Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hR4dKEJ2ZMW9mv8zjaNAAKFA_Vk.roa
File: hR4dKEJ2ZMW9mv8zjaNAAKFA_Vk.roa (raw, json)
Hash identifier: CKCvaIuVw4us1yulbZrSQYv83SdDJvRhRtZIcvdKG4w=
Subject key identifier: 85:1E:1D:28:42:76:64:C5:BD:9A:FF:33:8D:A3:40:00:A1:40:FD:59
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F1772B846CECD4CF938890882E2F2
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hR4dKEJ2ZMW9mv8zjaNAAKFA_Vk.roa
Signing time: Thu 02 Jan 2025 05:48:42 +0000
ROA not before: Thu 02 Jan 2025 05:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12777
IP address blocks: 193.255.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:17:72:b8:46:ce:cd:4c:f9:38:89:08:82:e2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=851e1d28427664c5bd9aff338da34000a140fd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:d8:c5:24:b6:b5:ca:af:5d:75:11:ff:5d:
ec:97:68:69:65:9d:eb:26:13:ed:1c:83:eb:61:f1:
a5:e3:01:26:2d:e4:01:ab:9b:bb:b1:96:7f:d9:30:
a8:7a:b2:c2:bc:a1:c3:8c:30:2e:df:35:7a:4c:74:
36:dd:09:a5:a2:43:25:f6:06:d7:03:70:8f:72:7a:
d1:8b:9e:c3:91:80:01:a6:95:67:0d:00:63:a3:b4:
d5:7b:b0:5e:88:75:9c:2e:7b:40:29:fb:6a:5c:50:
9a:bd:83:fe:92:6a:f8:6e:2b:4f:36:e5:4c:b1:e4:
94:7e:4e:9c:8f:79:00:4e:7d:6d:b2:27:54:37:fc:
3b:a6:78:1d:d8:1d:14:e7:11:fb:65:05:9a:d2:69:
31:cc:62:c3:b5:9b:82:02:81:1e:7c:43:14:94:0a:
d3:89:51:6a:01:0e:e3:28:e7:35:66:73:d0:31:e3:
b8:6a:71:3a:90:03:62:d6:f2:a6:19:b1:cf:14:43:
96:ad:c9:fd:a8:26:ec:9a:b6:bc:fc:6c:2f:89:6f:
37:15:23:6a:76:db:f3:ee:29:9a:b7:d9:38:e5:28:
31:3c:5a:91:d3:5d:4f:71:e2:02:e7:cf:5e:bc:56:
15:84:d1:d3:eb:24:5a:68:2d:b1:ae:af:86:42:3c:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1E:1D:28:42:76:64:C5:BD:9A:FF:33:8D:A3:40:00:A1:40:FD:59
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/hR4dKEJ2ZMW9mv8zjaNAAKFA_Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.44.0/24
Signature Algorithm: sha256WithRSAEncryption
41:fb:99:e6:3d:c5:38:9b:bf:f7:c0:61:c4:7f:ae:1b:b9:fc:
ae:ef:2d:3a:88:32:23:8e:5a:5c:8c:26:60:53:0e:57:6a:bc:
c8:5e:6f:ab:91:f3:a6:7d:80:4a:8f:db:78:99:e0:bc:34:3a:
08:16:be:e1:ce:ee:ce:53:32:62:4f:e8:eb:e5:b7:2a:84:d9:
95:07:5e:83:76:a7:c9:ff:ec:c1:9f:9f:2f:41:72:c7:a2:3c:
28:8d:3f:be:65:67:1e:ed:3f:fa:ce:ac:89:65:3f:51:55:6f:
ed:1c:7d:e1:95:75:ff:39:09:24:3d:76:0e:a1:be:5d:e9:b6:
3e:cf:25:7e:90:bd:a3:8c:d4:db:ad:d8:c1:05:d1:35:41:b3:
4e:43:d2:7f:7b:c3:78:ab:a8:7b:cb:79:2e:b4:73:9b:e7:74:
20:22:92:fb:39:53:bd:08:43:24:87:b4:06:62:9e:76:82:ed:
2f:73:f1:8b:a4:a4:0f:76:20:3d:80:b7:4a:22:af:7b:e2:c6:
c5:c5:8b:8f:29:58:29:b5:ce:ef:6b:71:8f:e6:c4:4d:6e:4e:
6f:ce:d7:5b:4e:04:22:50:90:75:12:30:b8:76:4b:68:2e:71:
00:5b:b5:b5:66:29:9b:71:3b:ff:f0:54:0c:50:1d:6e:22:9f:
5a:ee:e4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:03:50 2025 by rpki-client