Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/qKek5ZOAt9w9vxEPh4zkLLlKVYI.roa
File: qKek5ZOAt9w9vxEPh4zkLLlKVYI.roa (raw, json)
Hash identifier: gz7wbf7RuIAjOfumVR0HGG8azx+yCAuEY5X4YlBO90Q=
Subject key identifier: A8:A7:A4:E5:93:80:B7:DC:3D:BF:11:0F:87:8C:E4:2C:B9:4A:55:82
Certificate issuer: /CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Certificate serial: 0194236A4CB8CC62AE86841A79F59A3949B1
Authority key identifier: BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/qKek5ZOAt9w9vxEPh4zkLLlKVYI.roa
Signing time: Wed 01 Jan 2025 19:49:16 +0000
ROA not before: Wed 01 Jan 2025 19:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49995
IP address blocks: 195.178.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4c:b8:cc:62:ae:86:84:1a:79:f5:9a:39:49:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6c1d958ff094caf1346cc66f716cceb6dc5009
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8a7a4e59380b7dc3dbf110f878ce42cb94a5582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:7b:91:a2:4d:32:d5:70:00:17:b5:bc:02:
23:4a:75:3c:0d:9b:0b:ed:33:4c:d2:fa:cd:e0:1e:
c3:a6:00:b2:8c:6c:22:70:fd:a8:2d:9d:a3:e5:12:
7b:91:36:6d:7d:79:17:02:f8:f2:75:88:f1:dc:55:
4d:36:ea:d4:7e:49:72:16:31:35:c1:07:56:03:3d:
c4:3b:a9:9f:36:36:d8:73:fd:0d:4e:d5:ec:84:a3:
d2:98:37:bf:30:8e:57:37:8b:4f:bd:8d:b7:0c:af:
fe:63:85:da:33:21:79:6f:87:1a:44:89:fc:90:02:
56:16:43:0c:cc:b4:e3:06:f5:92:91:3f:1e:b7:47:
cb:93:95:78:c6:57:a2:b1:aa:26:3f:f0:f5:60:b6:
61:b5:22:d8:63:86:d0:ba:b5:89:da:a0:d2:9d:df:
e6:7b:30:bc:18:a9:c4:30:ea:c1:36:ea:2e:b1:92:
a4:e1:cc:4e:44:8a:89:0e:05:9e:a2:3a:11:fe:21:
52:8f:1e:fd:3d:6a:de:e0:6e:10:ca:ac:bb:ed:19:
bb:89:43:5a:7f:ba:20:a8:7f:99:f9:ae:0d:fa:b3:
30:78:f4:9e:08:1f:aa:ca:ff:bf:53:39:c4:be:d5:
51:2a:fd:e1:b6:59:d5:95:b9:8b:19:6b:17:c6:cb:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A7:A4:E5:93:80:B7:DC:3D:BF:11:0F:87:8C:E4:2C:B9:4A:55:82
X509v3 Authority Key Identifier:
keyid:BA:6C:1D:95:8F:F0:94:CA:F1:34:6C:C6:6F:71:6C:CE:B6:DC:50:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/umwdlY_wlMrxNGzGb3FszrbcUAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/qKek5ZOAt9w9vxEPh4zkLLlKVYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/e02035-73ae-4fd2-80c1-e151d4d39b41/1/umwdlY_wlMrxNGzGb3FszrbcUAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.10.0/23
Signature Algorithm: sha256WithRSAEncryption
86:84:af:27:d5:85:e9:4f:95:2a:9a:3c:8a:b9:3c:bd:9a:0b:
67:0e:87:af:35:18:73:f1:ac:07:7c:c1:d2:81:1b:7c:94:e0:
be:9b:5c:a8:20:75:a4:9e:29:e3:e3:cd:2d:fe:66:d8:ff:6c:
46:4e:77:d8:76:68:9c:68:22:87:5f:3b:fe:02:ad:f9:1e:c1:
1d:33:56:5f:14:a0:24:70:c6:b7:d4:d6:65:dd:52:4d:5c:54:
a6:1f:9a:95:89:a3:85:4a:4c:93:a7:20:b7:a1:b9:42:d8:de:
fb:ea:22:c5:c9:49:36:16:0f:7d:bc:24:4b:3f:84:02:b7:8f:
1a:37:c5:8d:c0:ee:c2:97:67:f7:01:49:d5:10:a3:da:af:02:
01:41:12:0b:73:27:eb:05:68:2f:87:f2:7e:ea:85:10:8c:0d:
3c:31:26:4f:df:ec:2f:28:04:a6:c3:e5:73:4b:91:51:57:8a:
68:df:ad:f7:eb:e0:24:ad:7f:27:f8:9d:83:94:2c:08:04:7b:
8c:dd:aa:2b:40:ec:e7:57:1d:75:fa:f5:4f:9e:c1:a7:04:f0:
5d:66:71:ef:c3:04:e5:dc:fe:1f:70:09:e6:04:bf:0c:10:8d:
83:06:ff:e1:2e:20:9c:44:3e:72:fe:18:69:12:7d:48:7a:df:
f5:5d:ed:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:25 2025 by rpki-client