Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa
File: S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa (raw, json)
Hash identifier: t4T7IISC3qIqOuSVfllwo9m13olig0aDm52s2i83g4s=
Subject key identifier: 4B:A7:7A:65:F4:2D:62:09:53:73:93:EA:05:8D:99:D5:AB:64:90:58
Certificate issuer: /CN=50f88e05c898796c82ff0147568816e933420e18
Certificate serial: 0194282730585979F4CF84012FE95540940A
Authority key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa
Signing time: Thu 02 Jan 2025 17:54:04 +0000
ROA not before: Thu 02 Jan 2025 17:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 178.18.28.0/24 maxlen: 24
178.18.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:30:58:59:79:f4:cf:84:01:2f:e9:55:40:94:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f88e05c898796c82ff0147568816e933420e18
Validity
Not Before: Jan 2 17:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ba77a65f42d6209537393ea058d99d5ab649058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:45:2a:2c:8a:0a:dc:56:4e:29:16:bb:60:
a4:40:ef:b2:ef:01:88:09:bc:94:41:ba:57:17:34:
4c:84:c4:a2:d7:8c:ea:f2:c8:c1:33:1d:4f:bd:7d:
1a:af:59:89:41:bf:44:b4:12:a4:68:74:d6:5e:2f:
75:91:c8:64:a0:6c:53:89:79:51:c8:cb:74:96:5b:
1f:36:9c:4c:75:f2:5f:2e:69:64:8d:c2:67:39:fb:
44:fe:95:de:e9:89:3a:0f:10:d1:1d:86:2c:56:55:
ba:cd:b7:fd:e3:b0:0c:36:66:62:6d:80:2b:76:12:
56:a8:e7:be:14:75:a5:4e:7d:ec:d6:d3:13:03:83:
8c:63:31:fe:18:f2:6c:f3:a0:a3:a4:46:30:a3:87:
9d:a8:90:bc:3c:55:97:15:36:14:4f:70:f5:7d:bf:
1f:cb:12:fe:ea:34:56:68:7c:f2:83:9a:24:e5:bf:
d9:0e:f6:56:28:e9:20:05:be:49:5d:b7:0f:78:45:
37:89:d4:be:89:d9:39:fc:8c:c0:be:50:c5:0f:04:
71:f2:0a:a7:30:b0:88:30:2c:8b:81:bb:46:e9:6e:
ef:61:d0:8a:89:9f:10:c4:98:58:64:14:7d:5b:04:
38:ea:e9:f8:05:6e:2a:c4:af:8c:d3:48:fb:91:c8:
57:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A7:7A:65:F4:2D:62:09:53:73:93:EA:05:8D:99:D5:AB:64:90:58
X509v3 Authority Key Identifier:
keyid:50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/S6d6ZfQtYglTc5PqBY2Z1atkkFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.28.0/23
Signature Algorithm: sha256WithRSAEncryption
75:ba:53:4f:bd:1b:af:64:8a:56:fb:13:f9:9c:81:0d:ed:e1:
15:2d:38:4f:d5:b1:7f:93:07:51:58:84:6f:08:c8:21:64:ba:
64:de:3a:ec:f1:2c:4b:52:28:f0:e3:59:87:7c:cb:20:24:72:
7e:86:44:ac:9f:ea:ab:05:9f:18:3d:cb:a3:33:e9:39:25:1f:
7b:39:79:0a:ef:1d:7a:98:e0:21:df:18:82:79:9b:34:d6:35:
dd:75:00:30:b6:97:10:ff:44:b8:4c:b6:26:1c:b1:59:4a:2d:
6a:ab:a7:39:1b:dc:9e:16:2c:2d:b0:88:e2:51:8c:0e:de:aa:
6e:b7:32:84:b5:ed:bd:da:ac:1f:f3:23:85:23:ad:c8:66:69:
99:8e:47:eb:ab:44:31:4a:93:aa:26:5f:fe:fe:1b:cd:ea:0f:
bd:8b:53:7a:cc:12:eb:89:20:00:d8:ca:22:b4:77:31:40:de:
64:21:63:c8:93:c0:a8:ae:61:89:66:62:95:1a:4b:82:86:d6:
9d:26:22:3e:8d:81:ce:91:6d:07:58:31:82:dd:5e:91:07:8f:
e9:3b:fe:1b:04:0d:9b:99:3c:56:69:3b:9e:8e:6d:46:bc:b1:
91:0b:e4:e2:62:55:8a:8d:3a:21:25:a5:c6:1d:3c:40:6a:3d:
b1:ce:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:44 2025 by rpki-client