Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-I_epqxWWtmIc6PJAm3sRA-kL7g.roa
File: 1-I_epqxWWtmIc6PJAm3sRA-kL7g.roa (raw, json)
Hash identifier: 9dViXqv9H7voL6+qisdU5hrCzmD+WORs408tyBuzWhE=
Subject key identifier: F8:8F:DE:A6:AC:56:5A:D9:88:73:A3:C9:02:6D:EC:44:0F:A4:2F:B8
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A64B83AA17F9463499B63A652B6CF81
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-I_epqxWWtmIc6PJAm3sRA-kL7g.roa
Signing time: Thu 09 Jan 2025 09:28:22 +0000
ROA not before: Thu 09 Jan 2025 09:28:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198228
IP address blocks: 82.118.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:64:b8:3a:a1:7f:94:63:49:9b:63:a6:52:b6:cf:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:28:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f88fdea6ac565ad98873a3c9026dec440fa42fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:66:56:aa:51:ca:38:d6:e1:17:68:1e:f5:
64:8c:8c:e4:44:d0:15:2a:26:46:ab:69:a1:ec:a9:
8f:47:a9:10:66:6d:cb:50:82:66:b1:6b:5e:87:c7:
83:ba:3b:4d:54:07:dd:a0:b2:07:2d:49:01:2a:61:
81:01:cd:09:c3:15:94:f3:cc:c5:6f:e2:2a:2e:25:
b0:34:d5:f4:7b:94:f2:f9:a1:2d:e8:22:48:72:2d:
d4:3b:87:77:79:75:b2:3b:e0:40:55:69:e1:e5:3d:
52:f5:da:94:24:7f:85:89:7a:6f:24:0c:51:3f:5d:
3c:84:cb:55:dd:76:32:dd:c3:41:67:0a:60:a3:1a:
4a:d2:ae:76:bb:97:9f:24:02:92:2c:e4:ae:b3:dd:
9f:a8:3d:7e:c1:26:84:5f:61:29:b3:f9:b2:23:6b:
38:5c:43:b5:6a:dd:87:9d:ef:6a:f5:53:ca:ec:d1:
fa:30:bc:68:f4:92:86:24:1c:8b:0e:7f:1d:1a:b2:
5d:3e:b3:ea:f1:0b:87:32:9f:c1:86:7a:ad:c5:46:
3e:cd:5f:77:f7:8c:cd:50:87:f4:c5:e3:a0:3e:49:
5c:06:92:96:21:7e:3b:07:c2:45:9c:a3:1e:3d:52:
e8:82:2e:ac:e9:af:71:3e:37:da:f3:69:82:0a:e8:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8F:DE:A6:AC:56:5A:D9:88:73:A3:C9:02:6D:EC:44:0F:A4:2F:B8
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-I_epqxWWtmIc6PJAm3sRA-kL7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.118.226.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b3:17:cf:91:92:7e:e5:3f:b1:3d:27:22:a3:1a:99:1f:25:
04:1e:06:83:93:08:54:10:53:bf:c0:9f:ce:c4:ec:2c:7c:40:
25:16:7a:84:7c:90:23:f7:f6:87:b6:37:3d:5d:64:42:fb:0f:
0d:aa:09:06:b9:3d:b0:72:4f:16:7c:6e:05:25:f6:24:7e:46:
a5:6d:b3:87:e1:b9:68:9b:2e:1e:88:33:6c:d3:f6:c5:d6:4d:
80:08:64:e9:f9:9f:65:f5:a0:8d:8e:2a:af:a5:b8:32:b4:d0:
25:0f:4e:27:fc:41:81:d5:cd:1b:b5:01:f2:f9:aa:55:8a:01:
12:98:8d:8c:31:c7:c8:e6:90:74:3a:b7:91:49:4d:d0:0b:45:
21:5e:eb:d1:61:c4:6d:cd:dd:6b:49:ea:07:4f:a0:f7:fc:e5:
75:c5:05:d7:dd:fd:5d:2f:04:f0:54:b5:3e:40:06:b2:97:96:
69:be:eb:4c:83:2d:ee:4d:12:3c:97:bc:df:0b:6e:fa:db:82:
2e:ef:ef:92:b9:4b:9a:9e:c6:24:31:88:2a:9e:c9:5a:8b:9a:
eb:f2:67:55:a1:67:a4:4e:9e:fa:a9:0c:48:c9:df:3e:34:2e:
ef:64:56:d8:26:fc:c3:08:f8:99:d7:b4:3a:f8:bf:50:ed:5f:
7e:d1:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:10 2025 by rpki-client