Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/tS4qFuiX3ntHvDjVyJpnqQIgubM.roa
File: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (raw, json)
Hash identifier: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=
Subject key identifier: B5:2E:2A:16:E8:97:DE:7B:47:BC:38:D5:C8:9A:67:A9:02:20:B9:B3
Certificate issuer: /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial: 019420D59F876030D70B38018C0790AA116B
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/tS4qFuiX3ntHvDjVyJpnqQIgubM.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204384
IP address blocks: 178.209.80.0/21 maxlen: 24
178.209.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9f:87:60:30:d7:0b:38:01:8c:07:90:aa:11:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b52e2a16e897de7b47bc38d5c89a67a90220b9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:98:2a:96:a3:5d:e3:37:4d:26:f2:e4:4e:f9:
17:73:1f:93:28:9a:80:c8:8d:9e:bf:ab:0b:b6:cb:
24:26:99:e4:f6:cd:f4:ad:b2:d8:c2:56:1c:3e:f3:
7f:93:e7:6e:70:0f:bc:b2:fa:81:39:3b:ca:d4:2f:
05:8f:94:5a:f3:86:ed:a2:69:72:65:6a:e4:3a:c3:
14:29:73:b9:30:2f:ec:22:fd:c4:38:5e:bf:d8:f5:
65:37:4e:de:1b:b7:28:47:54:78:58:9d:f5:4b:df:
8e:d4:59:ef:c2:d6:48:5e:ba:b3:39:74:d4:c1:51:
ca:10:ac:0f:b8:1f:e7:25:2d:5a:ed:1c:77:e5:95:
25:7e:77:fb:2c:cd:0d:f8:b7:fc:90:35:77:f4:fe:
4d:1f:1b:49:10:86:d9:ad:57:c6:98:61:05:62:61:
16:fb:41:8c:02:07:bb:44:aa:ce:27:4c:3f:ec:1b:
fa:c3:0e:35:97:f1:99:50:4c:57:73:72:31:3b:9b:
f2:22:0f:49:66:d5:7e:bf:ec:ee:6d:31:5f:70:42:
f3:34:ac:a6:45:59:8b:e5:81:66:a6:a5:6d:93:d3:
a6:e2:58:5b:cf:06:61:8c:9f:ca:38:b9:6f:00:9e:
c8:85:91:1e:48:f3:4b:f1:43:fd:5c:ba:8e:ab:27:
aa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2E:2A:16:E8:97:DE:7B:47:BC:38:D5:C8:9A:67:A9:02:20:B9:B3
X509v3 Authority Key Identifier:
keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/tS4qFuiX3ntHvDjVyJpnqQIgubM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.209.80.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:a2:e5:77:d0:f4:62:42:9f:30:e4:9b:23:64:7e:07:1d:16:
8b:39:0f:e9:21:0e:c5:9b:de:75:22:78:08:51:ee:61:22:72:
c2:a3:f1:5c:4a:89:f8:47:5d:09:86:52:6f:ba:3b:4f:28:3e:
ba:62:eb:21:c7:b1:25:e9:bf:54:04:ce:ca:47:e4:d4:ef:b4:
50:e5:3a:a6:73:2d:9f:90:f2:50:40:30:f9:bd:29:41:48:8d:
dc:fe:81:97:aa:8c:e6:10:22:e8:76:78:0d:93:6f:97:d9:d3:
06:45:3d:b8:69:14:13:97:48:d7:97:e1:1c:8a:d0:d5:c1:a8:
a3:bf:9e:9b:b4:ec:27:f5:86:15:8a:6f:38:ed:6e:34:d9:3b:
9f:fb:3f:31:84:73:5d:3d:c9:3b:38:e6:4f:9d:a6:65:b7:65:
ed:cf:76:e6:86:ca:12:4e:f7:f5:75:3b:e9:de:cd:95:e1:e9:
82:5b:89:f7:59:f6:93:97:c7:da:5d:6b:94:5d:0d:be:37:55:
39:b1:15:2b:14:2f:73:95:19:12:97:2d:f5:c3:a3:08:08:fe:
c7:09:9a:66:db:1a:bc:fa:36:3b:12:83:d7:11:18:ad:c2:c1:
ad:1b:cd:94:fc:8d:9e:ea:70:12:15:da:57:14:84:3e:fd:ae:
7f:0b:2b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:36 2025 by rpki-client