Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/RoQQWkUaC3XF-nyMYcWNk8Y-8mo.roa
File: RoQQWkUaC3XF-nyMYcWNk8Y-8mo.roa (raw, json)
Hash identifier: nrcGi6l4qhExh10hYOrvOFdtd2giJffjuqzMO/UU5i8=
Subject key identifier: 46:84:10:5A:45:1A:0B:75:C5:FA:7C:8C:61:C5:8D:93:C6:3E:F2:6A
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019420D65AC9BDADA5D1AD2DCA3DC97626B0
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/RoQQWkUaC3XF-nyMYcWNk8Y-8mo.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59210
IP address blocks: 195.128.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5a:c9:bd:ad:a5:d1:ad:2d:ca:3d:c9:76:26:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4684105a451a0b75c5fa7c8c61c58d93c63ef26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:64:1f:94:b6:e7:e8:09:e4:d1:9f:5c:3b:
77:e7:d1:d9:c8:79:98:59:17:14:f1:55:c9:fd:42:
fd:b1:62:7c:1b:b7:43:93:3b:e3:15:ff:16:31:f8:
d3:a9:8d:94:d8:3e:08:ab:56:4b:c2:97:27:b1:25:
3d:1e:1d:c9:4b:a3:c4:29:52:21:93:6b:fd:4b:8c:
b2:ba:7f:31:f7:eb:28:42:61:df:7f:98:16:2f:84:
27:a6:44:d5:15:4d:5d:1e:e1:ec:c0:2e:4c:4f:a8:
83:6f:ff:50:37:e0:dd:ed:7a:08:cd:e9:95:8f:25:
ff:ff:33:b4:57:e8:8d:5c:f9:d2:6e:8a:7d:35:85:
44:83:be:58:aa:92:17:3e:35:b5:33:09:af:b9:18:
7b:21:9e:2b:9a:a3:d6:b7:40:41:13:17:98:e0:6c:
34:12:c1:bc:11:77:35:47:1c:29:30:8f:f1:6f:36:
05:67:7a:e4:d6:af:66:b6:49:63:ec:d0:84:90:6f:
9a:3c:14:ad:69:b5:ac:e6:4a:5d:80:cd:c5:46:86:
13:e2:87:e9:45:4b:9c:d8:b1:ac:b5:8a:6e:31:57:
73:65:f3:14:84:0e:c5:2d:60:d5:4b:77:59:e7:1b:
45:a9:22:dd:83:9a:8d:2e:7f:3c:66:39:34:40:a7:
f2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:84:10:5A:45:1A:0B:75:C5:FA:7C:8C:61:C5:8D:93:C6:3E:F2:6A
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/RoQQWkUaC3XF-nyMYcWNk8Y-8mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.128.136.0/24
Signature Algorithm: sha256WithRSAEncryption
95:cb:30:bf:4b:2f:0a:45:f2:56:d5:b1:e4:6f:9a:a6:88:5a:
bc:f1:0a:5b:95:56:32:7c:52:f0:6a:16:df:ac:e5:00:8f:64:
9b:18:b6:a3:0b:a1:d5:f1:8d:20:63:7b:d2:eb:1d:16:0e:60:
8d:bc:0b:54:37:60:61:1e:21:f0:af:3c:ec:64:38:75:87:6e:
9e:f4:4d:4b:ca:1c:69:c9:f5:13:cd:d4:54:b3:44:56:c9:25:
29:5c:48:af:9f:58:93:d9:8d:4d:46:9d:76:b8:ff:e1:d8:65:
61:e7:af:36:0b:b1:a6:31:6f:4c:9e:56:c5:05:ed:a7:24:d0:
f1:97:b8:ed:c8:f4:d6:24:68:47:1e:9e:90:5b:97:1e:4f:18:
bf:54:4c:d4:01:e9:7f:c0:c2:e8:6b:02:2c:28:55:55:b4:61:
90:6b:d8:e2:69:82:de:74:49:b9:ba:a3:b8:e7:ac:ca:68:3d:
74:1b:ec:7e:7d:8a:10:38:b6:ac:00:a8:b2:8a:41:5c:31:06:
b3:72:39:ed:6d:6c:c1:11:74:83:b9:b7:c6:3a:72:93:37:b8:
92:7f:36:85:f1:0b:eb:6c:56:92:f1:cd:7e:52:fe:35:fa:45:
4a:72:2c:7e:1f:49:bf:9b:33:73:91:e6:4b:14:2a:4f:19:9e:
46:6a:f3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:57:52 2025 by rpki-client