Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/vM1WQhwz3cRdhRzRWZYRS2EG35U.roa
File: vM1WQhwz3cRdhRzRWZYRS2EG35U.roa (raw, json)
Hash identifier: 6cZcrnHWZ9ymPZFFF87v+vfASbgITAqQf6OR2I+DcbM=
Subject key identifier: BC:CD:56:42:1C:33:DD:C4:5D:85:1C:D1:59:96:11:4B:61:06:DF:95
Certificate issuer: /CN=b48f063d29e910f033becb656e8b9901f69ec974
Certificate serial: 019424B2B5148BCE74AF186523F1D1562B7F
Authority key identifier: B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/vM1WQhwz3cRdhRzRWZYRS2EG35U.roa
Signing time: Thu 02 Jan 2025 01:47:58 +0000
ROA not before: Thu 02 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39120
IP address blocks: 176.126.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:b5:14:8b:ce:74:af:18:65:23:f1:d1:56:2b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f063d29e910f033becb656e8b9901f69ec974
Validity
Not Before: Jan 2 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bccd56421c33ddc45d851cd15996114b6106df95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:0e:a2:1d:e2:d1:fc:75:d8:5f:db:c7:3e:
49:be:42:a7:78:00:dc:3e:ac:1b:9a:05:32:42:79:
fb:38:6e:3c:93:1c:27:22:e5:16:30:7b:01:d3:a2:
b6:e2:e0:92:41:a6:d6:39:a1:36:5b:fb:f5:9a:e1:
13:c4:88:16:15:45:6f:4c:6c:d6:fb:59:4f:84:eb:
3e:34:24:7d:73:ca:12:5e:93:58:0e:c4:95:ab:87:
a5:61:39:cb:59:f0:7f:a7:7c:87:6e:7e:09:0c:8b:
a6:bb:9e:25:18:76:bc:f7:96:41:9f:32:51:93:35:
ed:7b:c6:2d:83:db:87:f1:18:ad:92:a9:cd:08:46:
1c:0f:bf:ad:4d:0b:d6:ae:aa:c5:dc:f4:07:ae:78:
4d:06:b7:c1:7a:6e:f7:aa:cd:6e:cd:de:7e:95:5f:
14:0b:57:38:64:8c:2d:b8:64:c7:1e:98:2c:1c:f5:
9d:cc:7f:ea:37:15:41:c1:29:23:3d:a8:bc:03:7d:
24:fc:9e:81:ca:7d:dc:bf:e9:d9:18:0e:d0:57:4c:
ed:4f:7f:56:55:11:57:fb:33:44:24:6b:1b:fe:8c:
71:25:e5:db:a0:8b:ea:c5:5d:18:86:a6:df:f9:ff:
3f:83:ad:12:9e:48:93:f0:cc:cc:d0:80:2a:d3:8f:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CD:56:42:1C:33:DD:C4:5D:85:1C:D1:59:96:11:4B:61:06:DF:95
X509v3 Authority Key Identifier:
keyid:B4:8F:06:3D:29:E9:10:F0:33:BE:CB:65:6E:8B:99:01:F6:9E:C9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI8GPSnpEPAzvstlbouZAfaeyXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/vM1WQhwz3cRdhRzRWZYRS2EG35U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/26c7ff-998e-4131-a747-3c43c3d35ef3/1/tI8GPSnpEPAzvstlbouZAfaeyXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a5:3d:30:8a:54:b7:5e:e3:86:28:fe:c4:6d:f6:c1:16:2d:
8f:3b:43:67:6c:69:0d:41:17:41:3e:bb:e0:64:01:4f:c8:e6:
e9:e1:15:0f:a1:55:ec:06:8d:70:35:9d:43:d8:82:4a:0f:7f:
b3:35:73:03:d6:ec:52:da:ee:2d:75:94:4e:7e:e2:a3:69:ff:
a7:eb:48:4b:aa:19:3e:bf:91:a6:72:64:5b:40:e1:0c:fb:bc:
ff:e9:14:2d:c7:cf:f2:27:e4:16:e0:71:55:0f:80:de:ae:52:
60:d4:ca:a4:71:16:ad:af:81:cf:3c:b9:cd:89:fa:83:40:db:
7a:f2:41:c3:2b:59:e7:bb:d4:97:a4:60:f5:df:37:81:45:3f:
85:70:d8:07:b8:40:37:3f:6d:20:40:ec:82:1d:3d:92:92:62:
98:67:21:fe:c4:b4:e6:3a:bb:91:09:e1:f8:ec:5d:e7:7e:b2:
25:5f:56:8c:44:37:97:bd:5f:b8:9f:65:24:79:02:ba:41:c0:
db:a4:e5:04:41:3c:2f:e1:9b:3a:18:ba:58:3f:0c:ab:81:c4:
3b:8e:8d:d5:1a:4d:94:65:ba:2a:d9:d0:62:a5:81:ae:5e:0e:
f6:80:08:9a:66:f7:32:8c:b5:59:b8:36:ec:ac:bb:af:5c:a5:
32:48:00:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:16 2025 by rpki-client