Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IDhVBzgYToR4w6RP0rLkEdl_5cA.roa
File: IDhVBzgYToR4w6RP0rLkEdl_5cA.roa (raw, json)
Hash identifier: M8OE6ROY4l42BUANYnQHqVoq8vqVtlOLBEAz7mPZyRg=
Subject key identifier: 20:38:55:07:38:18:4E:84:78:C3:A4:4F:D2:B2:E4:11:D9:7F:E5:C0
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D2C15B9B85CA0A85EE56E7BA81529
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IDhVBzgYToR4w6RP0rLkEdl_5cA.roa
Signing time: Wed 01 Jan 2025 15:47:44 +0000
ROA not before: Wed 01 Jan 2025 15:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35000
IP address blocks: 195.144.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2c:15:b9:b8:5c:a0:a8:5e:e5:6e:7b:a8:15:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2038550738184e8478c3a44fd2b2e411d97fe5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:9c:20:f2:ab:69:fd:5b:08:05:06:33:39:
6d:4f:cc:70:ef:a0:6b:1a:20:df:c9:7d:1e:cc:05:
7c:8f:86:34:12:c6:85:22:70:48:b4:63:6d:25:af:
e3:6d:3b:e9:98:13:41:28:3c:9f:b4:bb:02:50:21:
d9:10:9c:e1:c8:04:3f:76:a4:01:e5:bf:e5:9b:aa:
0d:dc:31:ee:55:69:a0:5e:7c:91:67:54:86:c1:41:
08:f4:b1:f6:8d:d6:30:9d:8e:19:8c:eb:f5:5f:d1:
16:58:37:4a:6a:f7:9d:92:0d:f4:93:9d:d3:67:2e:
2d:b0:cd:8a:63:8f:2c:41:25:53:b9:bf:6f:ee:53:
d7:ab:d3:f1:b5:c5:f6:01:d4:fc:0b:97:5f:39:c7:
b5:b5:fc:81:9c:75:12:33:a6:13:b4:d7:1d:09:92:
c1:01:99:27:2f:b9:be:f1:e8:5d:16:54:32:8c:9b:
03:a9:ce:70:ae:fa:7b:12:ae:59:12:af:57:ae:6d:
48:86:a1:f5:b2:be:9c:72:1e:d7:b4:be:af:54:1a:
58:04:d3:9f:9f:0e:a5:ae:2f:c0:15:aa:2a:08:0f:
fc:3d:53:9a:c9:a5:f9:b9:ac:5b:a5:eb:f0:68:2a:
1f:a4:23:99:03:e4:cb:8e:ff:f8:fa:8d:0b:bf:93:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:38:55:07:38:18:4E:84:78:C3:A4:4F:D2:B2:E4:11:D9:7F:E5:C0
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/IDhVBzgYToR4w6RP0rLkEdl_5cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.144.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:4b:ce:3c:53:dc:92:8f:8e:11:30:a0:48:16:19:e1:cd:a7:
5f:a6:db:4c:2f:3f:cf:43:1a:20:4a:96:b5:2b:45:17:c3:e4:
fe:93:91:95:a7:6e:5e:3c:0c:8e:34:ca:a3:ab:70:be:f2:af:
3a:47:68:da:76:86:58:b2:5a:a6:e0:86:8a:d7:ff:92:be:05:
72:ed:cf:f1:cb:19:2c:d1:df:71:ab:28:7d:ee:4b:08:5c:aa:
af:d4:55:f5:da:63:4c:dd:e3:99:c8:71:45:40:41:aa:d1:85:
48:72:a4:b5:39:11:fe:be:18:33:67:74:5b:77:cf:75:09:d7:
68:5d:f0:6d:b7:c0:b1:5f:7c:ad:23:5f:fc:d7:91:dd:cf:96:
96:c4:10:f6:71:5d:1c:7a:71:79:78:f6:a7:b9:60:48:45:af:
51:66:ae:70:b3:61:8d:2b:87:10:57:2f:9b:fe:28:fe:9f:ad:
49:0e:79:06:b9:20:a3:15:a8:90:dc:8f:72:9d:27:37:e1:6d:
00:d8:51:4b:c0:6c:47:12:34:bd:8f:a9:88:42:3f:64:4f:50:
33:6d:eb:a4:1e:81:49:87:7c:3b:2d:1a:80:ab:a3:cc:cb:14:
09:f8:a2:55:f0:c4:02:08:9a:5b:bd:24:88:04:88:54:0f:b3:
2e:57:d6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:44 2025 by rpki-client