Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/duhqaZfDGitvRaokNyqOu5bk0v8.roa
File: duhqaZfDGitvRaokNyqOu5bk0v8.roa (raw, json)
Hash identifier: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=
Subject key identifier: 76:E8:6A:69:97:C3:1A:2B:6F:45:AA:24:37:2A:8E:BB:96:E4:D2:FF
Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial: 019421439B1727BC31D3BF4AF33EAF611C20
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/duhqaZfDGitvRaokNyqOu5bk0v8.roa
Signing time: Wed 01 Jan 2025 09:47:46 +0000
ROA not before: Wed 01 Jan 2025 09:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20679
IP address blocks: 185.75.31.0/24 maxlen: 24
2001:678:418::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:9b:17:27:bc:31:d3:bf:4a:f3:3e:af:61:1c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
Validity
Not Before: Jan 1 09:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76e86a6997c31a2b6f45aa24372a8ebb96e4d2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:36:5b:4d:cc:9f:d8:6c:f6:58:0c:25:f8:
eb:8d:1f:95:9a:63:f2:da:e2:aa:e9:99:ed:8f:27:
86:e9:55:89:ad:48:c2:37:b1:cf:64:f2:91:0f:0c:
45:54:62:19:83:83:3c:d4:55:05:9e:b0:7d:f1:37:
43:65:61:1e:c7:e2:5d:dc:f3:1e:54:1a:dc:a4:78:
21:9e:3d:81:4d:e1:10:78:fc:d2:fb:d6:56:04:4c:
76:69:b0:98:e5:c0:10:00:ce:1d:61:8f:72:af:49:
83:ab:f0:58:ba:16:4e:f0:22:2c:34:80:97:3f:75:
ff:b0:30:36:d3:3f:21:84:1d:d1:f5:88:1f:7b:99:
97:67:5f:00:75:09:10:55:9d:a4:41:02:20:ea:22:
79:3b:23:93:8b:28:18:41:03:5e:e6:1e:b5:6c:17:
93:c6:19:7e:92:f9:db:b9:b2:2a:9b:a8:e7:35:d1:
cb:07:d4:56:ac:ad:7d:14:26:b1:14:13:45:17:b7:
02:d7:bd:ba:16:f2:50:e1:0e:01:f4:20:70:8a:41:
92:4b:b0:60:6b:4d:bf:e0:e7:51:d2:b9:b9:22:56:
ec:da:6d:13:3f:56:61:ce:65:d1:10:a8:56:6d:bb:
34:ef:43:ba:19:1a:af:5f:2b:6b:17:13:6a:1f:13:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E8:6A:69:97:C3:1A:2B:6F:45:AA:24:37:2A:8E:BB:96:E4:D2:FF
X509v3 Authority Key Identifier:
keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/duhqaZfDGitvRaokNyqOu5bk0v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.31.0/24
IPv6:
2001:678:418::/48
Signature Algorithm: sha256WithRSAEncryption
74:fa:68:5c:63:43:9b:a3:48:26:94:6e:ac:38:ff:5c:23:51:
f5:51:17:d1:75:44:14:22:56:cd:58:c6:ef:bb:90:b8:de:f7:
32:31:52:d3:45:13:8e:76:a0:5a:0b:a0:d3:b0:81:9e:61:9b:
45:97:40:87:0a:38:62:80:35:b9:6e:a4:6a:16:6e:91:1c:0f:
e5:4b:cb:83:65:36:59:e1:d0:0c:a7:bf:59:e4:04:4f:01:9b:
ce:eb:3e:7e:a7:8d:82:f4:18:19:cc:c4:2f:52:57:a3:20:9c:
7b:70:3b:ba:6b:fc:2f:8b:65:6d:cb:27:f4:87:95:7b:b8:78:
be:93:01:7e:d5:cd:61:94:5c:cd:b2:89:c6:b9:b6:02:36:a4:
6d:08:03:f2:9e:5f:1d:1e:e3:5e:90:31:d6:7f:b3:c4:d5:c4:
31:18:82:ff:2e:b2:45:40:63:ff:5d:b8:2d:58:9e:03:b4:77:
57:64:f3:3c:26:69:fa:47:b9:f7:18:1f:3e:b2:ed:00:3a:46:
0a:c4:cf:51:dd:66:ad:43:da:aa:6b:7d:06:e7:45:50:47:49:
25:80:1b:e9:fc:d3:d0:2f:2b:53:13:7d:04:7d:5e:4e:89:a2:
a2:57:bd:7a:82:98:14:f0:2b:bd:a0:c6:1f:dd:81:49:3d:69:
fa:ce:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:47 2025 by rpki-client