Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/kSocueKI3xqrxYrVlgp46XPJhoY.roa
File: kSocueKI3xqrxYrVlgp46XPJhoY.roa (raw, json)
Hash identifier: 38MoDqAostLgesLzGLlzSF6QuxV0tRHQ2WgTUcouUvI=
Subject key identifier: 91:2A:1C:B9:E2:88:DF:1A:AB:C5:8A:D5:96:0A:78:E9:73:C9:86:86
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 019427B53F16B1B8E3459ADCEFC6C1D81BFA
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/kSocueKI3xqrxYrVlgp46XPJhoY.roa
Signing time: Thu 02 Jan 2025 15:49:37 +0000
ROA not before: Thu 02 Jan 2025 15:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399734
IP address blocks: 217.163.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:3f:16:b1:b8:e3:45:9a:dc:ef:c6:c1:d8:1b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 2 15:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=912a1cb9e288df1aabc58ad5960a78e973c98686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:97:33:4c:ad:86:7e:80:44:31:ab:3e:67:
63:82:a4:63:99:e0:3c:a6:5e:cb:6a:34:4a:25:72:
a7:15:13:99:33:e7:ea:75:47:f4:41:01:0e:ed:32:
a1:94:4a:0f:1e:1d:dd:e2:eb:58:57:f5:2b:3e:4f:
21:cf:4c:81:ee:fc:cc:20:e5:57:7f:6c:00:bc:07:
65:2a:5c:66:f5:2b:51:d6:df:04:02:1b:9f:68:14:
24:c8:85:0d:6d:c9:f8:97:ab:5c:61:32:ad:9c:cc:
0e:04:a0:a7:f7:e4:1b:a3:a3:a7:93:3b:f4:b3:fb:
00:22:ce:d4:87:6c:5c:da:ce:57:31:d9:f8:c7:4f:
b6:fe:c6:bd:d8:46:bc:14:01:03:57:9e:7a:91:4f:
25:ca:52:ba:87:14:62:10:b5:c2:2c:f4:04:ff:92:
dd:82:5d:11:e5:46:ab:35:dc:08:b0:26:07:bb:c4:
df:7e:7e:41:4e:f2:38:a6:a2:90:55:da:16:de:27:
26:5d:6f:7d:e5:2d:a8:5e:da:0f:b8:8d:4a:6e:a4:
0c:e4:b3:40:8a:ef:53:28:17:50:7f:a2:7f:84:32:
6e:88:84:38:8a:14:ce:2b:d2:d4:66:b8:22:8e:8b:
61:ad:2c:c6:b6:d3:d6:d2:e7:e5:e0:8c:1b:c2:8e:
4e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2A:1C:B9:E2:88:DF:1A:AB:C5:8A:D5:96:0A:78:E9:73:C9:86:86
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/kSocueKI3xqrxYrVlgp46XPJhoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.163.118.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:8a:7f:76:ac:52:3f:0c:e1:b2:7d:f2:54:8b:89:16:03:ac:
0e:a7:fb:4e:d5:f1:e6:8e:5a:fb:0c:bf:7b:e6:53:cf:46:44:
74:fa:1a:3e:3d:54:5b:dc:de:9e:71:58:1e:f1:aa:39:c0:60:
78:01:67:5c:e2:6d:2d:1d:b0:3b:f4:15:6f:d0:be:9b:b7:6a:
cd:7f:72:7f:9c:d8:bf:0a:5f:fc:e6:ad:c3:d1:66:81:4e:fa:
da:47:1f:8e:1d:1e:73:8c:6d:17:5c:f1:7c:ea:e4:26:07:c8:
23:a7:e1:45:e0:06:b1:8c:ba:93:64:74:0b:a4:c7:6a:5c:74:
7e:16:5c:71:5b:ff:f1:20:7f:ba:63:ff:7b:85:57:78:1c:78:
c0:8d:cd:66:c7:8c:1a:83:01:a6:8d:9f:bc:34:73:fb:2b:79:
7a:ae:4c:8c:ed:bc:e1:68:70:88:5c:79:96:5f:ab:83:ea:62:
47:9b:79:5f:19:b3:98:d7:6f:30:b3:e0:f3:b6:07:71:d1:3b:
0b:7b:6c:a7:b0:41:6a:1b:bb:3d:3d:7c:fa:e5:de:12:c8:fb:
4a:b5:da:60:09:22:16:66:38:43:bf:f5:16:2b:d5:e0:00:a0:
8f:da:ea:e3:27:45:29:ad:fb:15:cc:ed:6e:c7:e9:f8:53:3e:
96:8e:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:38:41 2025 by rpki-client