Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hItmJgKobNdHEWAlF-4cCZue6Aw.roa
File: hItmJgKobNdHEWAlF-4cCZue6Aw.roa (raw, json)
Hash identifier: DNC0yvlzkLonuwJuzoEr0sbbal1ihEVkJ/p6BrvVIIc=
Subject key identifier: 84:8B:66:26:02:A8:6C:D7:47:11:60:25:17:EE:1C:09:9B:9E:E8:0C
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 0194228E0B92B0C03FB48A4DFF2B64CDE79A
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hItmJgKobNdHEWAlF-4cCZue6Aw.roa
Signing time: Wed 01 Jan 2025 15:48:41 +0000
ROA not before: Wed 01 Jan 2025 15:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 185.110.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0b:92:b0:c0:3f:b4:8a:4d:ff:2b:64:cd:e7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=848b662602a86cd74711602517ee1c099b9ee80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dc:67:da:17:c0:43:80:39:d9:c9:df:e4:5b:
df:6b:4c:47:71:da:6f:05:6d:aa:89:2c:39:50:0c:
e2:f6:b2:c2:b4:06:27:42:f9:ee:4d:91:19:99:9e:
cd:af:8a:91:40:dc:e4:97:87:a7:df:29:5e:fe:c9:
5d:96:49:77:9b:7b:93:a2:f7:b7:db:5c:4f:9e:b9:
04:5c:5f:00:e9:6c:c9:1d:a6:ae:f9:34:96:3b:4e:
0b:d8:b8:d2:18:b7:96:59:7d:12:01:ad:14:b3:bd:
ea:4e:d6:df:ae:cb:71:5b:e6:a4:b6:21:a5:5a:29:
5e:79:41:7f:cd:2f:3c:50:db:ae:e4:87:2e:92:46:
8b:fa:2e:28:64:bb:20:df:e9:f8:f6:1c:ac:dd:e6:
0d:44:ab:00:11:54:b9:0f:23:e6:06:fd:8e:8e:05:
b8:89:69:f4:c0:82:c2:d5:cd:1b:46:87:c1:4c:2a:
12:c9:aa:f1:0a:fc:b6:a2:74:e4:08:5c:e2:84:19:
80:78:ad:d3:6e:6e:a0:50:c2:37:00:5f:47:e0:21:
b4:d5:a3:83:5e:16:8e:bc:59:3a:54:91:c4:72:da:
b4:b0:57:30:4a:bf:f0:52:2e:39:ca:1d:8f:58:9d:
77:c7:5c:56:67:1d:12:39:fa:b2:27:c8:c7:23:c4:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8B:66:26:02:A8:6C:D7:47:11:60:25:17:EE:1C:09:9B:9E:E8:0C
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hItmJgKobNdHEWAlF-4cCZue6Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.196.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:fa:ca:4d:c3:d7:e3:a5:92:c0:f7:af:de:6e:dd:7a:60:82:
2f:8a:48:22:2a:07:fc:43:10:8d:6c:8b:3f:aa:b9:99:0b:b0:
db:e8:dd:7f:77:87:d5:3e:76:ca:8b:e5:f2:86:50:42:28:93:
aa:76:21:2e:4a:b7:e3:57:cc:e0:6e:83:88:06:11:60:25:2d:
1c:fc:0c:8f:94:95:e0:f6:96:11:f1:a7:9d:c4:55:15:50:0f:
83:d4:53:d9:f2:11:d6:8d:5b:18:ce:77:5c:f2:7d:c8:d7:2d:
47:24:1c:8d:c1:dd:bd:1f:57:1e:ab:c9:83:04:42:d9:21:05:
86:bb:e7:3d:9d:cc:6c:48:c8:62:4a:a5:90:88:9c:04:f7:8f:
91:81:90:ae:5f:ee:9f:7d:7b:d1:7a:41:ee:78:90:53:c9:1a:
fa:af:e0:9b:03:14:32:8a:41:14:8a:63:51:50:94:e0:f6:fe:
9e:ae:98:41:48:70:ad:0b:1e:7c:12:fc:19:36:2a:59:06:83:
18:9f:cb:5b:35:fd:76:c0:9b:41:53:1c:f9:3e:d9:08:1e:2a:
12:14:82:b5:9f:15:79:68:1f:1f:01:53:eb:8f:f5:05:00:cc:
55:59:81:7c:46:76:40:d3:ba:24:fe:8a:d6:80:c7:87:e3:0f:
4d:90:2b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:53:14 2025 by rpki-client