Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/Bo8-3iT2LkDa18jomlUWH5mw_LE.roa
File: Bo8-3iT2LkDa18jomlUWH5mw_LE.roa (raw, json)
Hash identifier: 5nJAx1GIzC2LXbuEQ6FRmtjlYW8D/Ir6+ALBKS3Ky+A=
Subject key identifier: 06:8F:3E:DE:24:F6:2E:40:DA:D7:C8:E8:9A:55:16:1F:99:B0:FC:B1
Certificate issuer: /CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Certificate serial: 019427B41ED36A9C2EE3F1EF0BF21F5EDCB9
Authority key identifier: 76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/Bo8-3iT2LkDa18jomlUWH5mw_LE.roa
Signing time: Thu 02 Jan 2025 15:48:23 +0000
ROA not before: Thu 02 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210728
IP address blocks: 194.26.103.0/24 maxlen: 24
2a11:2440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:1e:d3:6a:9c:2e:e3:f1:ef:0b:f2:1f:5e:dc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7607ccc309291dc81b19143d4d3fe28d01c6bebd
Validity
Not Before: Jan 2 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=068f3ede24f62e40dad7c8e89a55161f99b0fcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:5a:d5:8e:10:e5:5b:9f:81:c8:0f:67:be:
ed:07:f9:b4:9a:2d:f0:fa:7c:69:5e:98:f8:f8:11:
9a:fb:c2:a2:28:60:9f:f9:2c:ea:83:db:c1:21:50:
c9:eb:ca:5f:f3:89:84:b8:cc:cb:3b:55:76:a8:93:
62:c0:9c:76:47:f0:22:62:31:7c:19:12:c8:c8:89:
d2:2a:0b:8f:2b:f8:ad:5d:b7:fc:6d:28:56:eb:fc:
62:13:51:2e:6e:ab:92:3d:ab:05:05:4f:f4:15:a8:
5b:b4:f3:a3:b7:12:48:95:13:ac:4f:c6:eb:1f:b0:
d8:69:c3:69:4f:66:73:e6:9c:90:9e:a0:3c:d9:05:
e7:30:67:07:9c:8d:f4:c7:0b:f4:94:02:47:c1:ca:
c4:9c:89:10:c2:3b:ff:48:ff:d0:c8:5f:c6:c2:20:
e8:22:70:83:e1:37:3f:11:66:fb:96:e2:c1:0f:bd:
90:ac:78:9b:6a:86:2e:bd:36:91:da:3a:16:b1:0d:
0e:25:37:a7:52:c8:2a:0f:59:a5:4d:37:ac:1c:b4:
07:87:06:87:d3:46:da:dd:4e:51:7e:47:ec:66:b1:
8f:da:84:28:55:be:0a:85:8c:44:1b:0c:09:98:bd:
d8:9f:85:4f:ed:69:48:6d:cc:5a:14:75:ed:e2:2f:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8F:3E:DE:24:F6:2E:40:DA:D7:C8:E8:9A:55:16:1F:99:B0:FC:B1
X509v3 Authority Key Identifier:
keyid:76:07:CC:C3:09:29:1D:C8:1B:19:14:3D:4D:3F:E2:8D:01:C6:BE:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/Bo8-3iT2LkDa18jomlUWH5mw_LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6076e-1510-488c-b7fb-c94fe4c971d4/1/dgfMwwkpHcgbGRQ9TT_ijQHGvr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.103.0/24
IPv6:
2a11:2440::/32
Signature Algorithm: sha256WithRSAEncryption
af:b9:2c:11:59:b8:2f:8c:74:89:0b:04:81:80:9b:f8:63:15:
06:6a:f8:40:ce:e9:88:42:f4:a8:99:e6:84:2f:4e:78:6d:0a:
69:77:a5:dc:fe:30:0d:6d:a5:8e:45:ce:66:2a:6c:76:a4:01:
19:ac:d0:36:77:5f:d0:d1:64:53:b6:8d:25:bb:be:41:06:65:
2a:0f:ab:11:be:60:ec:cb:18:79:a3:79:6b:c5:4d:b5:34:94:
6f:e2:f1:11:b5:5e:0f:80:5b:3a:99:fd:94:39:0c:1e:ac:16:
91:cd:2e:e3:e3:85:1d:a7:77:7e:1f:1b:9b:37:46:d8:eb:c1:
09:18:46:c5:38:90:c2:a1:e5:86:c8:97:c2:a7:c7:f7:b8:b6:
a4:b9:71:ca:36:2f:0d:0e:ed:96:44:b3:72:22:30:ab:7b:c3:
f8:e1:ed:78:f2:f3:06:47:3b:ee:dd:00:07:9f:eb:e2:e2:24:
fd:8e:2c:10:c7:7f:0b:bd:08:9d:77:c5:d6:d6:52:a9:41:1c:
97:f4:4e:06:70:13:11:55:6b:6b:23:4f:92:1d:ef:90:46:19:
0a:99:77:50:45:36:c1:af:6a:fa:a2:84:26:4b:aa:84:42:bc:
ce:f4:e1:f5:43:54:ee:fb:46:36:02:93:21:fa:97:6a:09:97:
61:c8:24:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:41 2025 by rpki-client