Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/tqTqorxuukrl9uDDia_5nmx2f7s.roa
File: tqTqorxuukrl9uDDia_5nmx2f7s.roa (raw, json)
Hash identifier: Jv1dDJLLdh6QR2z0ABpF4hZs9+OaRufEEerM9P1Rxzo=
Subject key identifier: B6:A4:EA:A2:BC:6E:BA:4A:E5:F6:E0:C3:89:AF:F9:9E:6C:76:7F:BB
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 0194266BDD9C58780648256E01489B8F8463
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/tqTqorxuukrl9uDDia_5nmx2f7s.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 193.178.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:dd:9c:58:78:06:48:25:6e:01:48:9b:8f:84:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6a4eaa2bc6eba4ae5f6e0c389aff99e6c767fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:1f:52:d4:c7:ab:c9:03:9c:65:b3:ae:fa:
ef:63:2f:b1:32:b1:a8:73:a2:97:8a:1a:ec:52:c2:
fb:51:81:82:b3:39:92:68:66:5c:73:45:39:a8:cd:
fe:ca:30:1e:1d:4c:c3:a5:a7:a7:d1:8a:65:dc:8c:
b7:f9:54:ce:31:01:90:a0:34:45:90:f3:74:d2:48:
82:19:c9:b2:2b:0b:a6:6e:f1:2f:5b:62:ae:5a:0d:
0d:47:d8:fc:96:22:99:29:ba:92:8e:c7:b4:cb:f1:
b6:4c:8e:9c:4a:36:ae:a0:77:27:ce:ac:95:6b:67:
d6:22:68:b6:60:48:45:31:fa:27:2c:2e:ba:41:90:
8a:f4:0b:85:13:79:3c:ec:40:5b:fc:34:0b:e6:e3:
b0:a8:01:22:f2:55:8c:83:ed:bd:4c:83:30:03:97:
ac:1a:b9:4e:51:0e:13:b9:44:50:e1:76:46:bc:c7:
8e:94:88:64:be:a1:ab:54:6c:86:0c:e0:c2:4d:8f:
fe:37:e0:45:cd:2e:7f:56:54:c6:9a:f8:9b:51:98:
1d:91:8e:2f:f2:be:cf:f4:dc:c4:13:88:30:d3:fb:
76:50:1e:cd:fc:da:5c:74:43:18:a1:34:a0:56:4b:
96:d0:96:aa:c3:96:70:cf:69:44:f6:50:d5:3e:d7:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A4:EA:A2:BC:6E:BA:4A:E5:F6:E0:C3:89:AF:F9:9E:6C:76:7F:BB
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/tqTqorxuukrl9uDDia_5nmx2f7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.166.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a7:ba:96:c0:14:be:cb:63:43:e5:01:08:2b:3f:6c:d6:97:
e5:36:0c:46:59:d4:15:34:2f:df:33:94:93:ad:31:03:bc:03:
29:66:3e:aa:63:c5:4b:cd:a9:2c:b6:58:27:3f:0b:d7:0c:b1:
66:48:71:cc:9a:6c:1a:02:df:78:b4:10:0a:90:7e:22:d2:86:
87:01:11:69:52:e4:15:a9:03:4f:74:bf:05:6e:a5:cb:4a:c6:
a5:96:e8:7f:49:5e:cd:82:a2:62:0f:a9:8a:14:ca:b5:43:36:
5f:44:86:9f:26:51:05:d7:2c:49:a6:e6:aa:76:92:ea:1a:b0:
f8:db:1b:59:1c:eb:6c:a4:4b:f5:f1:7d:4a:f1:55:06:54:3f:
08:40:7b:a9:f2:4a:74:e7:6c:7e:a7:9b:e3:26:06:88:f8:35:
0e:ac:a4:50:a4:85:50:ee:7a:ae:ff:72:3f:7b:6b:3e:2c:50:
e8:89:34:b6:5b:90:73:a4:bf:23:8a:cf:5f:a3:ee:f4:87:64:
ec:9d:e2:08:3c:93:2a:87:01:d6:6a:1f:12:5c:f5:c7:05:c6:
ec:69:68:bc:80:cd:96:39:ad:ff:3e:94:af:36:66:29:b8:94:
50:b9:e9:7c:e8:62:33:3a:b9:64:d8:42:c7:27:0d:c3:03:bb:
e5:53:b7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:05:30 2025 by rpki-client