Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/cMyuoWOy66eDKnjdJCEfhSkyz1E.roa
File: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (raw, json)
Hash identifier: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=
Subject key identifier: 70:CC:AE:A1:63:B2:EB:A7:83:2A:78:DD:24:21:1F:85:29:32:CF:51
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 019424457527F746E3B622B2566625E3AAA8
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/cMyuoWOy66eDKnjdJCEfhSkyz1E.roa
Signing time: Wed 01 Jan 2025 23:48:39 +0000
ROA not before: Wed 01 Jan 2025 23:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 195.182.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 15:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:75:27:f7:46:e3:b6:22:b2:56:66:25:e3:aa:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 23:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70ccaea163b2eba7832a78dd24211f852932cf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:e0:17:f0:fc:12:b8:11:75:86:33:95:20:
bd:b7:5f:b3:f7:0b:9b:0d:74:38:7f:a8:14:c3:2c:
44:e6:fd:07:8f:57:80:a1:81:7d:92:52:e7:c3:f4:
46:29:49:01:56:6c:93:a5:5d:0f:6f:1c:47:1d:7b:
4c:17:99:7d:33:07:12:e7:7d:40:26:a8:0c:fe:a7:
1f:52:88:4e:d1:6c:a4:79:31:e9:2f:ca:2e:1d:d8:
8b:c4:b7:f7:4e:cc:f3:80:8b:6e:ab:f8:b5:a6:66:
84:3d:8d:c3:86:3a:45:7b:56:02:9b:27:88:f5:4d:
e7:eb:e7:9d:95:45:f1:a4:0c:65:13:9e:27:e9:f9:
8d:8e:5b:d8:f1:b0:45:cc:d5:c5:a7:5b:ca:ac:63:
fe:ca:8c:52:e7:b4:46:af:30:c5:5c:2e:fd:c2:49:
49:67:3c:f9:f4:ad:20:8a:8c:d7:dc:5c:cc:7f:c6:
a4:65:62:cb:f2:67:49:5d:d0:75:51:9e:ac:4a:fd:
c4:e5:30:af:ed:69:22:e9:a8:57:fb:d8:c0:f5:82:
ea:6e:2b:68:46:91:02:0b:ba:c6:27:81:ae:43:ad:
70:27:a1:a8:d3:eb:8b:63:1d:08:2f:08:a7:08:5c:
71:04:ec:a6:fb:ff:2e:bf:fc:eb:cb:c4:04:ed:4f:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CC:AE:A1:63:B2:EB:A7:83:2A:78:DD:24:21:1F:85:29:32:CF:51
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/cMyuoWOy66eDKnjdJCEfhSkyz1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.198.0/24
Signature Algorithm: sha256WithRSAEncryption
06:7a:40:96:1c:57:22:47:bc:d1:8d:17:39:e7:f1:4e:cf:f2:
60:68:c2:f6:a9:a9:5a:f6:9f:20:c5:73:04:a2:d6:03:63:0a:
9b:ce:da:85:31:43:c1:75:05:65:49:eb:33:49:7b:d3:c6:12:
fe:07:0a:42:a5:b7:97:06:68:ac:22:6b:8c:2a:b2:a4:27:75:
a1:6b:25:50:46:73:c6:91:dc:77:2a:ed:06:21:69:70:a6:b3:
91:f0:a0:9e:96:06:9e:66:b2:78:da:d8:13:7d:85:3b:f1:ef:
a2:5f:94:2e:41:d8:da:b9:df:e1:90:c9:9e:8d:8b:de:69:76:
65:42:ea:41:1f:8c:dd:70:98:39:73:a6:ac:79:ec:98:19:e7:
81:12:f1:05:f4:dc:5b:24:bf:c2:93:59:b6:aa:d0:21:02:eb:
dc:d6:c9:be:4a:9c:1f:79:2b:8c:67:64:cc:e7:dd:21:e2:03:
c3:76:4d:63:97:08:ff:e4:b8:bd:91:0d:df:e2:37:e5:9d:6a:
fa:33:14:cc:a0:92:af:ab:9d:a9:74:90:28:a3:6b:3c:de:1b:
85:a1:49:32:da:e7:ef:f9:f0:c9:0b:82:5c:85:27:0c:0d:2c:
84:ea:cc:92:57:86:db:15:66:e3:98:95:ee:6b:f0:1c:51:44:
11:8b:8d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:42 2025 by rpki-client