Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/0ameKrNTqJZR4gA1i3dMcGWPv04.roa
File: 0ameKrNTqJZR4gA1i3dMcGWPv04.roa (raw, json)
Hash identifier: N8eGFncAUoepxijwz2unif/jMpOTc3s5S5SUBrK9fT4=
Subject key identifier: D1:A9:9E:2A:B3:53:A8:96:51:E2:00:35:8B:77:4C:70:65:8F:BF:4E
Certificate issuer: /CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Certificate serial: 019420D62B446AC4F1701AE046C330649309
Authority key identifier: 32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/0ameKrNTqJZR4gA1i3dMcGWPv04.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215824
IP address blocks: 185.140.250.0/24 maxlen: 24
2a13:1d80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2b:44:6a:c4:f1:70:1a:e0:46:c3:30:64:93:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1a99e2ab353a89651e200358b774c70658fbf4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:65:de:46:56:90:b0:2a:68:78:ea:6c:2b:
44:30:43:0b:ce:f3:d5:bb:b0:5f:0e:31:bb:29:eb:
7c:12:82:48:b8:12:21:8d:b1:93:0d:39:ce:4d:40:
ce:0b:04:a1:99:f9:ca:0a:c2:ca:be:1b:39:42:82:
72:80:7a:88:57:25:20:69:eb:6b:40:24:3b:cb:3b:
db:0d:a8:14:ef:96:c9:a0:32:b0:8a:47:02:36:0c:
16:11:d2:4a:85:01:93:4a:bf:5c:7e:94:66:b3:e0:
49:91:49:e3:bc:3d:b4:f1:f8:28:62:31:54:6f:75:
e7:c3:65:d5:c3:4d:64:26:a2:5e:21:af:3b:2c:d4:
5a:ce:58:ef:b8:69:19:60:c7:6c:a0:0e:33:4c:58:
33:40:14:0a:41:43:82:03:d5:c3:63:28:07:b0:63:
66:52:f1:69:cd:6a:51:dc:2e:5f:8b:10:e9:44:75:
7b:73:f7:ea:78:5b:51:dd:12:a3:90:65:0b:e1:f9:
83:2d:aa:42:5c:c6:83:a1:cf:36:60:5f:96:7b:6b:
27:cd:91:8f:a9:a4:74:4c:cb:84:c2:97:45:ca:8d:
b1:4b:0a:32:ad:29:5f:9e:2e:a1:f3:f2:10:64:ff:
28:01:6b:77:08:b7:cd:c2:9c:1b:00:dc:e0:74:08:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A9:9E:2A:B3:53:A8:96:51:E2:00:35:8B:77:4C:70:65:8F:BF:4E
X509v3 Authority Key Identifier:
keyid:32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/0ameKrNTqJZR4gA1i3dMcGWPv04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.250.0/24
IPv6:
2a13:1d80::/48
Signature Algorithm: sha256WithRSAEncryption
4c:bd:f1:a6:5b:a7:1d:ce:a1:ca:81:3b:13:6b:91:8c:af:1d:
c6:89:f1:00:63:21:e2:4d:b6:1e:5c:c0:e4:43:38:9a:5c:1d:
6a:94:8f:d4:5b:e5:3e:6d:02:8f:02:23:49:96:71:79:83:7a:
ef:fd:40:73:90:b7:0e:d1:a6:4f:51:6e:16:13:de:78:aa:ee:
56:18:fa:d5:de:5a:ee:ea:6d:da:b1:53:8d:ef:43:6f:a7:f5:
5d:dd:15:cf:53:71:27:25:48:f3:7c:cf:c7:13:2a:35:df:bf:
bc:d8:aa:ce:75:fb:c7:00:d1:73:7c:c8:83:98:58:2f:da:df:
60:5e:3e:d9:22:78:f3:2e:3e:b1:0c:8b:67:bf:4c:50:c3:46:
7c:92:39:34:e6:c5:af:2a:35:b6:be:9b:82:c1:6b:a6:f3:38:
45:41:4f:2e:35:03:39:5f:f0:84:ff:57:df:7a:95:e0:1a:4b:
b0:1e:60:14:bf:62:9e:07:9f:48:0e:ae:4a:5b:6c:09:88:14:
19:b2:3c:6f:89:a6:7e:64:74:4f:a6:dc:b2:14:09:8b:a3:7c:
7a:34:51:bb:61:d3:89:07:c9:d7:03:13:f9:26:81:6a:89:f0:
94:bc:9c:b4:c1:4f:c5:6a:6d:5d:33:6b:9e:ad:c9:12:cd:d0:
68:ce:7b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:10 2025 by rpki-client