Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/fDPnowgiW4NXUcPmZq5PlGWUk30.roa
File: fDPnowgiW4NXUcPmZq5PlGWUk30.roa (raw, json)
Hash identifier: z/d+yEJY4PEUm/YMmKoNiE1o7xakwwiPgLaM7CXxMBk=
Subject key identifier: 7C:33:E7:A3:08:22:5B:83:57:51:C3:E6:66:AE:4F:94:65:94:93:7D
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01941F8CB4E32871D0DD57B90BBABF2E936C
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/fDPnowgiW4NXUcPmZq5PlGWUk30.roa
Signing time: Wed 01 Jan 2025 01:48:22 +0000
ROA not before: Wed 01 Jan 2025 01:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199738
IP address blocks: 176.32.50.0/24 maxlen: 24
176.32.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:b4:e3:28:71:d0:dd:57:b9:0b:ba:bf:2e:93:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jan 1 01:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c33e7a308225b835751c3e666ae4f946594937d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a3:79:00:dd:0c:ac:2b:40:71:76:33:fb:81:
bd:ba:5d:94:c2:91:f2:d3:05:3d:9d:46:6d:06:5c:
d2:91:9e:c2:ee:3b:8b:19:c0:ca:26:96:ee:e0:9c:
4d:23:4b:12:e6:bb:4f:6c:03:e1:9d:bc:d8:5b:c1:
ac:eb:e1:70:0c:26:5e:1d:b0:e9:ab:68:34:b3:5e:
bd:33:fc:fc:a4:f3:01:14:f3:b0:0b:d6:60:5a:d7:
bb:91:b5:96:82:bc:6c:71:d1:a4:d2:11:e4:c1:2d:
a2:d4:79:0c:a0:c9:3b:8b:51:26:84:50:cd:d5:a6:
2f:a1:09:40:df:f0:93:a3:63:96:65:17:2e:8b:3f:
04:43:8b:72:f4:12:29:20:ab:2a:5a:a3:bd:56:78:
62:81:b0:ad:ac:06:da:c0:21:0e:cb:50:10:46:a9:
f8:fa:5a:19:55:42:b6:fd:72:ec:1b:62:3a:20:7d:
93:fb:b0:ad:44:14:f4:84:fd:17:52:05:dd:35:40:
1f:cd:9d:5b:dc:6c:f3:2d:98:fc:b5:f9:a5:ae:c4:
2f:94:c4:b1:66:df:a9:be:1d:cc:94:7d:0e:d5:69:
e1:e5:ca:e7:ff:d1:e9:df:52:8e:db:07:10:cc:41:
3e:cc:cc:79:51:00:58:08:8e:b5:8f:4d:73:ad:30:
71:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:33:E7:A3:08:22:5B:83:57:51:C3:E6:66:AE:4F:94:65:94:93:7D
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/fDPnowgiW4NXUcPmZq5PlGWUk30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.32.50.0/24
176.32.54.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f9:ce:2f:ee:ca:a4:a0:f1:50:b3:5e:64:d8:4d:93:9c:e3:
46:d9:d3:42:20:30:59:ea:c9:ae:87:31:32:14:3f:00:34:b1:
d7:d0:c6:3b:fb:b7:82:d3:2b:33:3e:0d:28:7c:bf:c8:94:05:
7b:ac:9f:ea:59:42:88:bc:41:36:3c:eb:04:25:41:ca:14:e8:
3a:5e:eb:f0:38:2f:72:8e:73:c6:8f:26:b3:0a:5e:53:25:0f:
28:3a:1a:8d:b9:ac:2f:97:55:42:5f:6a:3f:38:4c:d8:9d:a1:
a1:36:72:e6:db:27:7b:83:66:97:c5:8c:0a:8c:17:d6:b5:21:
d7:0d:ce:6f:e8:bb:a5:e0:57:95:73:1b:90:18:80:72:1a:29:
25:c8:73:dd:19:76:ed:0a:a7:e9:8d:76:a9:fb:b8:99:48:dd:
b6:b9:17:82:e5:0b:24:cc:97:52:fe:ee:db:61:8c:a5:5e:a5:
21:d4:70:de:05:ef:92:4b:a6:c1:dc:0d:a4:1d:6a:71:27:7c:
38:40:42:62:e2:42:71:95:65:c5:fb:2e:43:c8:0d:7e:00:4d:
b3:31:8d:64:71:e4:9c:44:31:4f:a0:94:83:93:7a:9b:0c:3d:
3b:b3:9b:2c:d6:22:d9:83:ca:ba:74:27:06:d9:dc:0e:95:e5:
91:38:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:38:21 2025 by rpki-client