Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/9qU_RshPDt8npKa7LLuRKWJ4eFg.roa
File: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (raw, json)
Hash identifier: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=
Subject key identifier: F6:A5:3F:46:C8:4F:0E:DF:27:A4:A6:BB:2C:BB:91:29:62:78:78:58
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 01956F9F843E619A2EC3F6C5AD2F18C3DBF1
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/9qU_RshPDt8npKa7LLuRKWJ4eFg.roa
Signing time: Fri 07 Mar 2025 08:01:19 +0000
ROA not before: Fri 07 Mar 2025 08:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 178.210.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6f:9f:84:3e:61:9a:2e:c3:f6:c5:ad:2f:18:c3:db:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Mar 7 08:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6a53f46c84f0edf27a4a6bb2cbb912962787858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9b:11:8c:b9:08:80:44:06:5a:6e:0c:c1:f8:
5c:6b:14:24:72:85:73:4a:2f:97:2d:09:13:15:88:
c8:ef:0d:99:81:b9:11:7f:b0:57:eb:43:1d:2a:e4:
b6:80:9c:24:43:57:8a:01:98:e5:80:dd:76:a1:d1:
04:ea:8b:7a:47:7e:31:6d:45:68:bb:f5:33:d8:f2:
ec:a0:68:9f:b6:76:3c:20:fb:46:e8:be:52:67:fb:
f5:a5:71:05:38:cf:b0:26:ad:9d:0f:64:9b:3c:3a:
ac:30:ba:4f:31:d1:12:d6:63:61:04:05:3c:ef:85:
c8:79:c7:f8:71:a5:0b:b3:54:40:f9:54:c2:1a:e5:
51:77:97:1d:b7:9f:a3:4a:19:ab:bb:ac:39:ae:d5:
0c:42:f3:1f:cd:ee:85:29:74:7e:a1:1d:83:b7:b4:
d7:77:1e:e6:fa:a5:7f:50:af:38:41:ae:bb:2b:87:
b0:5d:fa:cb:8c:7a:9a:f2:1b:c1:1c:1d:ee:0a:b4:
c0:93:7c:47:6f:4c:f7:df:dc:92:5b:2a:f7:b4:a4:
e0:8e:7c:74:1d:c7:d0:e7:de:87:4b:e1:b4:be:34:
91:94:fc:37:6f:f1:d3:70:31:ce:0f:30:11:43:ea:
68:eb:b3:d3:a5:bf:72:ab:0f:c0:a8:d9:57:4c:ff:
0f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A5:3F:46:C8:4F:0E:DF:27:A4:A6:BB:2C:BB:91:29:62:78:78:58
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/9qU_RshPDt8npKa7LLuRKWJ4eFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.210.247.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:a2:ce:16:2d:e0:f3:8d:7b:e9:86:66:24:cb:f1:b0:e1:78:
5f:49:b7:db:57:d1:9b:03:40:8a:5e:55:14:a2:17:09:49:4b:
4d:12:86:31:e9:25:cb:4b:0b:7f:aa:53:6a:fc:de:cb:b7:9e:
c0:ee:81:ee:74:c2:80:7f:02:8b:a7:a5:4d:e4:90:0c:bc:74:
3c:1b:0c:11:c1:5d:51:a3:7e:18:0a:ca:a4:43:b6:82:69:f5:
58:70:00:b8:ad:29:58:cc:d6:65:77:5d:30:0f:a0:3f:98:7f:
bf:67:70:ff:ac:16:e9:a7:6b:7e:08:e9:ff:7a:67:d6:92:e4:
65:5d:1a:43:dc:ef:87:d3:28:1f:bb:51:b8:c2:a6:3a:23:c5:
b3:ab:3e:18:2c:eb:a4:c7:2f:39:1d:b0:09:e3:e0:62:44:50:
cc:5b:3f:53:3b:3a:e9:e5:46:80:ad:7c:98:fa:b8:fe:b2:35:
cf:38:42:9b:3a:a1:37:a2:ca:8c:63:db:f1:a0:c1:a6:0f:94:
cb:50:a0:93:57:12:25:72:d1:76:44:fa:dd:b5:5f:bb:19:37:
99:1f:06:ec:86:f8:62:b8:30:ca:83:c2:06:5e:a4:be:e7:2d:
75:f8:60:55:75:1b:84:8a:6d:db:cd:26:74:2b:2b:f0:e7:12:
fa:8a:80:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:29:59 2025 by rpki-client