Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/fnSZn4bkLF5kZ3b1OPm6ARvkoQM.roa
File: fnSZn4bkLF5kZ3b1OPm6ARvkoQM.roa (raw, json)
Hash identifier: N/iSveQaUWb1ReObfQZCITPh3u+LQRq5t3sKbajN6Pg=
Subject key identifier: 7E:74:99:9F:86:E4:2C:5E:64:67:76:F5:38:F9:BA:01:1B:E4:A1:03
Certificate issuer: /CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Certificate serial: 0194266BFF0FF97B3C4074CD733DC04642D7
Authority key identifier: 9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/fnSZn4bkLF5kZ3b1OPm6ARvkoQM.roa
Signing time: Thu 02 Jan 2025 09:49:59 +0000
ROA not before: Thu 02 Jan 2025 09:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210655
IP address blocks: 185.130.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ff:0f:f9:7b:3c:40:74:cd:73:3d:c0:46:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1f123b5ba4bc1b7793b9e9fa1b43dac49a660a
Validity
Not Before: Jan 2 09:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e74999f86e42c5e646776f538f9ba011be4a103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:b1:d5:69:3f:7c:6d:86:db:88:91:25:aa:
19:2e:83:66:23:bc:02:ca:02:1c:4b:af:7f:f8:a7:
42:cd:57:e9:6b:83:01:9a:8e:7a:c8:8e:73:53:0c:
5a:12:01:a9:e1:c9:98:60:8f:74:c2:df:06:55:dd:
0d:df:e0:b7:ca:f1:36:14:70:f2:28:ec:f5:06:20:
09:88:1a:00:5a:c3:0d:15:27:80:74:5c:9c:92:7f:
9d:09:f5:21:6f:6e:c9:c4:a9:30:cf:c2:72:d0:75:
2d:e3:58:3f:d1:dc:d6:10:5c:72:4b:cd:19:38:fe:
22:df:77:5c:2b:57:59:48:21:de:64:13:0c:15:ed:
3e:76:b7:fd:b1:4f:a5:65:a9:2e:a1:da:2f:23:42:
15:2b:02:df:14:cb:de:31:21:10:07:3b:04:f4:fe:
f0:7b:98:d3:f4:74:66:a7:ef:d0:26:a5:9a:47:8a:
4e:09:62:9a:fc:1c:a8:1c:6c:2d:4b:79:51:67:88:
b5:68:ae:2b:93:0a:1c:ea:4b:1d:c8:d4:e8:41:49:
70:22:7e:45:09:71:dd:93:1f:2a:8c:5e:81:25:c9:
4a:10:05:ed:5c:67:95:93:6b:58:65:2b:3c:1d:b6:
a8:6f:d3:53:70:f5:90:45:70:ea:ae:2f:a4:df:57:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:74:99:9F:86:E4:2C:5E:64:67:76:F5:38:F9:BA:01:1B:E4:A1:03
X509v3 Authority Key Identifier:
keyid:9B:1F:12:3B:5B:A4:BC:1B:77:93:B9:E9:FA:1B:43:DA:C4:9A:66:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx8SO1ukvBt3k7np-htD2sSaZgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/fnSZn4bkLF5kZ3b1OPm6ARvkoQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/523eb8-3677-4c9f-b6bd-7c5e7e324530/1/mx8SO1ukvBt3k7np-htD2sSaZgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.90.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:de:48:c6:5f:40:71:80:19:18:16:c2:c1:ef:e7:5f:f6:63:
ee:31:a4:ea:e3:a2:71:21:70:d6:18:98:58:a1:27:c0:bc:d8:
2e:69:e0:33:bf:78:94:b7:b4:ba:d5:95:1a:51:18:04:d3:27:
10:8a:c7:66:2f:4f:46:10:9a:90:80:31:05:da:65:80:42:fb:
3a:c1:5d:31:fe:a9:b4:be:65:a1:e5:00:4a:f5:b0:54:34:33:
27:a7:ee:f9:0c:da:e2:7c:19:19:dc:d2:8c:0e:bb:53:5c:6a:
31:c8:cd:04:1c:28:7c:5c:93:a0:de:1e:c2:14:04:75:41:6d:
0c:a0:15:ed:7a:8e:f2:de:78:a1:81:47:39:5e:c9:92:7a:77:
e8:a4:82:ed:c1:9e:d6:2b:85:e5:7d:91:ec:e9:ef:a3:8b:d2:
b4:7a:7a:76:58:2f:1f:3e:89:5b:59:15:5d:4f:ae:ce:66:f8:
ee:0e:e6:6a:29:bf:ac:ce:5f:eb:e7:83:01:12:a9:1b:ab:5f:
f4:68:09:96:f8:f0:82:7f:c1:34:ca:65:83:30:e7:db:f8:e2:
e9:af:78:ec:2e:b7:72:25:25:13:12:9e:b5:28:38:e4:73:e1:
45:f8:d6:db:0d:8e:d8:cb:f0:2f:6f:9d:c3:37:a8:09:43:54:
4a:04:fd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:14 2025 by rpki-client