Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/k0c655RtHVAv5VenJ67F29SWhuc.roa
File: k0c655RtHVAv5VenJ67F29SWhuc.roa (raw, json)
Hash identifier: hr75P5l79VgHodFxnHOuC7mIYeQ5S0TGyQcgAwawdyM=
Subject key identifier: 93:47:3A:E7:94:6D:1D:50:2F:E5:57:A7:27:AE:C5:DB:D4:96:86:E7
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 019427486872639F208757D4B5E533CD1602
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/k0c655RtHVAv5VenJ67F29SWhuc.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53835
IP address blocks: 206.245.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:68:72:63:9f:20:87:57:d4:b5:e5:33:cd:16:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93473ae7946d1d502fe557a727aec5dbd49686e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:53:be:a7:73:40:61:96:60:d3:e3:eb:a4:d5:
c2:c0:a8:51:92:7e:a3:17:f0:e5:35:f2:ed:cc:d9:
ed:e5:4a:30:0b:fb:ca:38:0c:91:b4:ce:8d:fc:b5:
ed:e7:9c:7f:70:67:bf:6a:0f:ec:0e:b6:01:1b:ac:
04:9b:44:db:d8:50:e3:c4:03:03:d8:a0:94:93:a2:
52:f4:5c:5f:d0:44:f6:92:ab:58:ce:e0:de:c6:ed:
09:dd:f8:f7:99:d7:03:0c:dd:4f:27:72:0a:1e:47:
c4:07:1c:d9:c8:b0:08:a8:21:32:ee:08:0e:49:32:
7d:61:ae:c4:23:fe:a1:74:fe:bb:ed:f5:9c:1a:c8:
f6:27:9f:9f:ea:14:ca:20:aa:56:0a:84:81:94:31:
61:df:d2:8a:29:9d:3e:05:cc:77:22:6c:f9:75:81:
93:2b:00:15:1b:8e:ab:0c:aa:a0:9e:1c:03:42:2a:
6d:90:79:db:88:3f:b9:d9:3e:17:46:9d:e7:be:e2:
fd:9d:aa:69:a7:03:da:f0:fa:1c:ab:b2:e0:be:a4:
62:46:b2:f8:22:4a:5b:cf:4f:3b:3c:06:bd:8a:fe:
ac:91:07:52:8d:64:a3:5f:ca:6b:56:92:5e:21:e7:
ab:5e:d7:e5:9f:e8:a0:eb:3f:d1:26:c4:ce:10:ea:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:3A:E7:94:6D:1D:50:2F:E5:57:A7:27:AE:C5:DB:D4:96:86:E7
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/k0c655RtHVAv5VenJ67F29SWhuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.211.0/24
Signature Algorithm: sha256WithRSAEncryption
97:cb:bc:6f:87:7a:6d:22:35:03:55:b4:ff:2b:3e:24:8e:30:
bf:7d:5a:c6:12:59:dc:08:d1:83:87:0b:9b:34:e1:01:b9:69:
9c:d9:a1:67:cc:6e:0a:31:35:6d:36:fd:03:66:9f:54:ce:7a:
14:6c:d5:20:0a:bd:b0:60:18:17:58:ef:d3:46:be:4b:ca:13:
0a:05:82:26:87:af:ba:90:cb:64:98:60:63:ea:ff:41:40:fb:
e3:c7:38:8c:cc:a4:0d:7e:94:9b:ad:00:c3:3a:8d:d7:2e:2a:
67:a7:ad:bb:21:22:13:30:dc:d6:73:e1:5a:bc:80:60:a2:ad:
4b:c5:01:cb:95:56:32:f8:1d:bd:c3:7f:8b:75:0a:dd:bf:f9:
6f:99:fa:e2:d9:3f:30:8a:9f:aa:50:f4:34:64:50:fa:40:7a:
34:2d:43:a6:ba:fe:5b:00:17:40:a6:03:43:47:7b:20:84:11:
12:e2:a0:8c:ba:2e:16:c1:02:54:85:16:f2:93:e4:41:65:2a:
ba:c4:a7:07:fb:91:01:79:3e:fa:e7:75:25:7f:ab:b4:4f:ba:
b5:78:ec:f7:aa:9d:0f:8a:90:a2:aa:47:50:c5:6e:13:f8:78:
79:7c:21:9e:36:54:d8:bf:40:e7:b9:43:e6:47:ff:b8:41:7f:
2d:bb:a5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:55 2025 by rpki-client