Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/tXKrQfWng2kENJxIVP6nmvyouRQ.roa
File: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (raw, json)
Hash identifier: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=
Subject key identifier: B5:72:AB:41:F5:A7:83:69:04:34:9C:48:54:FE:A7:9A:FC:A8:B9:14
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BCF1C4E42290C91A186433F216A81
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/tXKrQfWng2kENJxIVP6nmvyouRQ.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207637
IP address blocks: 212.183.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:cf:1c:4e:42:29:0c:91:a1:86:43:3f:21:6a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b572ab41f5a7836904349c4854fea79afca8b914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:c4:b3:38:61:ea:c6:f4:79:9c:a4:19:3c:
44:84:40:57:2d:a6:25:29:87:75:22:d5:b1:e9:df:
4b:56:a6:b4:06:b2:b4:c3:cf:5a:dc:84:5c:ae:f9:
60:be:c1:6d:71:6b:a3:92:21:06:35:c9:b1:4a:e6:
7e:58:06:1c:e6:45:78:d9:50:bb:74:c4:67:5b:a1:
16:44:38:8a:01:2e:24:d5:63:3a:e2:4d:20:9f:2e:
98:db:f3:d0:0b:ad:74:a6:98:6a:fd:5d:f7:ed:55:
e7:fc:74:02:61:1b:9a:43:ee:eb:b5:76:e9:82:5e:
19:93:19:c2:b9:e1:f5:02:70:9c:e1:8a:90:a8:47:
a4:89:d2:8a:f7:c1:9f:fe:f5:1d:3c:96:8f:4b:88:
04:9e:18:fd:13:db:dd:cb:83:9d:1e:0f:dc:24:00:
89:10:35:9f:b2:5f:df:20:c8:c1:35:32:fa:c6:73:
c6:4b:21:8e:f1:eb:9e:16:33:17:f5:c8:2a:19:16:
16:16:28:38:d9:bd:8b:a7:ba:81:8b:1e:df:9b:f6:
2d:3a:ab:83:4e:c5:ec:ff:19:40:f1:0e:c7:66:ad:
f8:dc:0f:64:4d:8d:78:6a:c0:02:d6:84:62:6f:ee:
5f:67:4f:31:e2:1f:13:d4:bc:1f:9e:57:c8:a5:71:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:72:AB:41:F5:A7:83:69:04:34:9C:48:54:FE:A7:9A:FC:A8:B9:14
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/tXKrQfWng2kENJxIVP6nmvyouRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.183.48.0/24
Signature Algorithm: sha256WithRSAEncryption
26:72:1e:d9:f1:3c:b8:e9:54:dd:8b:91:ba:96:0e:16:eb:a0:
cf:59:22:07:20:97:66:b0:5d:11:3f:a9:db:01:77:38:ee:26:
c8:0f:db:13:a9:0d:d6:3f:a9:7a:53:20:d8:b3:c5:60:cd:3d:
83:4f:c1:45:dc:b6:fd:e7:a0:43:bd:fd:2c:f7:2a:69:6f:f1:
0c:0b:18:ad:d6:df:4f:33:c9:4f:8a:2f:e0:dd:58:a5:e0:b5:
ff:5d:1b:b2:39:3a:1b:db:64:f9:e3:26:d1:5e:e5:2a:f1:87:
c5:1b:1c:66:6d:9a:59:58:9b:a1:41:5c:d6:44:c9:45:39:d2:
0d:08:a9:15:50:0b:f7:01:b7:85:bb:f6:f0:1d:70:8a:83:d1:
a9:97:1a:df:95:fc:6f:e1:96:d7:f4:17:df:44:75:fb:dd:3b:
ba:6d:c2:99:bf:ea:09:17:ac:22:c0:9a:2a:d9:00:f9:5d:57:
6c:4d:f5:dd:2a:ec:f9:2c:11:8d:b6:da:15:05:5f:55:13:3a:
1a:53:f3:1c:4b:3f:97:13:b4:e8:35:10:a5:a8:89:06:99:ae:
ee:c5:81:aa:f7:7d:2c:57:27:64:f7:c8:21:1b:0f:02:1c:c1:
54:6e:a4:d3:68:b2:93:c1:3a:24:57:14:29:23:66:d4:d1:6c:
58:e0:66:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:30 2025 by rpki-client