Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/aU0Ly4vlCl2a1AlU8b88V0QZMpw.roa
File: aU0Ly4vlCl2a1AlU8b88V0QZMpw.roa (raw, json)
Hash identifier: i0WEsyrwOUpXjeH2PBX2MXTKTehmIYecmcGg2/8/obc=
Subject key identifier: 69:4D:0B:CB:8B:E5:0A:5D:9A:D4:09:54:F1:BF:3C:57:44:19:32:9C
Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial: 019422FC39AE3EF1114B482881DE9DB677C8
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/aU0Ly4vlCl2a1AlU8b88V0QZMpw.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1239
IP address blocks: 194.50.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:39:ae:3e:f1:11:4b:48:28:81:de:9d:b6:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=694d0bcb8be50a5d9ad40954f1bf3c574419329c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:73:55:05:7e:21:61:2f:49:df:d7:4e:53:
d7:7b:67:49:b7:97:60:72:7c:1a:02:d9:3c:53:5b:
cb:ec:3e:20:0b:c7:bc:47:da:f5:05:97:c8:fa:a0:
7b:40:08:3b:62:3c:37:fe:49:7c:af:5e:5e:0a:8e:
a8:94:4f:2a:f5:f8:9c:3d:48:79:e8:1d:f9:04:b2:
c6:69:24:d6:95:87:1a:64:e0:24:09:f2:5e:9c:e5:
20:ea:63:d5:2a:85:1d:c7:aa:54:ee:05:83:70:2e:
33:28:f2:da:a7:6d:4b:c0:7b:c4:ec:3e:43:03:4b:
a0:38:35:3d:63:54:e5:b9:8f:65:b7:53:0e:83:c7:
1f:af:66:8a:f6:d2:d0:c7:30:4e:4f:85:b8:e6:84:
b7:70:f6:0f:d9:f1:99:48:a5:df:d5:64:24:4b:3f:
9c:64:c8:3f:02:5e:96:05:a3:82:a8:fb:f2:33:2a:
f5:99:e4:c8:b7:0c:49:40:53:dc:82:01:68:f4:8c:
39:1b:2d:bd:7a:9b:fd:56:47:38:3b:0c:75:58:c8:
c7:f0:bc:af:aa:da:c8:c9:fc:b2:94:37:cc:33:20:
64:19:eb:15:90:96:c7:ea:d6:4c:68:70:5a:26:a3:
7d:83:9f:b0:c3:5b:c4:c3:0e:2a:04:ac:23:b6:eb:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4D:0B:CB:8B:E5:0A:5D:9A:D4:09:54:F1:BF:3C:57:44:19:32:9C
X509v3 Authority Key Identifier:
keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/aU0Ly4vlCl2a1AlU8b88V0QZMpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.144.0/22
Signature Algorithm: sha256WithRSAEncryption
93:82:d8:4c:34:0a:9e:93:eb:55:7e:af:8c:00:c6:d2:1d:23:
b2:c1:f3:eb:2e:56:21:fd:6d:20:01:fe:b9:e7:07:fc:51:16:
0c:e2:cc:c5:f3:fb:33:f8:69:8d:44:ec:9b:35:23:15:3e:b3:
59:20:1f:e7:f3:03:7c:fa:23:d6:e5:35:bf:f5:d2:6a:69:d2:
38:7f:80:d4:1f:94:1e:ba:07:12:c0:20:29:1b:63:5b:9f:90:
51:08:39:15:f2:6b:82:ba:c0:ea:0b:3a:fc:ee:ac:24:a8:ed:
f4:19:be:21:75:72:e3:28:36:96:bf:7c:a2:6d:7c:20:73:d1:
66:ff:87:a1:56:9b:d8:0c:62:da:43:aa:3e:4d:5b:06:c2:9b:
51:9a:4b:88:a4:f8:59:d6:ea:cd:25:23:2e:22:f2:57:77:02:
5b:8b:83:16:af:f6:1b:e8:8f:ef:d5:08:1d:9b:6a:00:02:a8:
99:82:40:df:99:1c:68:6a:d6:b0:c9:bc:6d:63:99:3e:a2:80:
75:6d:06:49:7f:fb:a0:b1:0a:5a:ec:c5:8b:de:ef:7e:69:25:
94:1f:a8:9c:10:92:73:8a:0f:15:38:05:56:a6:69:e0:05:ba:
f9:34:3a:59:bb:dd:a5:90:6e:f9:03:1e:81:2b:76:a7:77:4e:
eb:01:2f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:40:01 2025 by rpki-client