Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa
File: hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa (raw, json)
Hash identifier: 5eRa0XK3oy+0XVVEDTa2qZR1cDbvimVVidnig16u0uM=
Subject key identifier: 85:0B:7A:7C:BB:ED:87:BC:A1:67:F8:32:F9:E5:8C:D3:87:C7:D1:5A
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 0194236A100E6882DFC514B6FEE4BF878F30
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa
Signing time: Wed 01 Jan 2025 19:49:00 +0000
ROA not before: Wed 01 Jan 2025 19:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 185.115.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:10:0e:68:82:df:c5:14:b6:fe:e4:bf:87:8f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=850b7a7cbbed87bca167f832f9e58cd387c7d15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ed:a7:a7:22:90:99:59:d2:09:34:c5:25:c8:
f2:93:fb:b1:2f:69:2d:f1:20:e1:48:59:e4:71:39:
78:e8:13:bd:00:68:4d:70:6e:e3:d1:ce:d5:e2:82:
e1:93:be:65:d5:6a:d0:9a:04:2c:e4:3f:b1:6f:3f:
df:bf:92:2e:5c:1e:34:c0:89:4c:1a:d9:f5:be:5f:
3e:25:8f:d6:ac:91:f4:44:55:75:67:9a:92:c7:be:
33:11:da:c6:73:94:ad:35:33:74:77:39:90:30:3a:
7b:e9:6c:89:e4:96:6b:ff:61:a7:a2:ee:ea:77:d2:
a3:de:ee:33:02:3e:c7:fc:8d:da:92:f4:a5:a6:8d:
6d:8a:c3:5d:07:67:53:c3:74:47:36:c5:65:0f:37:
46:27:25:a6:cd:9e:bf:5f:a4:b8:4c:04:b3:f2:42:
2a:08:0c:68:30:fb:49:00:2f:3e:7d:a5:2f:24:d8:
bf:39:bc:a9:e9:99:2c:70:b3:6b:f7:43:92:0b:e7:
41:16:94:a3:c7:a4:cc:18:67:10:74:75:da:0e:08:
3d:0c:8e:36:11:db:30:2e:32:16:b4:c5:d7:72:1d:
35:dc:2c:34:68:54:a8:09:4f:40:a2:62:e8:e4:50:
20:0c:36:aa:32:fb:0a:4a:e6:c6:d7:7c:b6:1d:5f:
32:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0B:7A:7C:BB:ED:87:BC:A1:67:F8:32:F9:E5:8C:D3:87:C7:D1:5A
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.161.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bb:36:bb:5d:46:2e:d6:1a:ca:68:77:40:fa:8f:89:88:ab:
34:7b:02:6d:60:60:9b:ee:d7:39:82:26:24:02:f9:ae:1b:36:
b6:7d:ed:90:69:bd:24:6f:f0:54:fd:71:00:9b:03:f0:e7:81:
fa:ea:6f:d9:52:23:11:61:c3:c8:7c:b9:c2:88:1e:b4:e2:76:
c1:86:89:01:17:50:e5:e0:d4:11:c7:a4:2d:be:c1:ba:0a:b9:
ce:8a:db:f8:31:12:ad:69:ea:bf:1b:df:a4:b0:7e:22:92:47:
58:6e:ca:20:c0:3b:e6:06:c5:60:33:9b:fb:84:be:e1:de:89:
d5:f3:87:84:6a:e5:70:e3:b9:5f:08:f4:cc:6f:a1:2b:d1:f3:
41:ea:05:06:3c:11:7f:1d:39:ed:ef:33:d5:42:13:3e:72:3d:
72:11:77:88:b8:16:3b:a2:bd:75:f0:0b:16:17:ca:c5:99:72:
74:f6:c2:54:7b:07:c3:0b:d1:4a:41:a6:e2:3a:6a:53:a2:1a:
91:f7:67:30:64:24:a6:49:7c:b4:8a:d2:33:d2:6d:bd:68:18:
76:01:9a:bf:9b:a8:0d:b2:64:bf:b2:78:7c:b1:a8:81:53:dd:
76:02:b0:65:dc:b3:e7:f3:93:05:1e:72:22:f9:48:96:4e:5b:
8b:35:4d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:54:23 2025 by rpki-client