Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/wJH2YhXqksjsanF0KbJBwlYiZcc.roa
File: wJH2YhXqksjsanF0KbJBwlYiZcc.roa (raw, json)
Hash identifier: n/0BTqFTsqTUVEvotziQ7CPQtrqIst9qVSVCHNt1hJY=
Subject key identifier: C0:91:F6:62:15:EA:92:C8:EC:6A:71:74:29:B2:41:C2:56:22:65:C7
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 019425FDEAE0FFB36D57A3E41E0363C8A8A7
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/wJH2YhXqksjsanF0KbJBwlYiZcc.roa
Signing time: Thu 02 Jan 2025 07:49:45 +0000
ROA not before: Thu 02 Jan 2025 07:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 195.160.148.0/24 maxlen: 24
195.160.149.0/24 maxlen: 24
212.39.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ea:e0:ff:b3:6d:57:a3:e4:1e:03:63:c8:a8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jan 2 07:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c091f66215ea92c8ec6a717429b241c2562265c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:dd:1a:9a:2a:43:65:1b:dd:18:4c:07:34:
3e:0f:ac:b2:21:17:0d:f1:e9:e0:e7:ec:6e:fe:b6:
5b:2e:b1:89:29:81:b8:ee:a2:b9:56:f9:e9:68:d4:
c0:0e:04:35:2f:41:38:4b:bb:8e:fa:8e:89:2b:1f:
99:33:41:8b:bc:1a:7d:bd:4f:9b:a6:fa:8a:6e:7f:
e6:94:34:0f:80:28:b3:be:ef:d6:53:9c:76:3b:b3:
89:90:42:90:35:e8:53:fc:34:a0:0d:65:de:8c:49:
f2:29:94:60:60:a2:32:2b:47:08:cd:63:ba:fc:42:
1f:ed:ff:34:ed:2d:f1:09:fc:f4:8c:d6:21:b3:3f:
a8:7f:0f:62:ed:10:24:1b:c5:e3:d3:2b:23:8a:24:
53:eb:00:7f:6b:3a:fd:f8:57:db:68:bc:37:9f:c8:
3b:10:4c:63:26:2b:c7:72:d4:ac:99:68:c7:83:a5:
13:0d:0e:27:2b:a9:91:0f:d1:73:af:9c:06:3c:43:
95:e8:23:8f:ba:79:5e:56:59:3e:76:6c:a7:8f:70:
e3:e2:ce:17:7f:2c:18:80:57:a7:6d:7a:9f:3c:1b:
8e:1f:b0:2e:2d:31:40:77:4c:c9:a6:2b:66:1b:96:
ce:4c:ad:e6:30:a2:ee:2d:61:a5:52:d7:5c:54:cd:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:91:F6:62:15:EA:92:C8:EC:6A:71:74:29:B2:41:C2:56:22:65:C7
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/wJH2YhXqksjsanF0KbJBwlYiZcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.148.0/23
212.39.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:85:c6:0d:c4:98:b5:ed:63:83:9c:74:50:7c:3c:08:46:59:
dc:f2:dd:4b:ea:09:44:ad:59:83:ab:90:b7:bb:d5:e8:17:b6:
47:cd:af:10:b4:66:fe:06:a9:03:58:95:2e:51:82:8c:8c:52:
f8:71:12:32:cc:ba:cf:69:a9:d5:e6:38:17:74:26:e3:57:45:
2d:8d:65:ff:1b:7d:a7:cb:0f:28:4d:df:b5:ff:42:24:58:87:
62:67:e7:46:69:fa:ae:ae:83:b9:3a:76:c1:fd:5c:2a:a9:f5:
1d:e6:86:9c:cb:c9:ad:49:23:bd:55:0c:a7:cf:1a:ca:43:76:
0b:56:55:d0:10:3b:7a:32:14:f7:61:c5:b2:6a:6f:69:e2:3a:
9b:ed:66:23:e5:3e:e6:55:b3:bb:e3:37:9b:71:18:94:2a:e4:
a5:cf:56:f1:a7:2c:7d:cb:c8:e8:f2:8a:0d:ee:05:a8:1f:f0:
ab:a3:1a:17:0e:cf:85:a5:23:2a:fd:9a:3e:46:e6:3d:ac:c3:
eb:22:bd:00:db:82:e5:b7:e2:7a:2a:82:bb:4d:57:6b:33:39:
0f:aa:18:a5:62:8a:6b:b8:ee:b5:a6:84:72:dc:b8:26:14:62:
9d:63:76:b9:ba:76:a2:7c:3d:8d:43:5f:5f:ff:cb:cb:22:4b:
f9:fc:13:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:00:14 2025 by rpki-client