Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qWfH_VKoWWUUQ8bi1qKxTuV0KIA.roa
File: qWfH_VKoWWUUQ8bi1qKxTuV0KIA.roa (raw, json)
Hash identifier: x3hukl87lsHfId1sEhc10WEbYF6R3yTOTAtjx/H0dM4=
Subject key identifier: A9:67:C7:FD:52:A8:59:65:14:43:C6:E2:D6:A2:B1:4E:E5:74:28:80
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424456BB8F3E9F2948285BC54BA294362
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qWfH_VKoWWUUQ8bi1qKxTuV0KIA.roa
Signing time: Wed 01 Jan 2025 23:48:36 +0000
ROA not before: Wed 01 Jan 2025 23:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208726
IP address blocks: 195.77.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6b:b8:f3:e9:f2:94:82:85:bc:54:ba:29:43:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a967c7fd52a859651443c6e2d6a2b14ee5742880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:7b:1c:18:e8:79:b4:c8:1f:fb:90:55:5b:
39:72:6e:6d:b2:73:11:ea:b9:2a:b9:02:88:d8:8b:
06:4c:58:65:01:72:55:ce:2e:ad:f2:fc:ba:e2:e5:
ea:33:5f:de:07:d1:a9:e0:f9:d5:84:11:3b:4e:25:
12:13:a7:c9:a5:98:cf:b5:76:de:a3:99:70:68:fb:
d4:12:ed:be:74:a6:42:13:d9:fd:7c:3d:11:65:5a:
9f:7c:2c:1a:39:59:c8:6f:68:91:1a:07:75:03:04:
f4:75:40:dd:84:4b:b1:56:55:88:1c:8e:b4:b9:fc:
dc:dc:04:d7:73:4a:33:f0:24:d9:62:57:7f:5e:6c:
ae:56:bb:fb:a9:b0:9d:5a:16:03:1c:7f:ec:60:79:
99:b8:ee:b1:21:cb:b0:12:0b:32:52:66:dd:b6:1b:
bc:9c:4a:2d:44:3d:42:97:67:0a:1f:c4:cc:7f:c3:
da:7b:91:6f:73:65:1f:f2:1a:82:3b:ff:31:38:15:
92:10:17:d3:3b:c4:2a:1b:4c:a4:a2:b6:e5:80:36:
fa:88:c2:76:c9:1c:45:2a:64:4f:75:a6:f2:f4:60:
b6:9b:46:0a:88:4b:0f:0c:c7:40:20:dd:ec:ec:13:
78:ea:0b:64:30:23:26:3e:63:43:19:a5:a8:49:e7:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:67:C7:FD:52:A8:59:65:14:43:C6:E2:D6:A2:B1:4E:E5:74:28:80
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/qWfH_VKoWWUUQ8bi1qKxTuV0KIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.77.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e1:e1:e8:89:44:2b:5e:91:36:c0:73:87:46:19:a6:d9:2d:
f5:c9:53:40:dc:e8:67:69:b2:74:8b:cd:05:2d:48:4e:37:4f:
e8:a7:17:b5:24:19:d0:06:45:16:9a:1f:63:0b:eb:50:78:76:
aa:10:8e:db:b9:00:6d:94:da:88:2e:65:d6:9d:14:bf:84:55:
01:5c:36:b1:e9:4b:5e:00:a0:ef:8c:d4:57:5f:ab:88:36:bd:
b9:95:6b:18:61:16:e6:0b:9c:4d:ac:cd:cd:ef:b0:4e:94:ce:
45:d9:65:92:77:43:f2:aa:2c:4d:cd:79:1d:aa:cd:38:c2:5e:
c1:c3:ff:81:00:c1:12:15:9e:18:96:ba:a5:dc:5e:ff:b4:ef:
df:d3:a2:80:52:6c:f8:51:63:97:fa:02:74:8e:13:25:24:5f:
5d:27:74:0f:da:a5:3b:5e:8c:7b:1f:7d:7c:2b:05:f2:38:a7:
0a:a8:c9:6b:dd:2a:c9:8d:e6:38:05:13:dc:3e:24:8d:bb:0d:
f1:88:01:80:97:8f:9c:fb:2b:26:91:d8:5b:bc:4c:5f:78:18:
2a:03:7f:73:d5:a2:2a:72:de:60:72:ad:9a:e8:a2:71:04:92:
7e:52:c2:27:08:8d:a6:19:ab:9e:6f:c3:ae:f8:c1:bd:f5:e8:
c0:ee:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:03 2025 by rpki-client