Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/CLChwLW02ELwkahXwyfiLI_9qug.roa
File: CLChwLW02ELwkahXwyfiLI_9qug.roa (raw, json)
Hash identifier: ZY2Z4KqkvJ5GmWXUsGBRyVc2LlG/nyUr0SW4E8BAqyI=
Subject key identifier: 08:B0:A1:C0:B5:B4:D8:42:F0:91:A8:57:C3:27:E2:2C:8F:FD:AA:E8
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 01942369E4E2EC9F3DC435061B8160205462
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/CLChwLW02ELwkahXwyfiLI_9qug.roa
Signing time: Wed 01 Jan 2025 19:48:49 +0000
ROA not before: Wed 01 Jan 2025 19:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 195.7.8.0/24 maxlen: 24
195.7.9.0/24 maxlen: 24
195.7.10.0/24 maxlen: 24
195.7.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e4:e2:ec:9f:3d:c4:35:06:1b:81:60:20:54:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jan 1 19:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b0a1c0b5b4d842f091a857c327e22c8ffdaae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:10:d7:8b:de:de:ca:43:57:ff:b5:90:56:29:
d9:58:a2:43:8a:f2:f8:00:b1:9d:72:ab:83:f3:9c:
c5:5b:ff:5f:a0:d7:fb:f1:43:19:ae:b5:91:6c:b0:
eb:a1:5f:c2:86:1b:14:54:b8:05:93:00:2e:62:ba:
c0:18:68:54:8b:94:8a:a1:5f:b0:76:d8:f7:b2:89:
da:9c:61:c8:ab:42:d3:66:10:69:28:97:90:0b:32:
a5:44:66:a6:18:f9:12:43:f9:03:e8:40:08:bb:56:
c7:84:60:a5:40:f2:9e:65:8f:f0:18:15:26:95:2c:
36:4c:a2:d7:54:65:b8:b9:08:88:45:4e:af:85:0f:
fd:d6:43:12:cb:07:37:e4:e6:6b:f8:0e:c6:24:f2:
17:3f:c4:36:bb:51:ad:35:7e:d7:ad:24:ef:e1:e4:
28:3c:f1:84:23:ea:ac:9b:66:52:9e:17:31:db:7a:
57:45:03:95:1c:f4:d5:4b:9e:24:ec:88:ba:74:ba:
4e:fb:45:1f:6b:93:cc:3b:07:01:cd:c9:f6:cb:04:
31:7f:08:52:6a:22:e5:4f:85:4a:27:62:40:06:49:
02:8c:b7:6d:ce:f2:42:74:12:95:ab:70:5e:9d:7c:
e9:e3:b2:f4:0f:6a:b3:08:01:b5:6b:24:06:11:e1:
84:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B0:A1:C0:B5:B4:D8:42:F0:91:A8:57:C3:27:E2:2C:8F:FD:AA:E8
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/CLChwLW02ELwkahXwyfiLI_9qug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:cc:a9:67:b7:e2:8b:f7:5f:cd:34:ee:10:c5:73:d8:86:d1:
63:1e:15:a8:f9:e9:86:e1:99:05:86:21:30:71:69:25:bc:d7:
65:58:75:d5:4e:37:2e:ef:f4:2c:2e:60:b4:cb:4c:02:d2:f7:
ad:08:e8:e4:f5:31:56:c7:8b:bb:66:6f:d0:c6:25:40:c2:28:
a2:98:cd:44:28:ce:1e:5e:35:ce:c4:93:19:03:df:74:f0:37:
6f:b6:c8:3f:e6:da:6d:4f:f8:7b:a6:1b:32:fe:18:a9:b9:c9:
67:fe:d3:c4:4e:4a:2e:3d:87:30:12:0a:0a:e8:24:64:75:76:
59:2b:48:c9:ee:22:af:03:86:7c:f2:b5:97:b4:29:23:93:55:
f2:a0:84:14:73:3b:7d:fa:28:a9:ab:a5:57:c1:c5:fb:64:03:
fd:bf:ac:39:3c:dc:7e:94:3f:90:da:41:96:44:96:7c:1b:3a:
8d:f7:a9:6e:c6:12:c6:b5:79:21:30:93:f9:8f:30:aa:73:ae:
31:42:15:48:1f:72:ab:66:87:39:60:ef:0a:14:31:50:b8:5e:
36:e9:ca:c4:25:d5:26:4b:04:20:bd:a0:71:fc:87:ee:38:12:
aa:a1:7b:7f:1c:af:e7:55:4a:f2:52:03:6e:cb:27:25:c2:5e:
fe:ee:7d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:03 2025 by rpki-client