Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/K0qFWulaqLgz9oT0AMcv9eNzEJE.roa
File: K0qFWulaqLgz9oT0AMcv9eNzEJE.roa (raw, json)
Hash identifier: Y/5We05dA9t/MagriMHFfJFSjAFcig5JEV5W+cYXjE4=
Subject key identifier: 2B:4A:85:5A:E9:5A:A8:B8:33:F6:84:F4:00:C7:2F:F5:E3:73:10:91
Certificate issuer: /CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Certificate serial: 0194258F5A19C434C453B693A4339BCCFC9D
Authority key identifier: CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/K0qFWulaqLgz9oT0AMcv9eNzEJE.roa
Signing time: Thu 02 Jan 2025 05:48:59 +0000
ROA not before: Thu 02 Jan 2025 05:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57222
IP address blocks: 195.162.5.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5a:19:c4:34:c4:53:b6:93:a4:33:9b:cc:fc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc46bfff8b90e3748555ba1447fd4edecc340a13
Validity
Not Before: Jan 2 05:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b4a855ae95aa8b833f684f400c72ff5e3731091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:0e:76:8f:67:bd:eb:a0:23:68:91:6d:a1:
22:35:59:fe:1b:8d:1f:eb:f2:91:5b:f5:69:0e:91:
f4:ff:b0:20:cd:fe:9b:03:73:68:0e:a4:35:6b:9f:
75:ca:36:49:bc:8d:ed:5c:5f:1e:f8:84:11:a7:1a:
2a:da:d1:2a:31:58:eb:4b:bb:e1:6c:d1:cd:4c:a5:
c3:2c:85:a9:04:76:6c:4a:50:d3:da:d4:96:25:d7:
22:1f:73:53:2f:f6:e1:62:e0:4e:7c:b6:46:26:f3:
27:b1:1c:1e:5b:d4:b4:2a:1f:56:a1:31:ec:23:26:
a5:2a:19:26:16:ab:57:1b:bb:f6:50:c0:02:93:84:
80:5b:7e:11:da:9d:45:c6:47:bc:a7:8a:19:c6:d6:
c9:2f:ff:33:83:ff:ba:25:f9:2f:65:aa:4a:de:ef:
ae:6e:31:83:eb:9a:10:f3:23:46:ea:d1:85:75:fe:
8a:2a:01:c9:63:a1:c1:bf:cb:89:b5:88:7a:ca:c7:
9d:7e:b9:05:9e:3e:4b:f5:ec:98:ae:dd:d0:a3:42:
00:0e:ab:59:38:7f:20:df:15:9f:d8:58:ed:a3:66:
96:05:a0:d2:b9:e3:25:f9:6c:3c:f6:82:09:fd:29:
e7:a4:40:74:d5:0d:4e:87:2f:11:8e:0a:97:79:1d:
02:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4A:85:5A:E9:5A:A8:B8:33:F6:84:F4:00:C7:2F:F5:E3:73:10:91
X509v3 Authority Key Identifier:
keyid:CC:46:BF:FF:8B:90:E3:74:85:55:BA:14:47:FD:4E:DE:CC:34:0A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEa__4uQ43SFVboUR_1O3sw0ChM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/K0qFWulaqLgz9oT0AMcv9eNzEJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/84d49c-0c84-456a-b640-4dc9bf642dd2/1/zEa__4uQ43SFVboUR_1O3sw0ChM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.5.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:11:af:b4:50:07:fd:0c:91:6f:0e:e1:1c:3d:05:b0:76:c3:
56:e5:f9:17:36:2d:8b:9b:f2:25:07:ae:3c:e1:ea:1c:c0:d0:
d1:71:5b:f5:d0:54:78:ec:a7:1d:07:8a:c9:ad:0b:bf:09:60:
f2:0e:7d:42:3c:bc:1c:41:46:0d:68:42:77:f7:d1:cd:1c:ca:
7d:e5:46:82:53:b8:a2:b1:cb:e6:33:e7:68:da:0c:a4:4c:cf:
48:a6:10:44:d2:df:3c:97:37:8b:b8:38:f4:5e:ba:a8:f1:2e:
b8:69:e5:0b:3e:32:82:da:3b:c0:6a:df:73:1e:51:9e:87:a1:
b6:30:b7:92:30:70:e2:b7:4c:a3:c9:5e:8d:5c:cf:18:c9:27:
58:1f:33:af:e6:6c:af:17:45:7e:14:58:ff:42:b8:24:67:db:
a2:04:56:35:4b:f8:0c:a5:f7:22:3d:11:3a:a2:1a:ae:c7:50:
59:62:f2:97:35:99:17:c9:86:97:4a:44:ff:71:00:46:e8:fe:
b7:b2:69:43:8d:ae:8a:37:03:89:07:d5:a6:17:56:c8:0b:85:
e4:fd:96:4e:c2:71:83:e9:77:a0:e5:8f:48:fc:b3:55:de:90:
e1:da:a0:1e:9d:b7:47:77:2e:2b:fe:39:a3:09:aa:7f:f2:c1:
1e:f9:a2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:07:27 2025 by rpki-client