:
f8:d7:ae:b1:84:73:33:4f:d6:e6:89:c3:dd:ff:c2:9f:4c:6b:
51:48:23:8a:9e:f0:5c:ce:af:e6:4f:17:04:6a:4a:7a:a2:64:
d3:49:89:96:88:fa:a6:42:8b:8c:13:2d:56:23:8b:40:34:e3:
4f:7c:85:99:98:16:cc:57:6a:75:f3:0e:06:b6:e4:a1:b5:a9:
34:0e:57:2d:fb:53:74:c7:e3:24:4f:36:88:91:02:79:c7:5c:
79:1e:ff:b3:44:0d:ab:bd:b6:c8:9e:cb:66:03:be:f4:6b:eb:
1c:12:d7:5d:3b:89:97:e6:da:71:99:3c:74:31:de:c8:4a:95:
17:eb:7b:0e:5b:b3:21:d5:5c:3a:5d:2f:90:26:3a:24:b5:7b:
cd:fc:32:6a:1c:bb:d9:79:ea:48:de:69:1c:8e:af:3c:71:68:
d8:20:fe:33:6f:f0:e4:c0:1a:a6:76:31:96:a8:35:e6:af:e3:
7c:81:d0:5e:9e:47:c0:e1:05:07:ba:7d:57:02:fc:51:86:68:
57:f0:99:a1:bb:05:b3:ba:ea:92:83:43:3c:62:df:a6:ea:56:
ae:e2:b2:61:f1:fb:b7:c6:a6:03:9a:6a:b7:4f:12:e0:73:6b:
d3:94:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:19 2025 by rpki-client