Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/9h-8iHFf4wOmtCi8sb1JQBZuZqQ.roa
File: 9h-8iHFf4wOmtCi8sb1JQBZuZqQ.roa (raw, json)
Hash identifier: exzFMu4zDpKXPU4eL1lGyDxeGEPeQKinq99RDRGcm/0=
Subject key identifier: F6:1F:BC:88:71:5F:E3:03:A6:B4:28:BC:B1:BD:49:40:16:6E:66:A4
Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Certificate serial: 019425FC02D780F96C6DB8869A9431D74968
Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/9h-8iHFf4wOmtCi8sb1JQBZuZqQ.roa
Signing time: Thu 02 Jan 2025 07:47:40 +0000
ROA not before: Thu 02 Jan 2025 07:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56484
IP address blocks: 185.124.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:02:d7:80:f9:6c:6d:b8:86:9a:94:31:d7:49:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Validity
Not Before: Jan 2 07:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f61fbc88715fe303a6b428bcb1bd4940166e66a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:99:4c:84:03:87:64:d9:09:fd:7e:3a:cf:
ce:ba:41:f8:c2:c8:fe:1e:98:96:e5:3a:5e:cf:93:
f7:4b:e3:b3:39:3f:3a:33:b1:b7:7e:65:77:6a:f3:
50:db:3c:fd:cf:0c:aa:52:36:75:8c:5f:93:be:bf:
80:21:c5:d5:b2:5e:ff:0a:48:11:c6:7e:9a:e7:86:
7d:45:ba:2a:ef:fa:d9:f2:09:9a:58:d1:4c:f3:e2:
2e:f5:15:98:b6:c7:21:d6:ee:5d:03:63:c7:5a:3d:
ca:59:49:a3:ea:45:5a:25:5e:df:57:40:ef:3f:a7:
c6:64:b7:fc:51:b0:e0:30:f0:e6:d7:a0:68:a5:a1:
40:56:56:e2:7e:99:50:20:ba:ec:99:3c:c0:9d:d2:
e6:e5:5f:d4:05:60:c5:73:23:83:90:00:82:d6:89:
7d:48:04:fd:ee:62:db:2d:64:a0:2c:02:74:d3:fb:
37:60:03:7b:70:19:a2:12:8f:60:29:5e:b6:c9:da:
67:9d:bf:31:9c:ce:fc:25:3b:0b:a5:9f:d3:aa:34:
4c:24:be:4a:40:6d:e3:6f:c8:9f:c4:55:0d:67:89:
a3:cd:b2:11:44:19:7e:f8:dd:1a:57:ee:b6:1a:34:
f5:04:38:18:47:7a:a6:9b:a4:4c:af:9e:58:2d:94:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1F:BC:88:71:5F:E3:03:A6:B4:28:BC:B1:BD:49:40:16:6E:66:A4
X509v3 Authority Key Identifier:
keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/9h-8iHFf4wOmtCi8sb1JQBZuZqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.150.0/24
Signature Algorithm: sha256WithRSAEncryption
46:22:ba:9b:0b:1c:9a:38:78:f8:19:51:b0:40:2e:ba:7e:9e:
cb:bd:2f:09:88:85:38:4b:74:65:53:12:a4:ce:50:ef:9a:d1:
07:8b:ad:53:64:61:f5:54:67:bd:ad:ce:d8:ff:55:df:31:19:
de:5a:b8:6a:9a:5e:31:11:9d:fa:ba:07:e3:3d:eb:c9:2c:a7:
2a:6f:4d:ca:51:44:ae:71:06:bf:d5:e3:a2:98:1d:c0:bc:39:
e8:e5:0d:5a:0f:79:44:c7:c9:c7:94:1e:3e:51:b4:68:46:87:
16:e6:f4:89:29:b7:c7:cd:43:62:5d:40:07:67:54:a4:eb:16:
87:52:98:e5:5c:69:d5:1b:a9:ae:27:b9:85:f0:5c:7f:8b:86:
8a:70:21:77:49:6f:4c:8d:ed:ea:5e:90:5b:f8:6f:2b:5a:61:
fd:0f:bf:90:a7:bc:36:f8:22:a1:a9:e0:c1:30:e7:4c:fe:e3:
b8:84:7f:3e:e8:ec:3c:05:ae:8a:c8:66:5c:4c:5d:49:55:29:
aa:69:c1:8d:d2:02:39:6c:fc:db:63:4a:aa:30:97:28:87:da:
37:4d:d5:88:90:cb:0b:4b:bf:86:9c:6e:a7:68:5b:85:c2:b7:
63:35:20:e8:86:02:d2:18:10:88:dd:c3:05:9f:15:38:25:ee:
51:28:78:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:40:12 2025 by rpki-client