Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa
File: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (raw, json)
Hash identifier: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=
Subject key identifier: 1D:F8:74:E9:7A:FD:F8:3D:67:AF:56:94:52:59:43:6E:9F:BA:02:34
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 019424452F4F80F7B782F87D6939F54B8C08
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa
Signing time: Wed 01 Jan 2025 23:48:21 +0000
ROA not before: Wed 01 Jan 2025 23:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33868
IP address blocks: 91.207.186.0/23 maxlen: 23
185.6.2.0/24 maxlen: 24
193.23.54.0/24 maxlen: 24
194.24.164.0/23 maxlen: 23
2a02:848::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:2f:4f:80:f7:b7:82:f8:7d:69:39:f5:4b:8c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Jan 1 23:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1df874e97afdf83d67af56945259436e9fba0234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ac:71:20:c5:fd:c1:dd:7a:24:da:60:fd:cf:
e9:e9:4a:ad:6a:1b:29:f7:f6:98:11:c6:94:93:a3:
b1:d0:33:ec:c1:8c:12:8d:00:99:fe:f2:18:0f:b8:
ef:ed:5e:a7:69:3d:61:64:53:3d:83:30:51:1b:da:
95:42:e9:cd:39:75:95:dc:91:f0:5d:b2:ae:be:4b:
42:7c:1a:8b:bc:db:bc:50:da:60:fd:05:4f:34:03:
0d:8e:2b:d1:e6:55:6c:99:d4:cc:27:ac:e5:e6:f1:
74:76:57:dd:e5:a0:3f:ee:92:4a:07:72:a1:ec:07:
a3:0a:7d:6c:ca:d0:14:59:00:db:db:5c:38:c1:3f:
91:fe:1e:fc:90:0d:ef:2e:d6:a0:42:72:fd:85:eb:
1e:bb:12:f2:48:33:ff:d3:eb:d1:c7:b3:db:cc:b7:
b0:95:51:1e:c8:a3:dc:dc:7f:d3:a0:6f:33:b3:e2:
f4:ff:59:01:19:48:62:6b:ab:8f:6e:51:38:cf:b0:
f9:7a:11:3f:82:ca:49:6c:a1:43:bc:15:50:0e:f6:
3c:a0:aa:38:77:dd:64:02:95:98:6a:88:6a:db:77:
65:21:fc:7b:dd:92:58:8b:2f:b5:3c:b1:f8:eb:27:
92:35:81:3e:f2:82:22:32:68:1e:56:17:28:1f:56:
da:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:74:E9:7A:FD:F8:3D:67:AF:56:94:52:59:43:6E:9F:BA:02:34
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.186.0/23
185.6.2.0/24
193.23.54.0/24
194.24.164.0/23
IPv6:
2a02:848::/32
Signature Algorithm: sha256WithRSAEncryption
bd:0b:fb:23:ee:ce:4d:3e:04:93:df:b4:dd:a2:99:77:5c:67:
13:1e:b3:6d:1d:9e:96:69:f3:78:4d:42:6c:49:95:24:33:b3:
6f:9c:e3:e2:85:53:13:ac:df:87:27:c4:1b:c1:bc:d1:b8:83:
ac:0a:38:a6:7e:85:e1:25:3e:ec:77:49:1b:f8:72:f1:92:ef:
97:9e:c5:10:8c:1d:a4:76:7f:2a:1f:60:f6:e7:3b:b2:60:bc:
21:9d:96:d4:67:00:52:88:1a:4c:12:4b:f8:94:0d:7b:71:5c:
fb:1f:9c:65:ec:b0:f3:62:94:f6:80:58:86:8e:6a:03:39:e7:
c9:60:4d:9c:92:09:12:29:ca:fe:ea:d4:62:89:df:7d:ef:a7:
77:0c:c8:c2:74:d3:4a:d9:80:70:51:17:90:2c:02:48:dd:f3:
ed:0f:2d:8a:b0:d2:a3:96:89:3b:dc:2c:ba:bc:e4:7f:c4:3c:
59:fe:ea:ac:bf:e7:45:0d:52:9d:5e:d5:09:6a:09:09:84:e3:
00:63:94:cc:93:e4:28:32:a6:df:dc:7b:09:ea:7d:ed:61:a6:
18:98:95:a6:f5:c3:81:de:02:82:46:72:40:07:25:48:9b:41:
06:dd:5e:c4:39:db:2e:a5:de:34:3f:7c:8b:51:a9:0b:77:86:
58:80:71:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:41 2025 by rpki-client