Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa
File: gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa (raw, json)
Hash identifier: XHDVuSMRNZ8ZK68EQ/rZiQRsF4JaubC5jLA4NaC8LBM=
Subject key identifier: 80:ED:50:43:34:3C:10:94:8A:D6:CC:FD:41:53:08:55:F9:70:E0:8B
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 019423D74506BA60385C8CF3B278EF9B5507
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa
Signing time: Wed 01 Jan 2025 21:48:17 +0000
ROA not before: Wed 01 Jan 2025 21:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207661
IP address blocks: 194.32.161.0/24 maxlen: 24
2a05:5100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:45:06:ba:60:38:5c:8c:f3:b2:78:ef:9b:55:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80ed5043343c10948ad6ccfd41530855f970e08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:e5:1f:86:74:b0:52:10:a0:fc:e7:21:f8:
83:f5:86:ce:0e:93:92:5b:fd:0a:41:7b:ab:6d:e3:
d9:d0:6d:78:90:22:49:6d:1e:b9:d8:8b:85:01:19:
c1:6c:89:34:d7:3c:bf:19:8c:59:b8:45:fc:07:96:
61:59:ed:b8:32:f6:86:bc:89:79:ad:08:41:ff:29:
0d:a2:bf:e7:f1:0d:8d:f0:7a:98:81:2b:3e:d8:a8:
fd:46:a8:96:0f:62:cd:a4:39:38:b2:a2:84:63:60:
be:87:c8:dc:6b:4f:b1:25:9a:a3:ef:fb:6d:b0:84:
e8:37:57:bf:3f:b5:9f:58:44:38:1d:aa:c1:b4:6c:
ec:fb:ff:cc:e3:0f:4f:af:ac:77:e5:0a:eb:b7:b2:
b1:9e:7f:f3:9f:18:99:5b:e9:67:92:56:15:3e:21:
77:72:43:54:ff:90:51:0e:a3:ce:c2:8e:f1:4f:34:
34:47:d0:92:5e:70:15:46:9c:0f:4c:60:a8:ca:5e:
38:28:65:3f:86:41:f0:d2:c6:48:c8:45:3c:dc:0f:
d5:40:0d:75:c3:7f:6a:07:b0:53:44:6e:4c:3b:0c:
9c:2c:87:45:53:af:52:7c:de:97:79:4c:e4:4d:5e:
c9:28:96:14:c7:5d:a5:20:81:15:c5:2f:ae:0d:cc:
3e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:ED:50:43:34:3C:10:94:8A:D6:CC:FD:41:53:08:55:F9:70:E0:8B
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/gO1QQzQ8EJSK1sz9QVMIVflw4Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.161.0/24
IPv6:
2a05:5100::/48
Signature Algorithm: sha256WithRSAEncryption
27:af:ac:96:62:80:af:10:86:5d:8d:71:ff:a0:f7:ec:22:dc:
1b:e7:f3:51:32:51:6d:dd:37:af:0d:97:3b:c0:20:0e:8b:8c:
9e:11:62:67:4c:f2:ae:b0:cd:0a:8d:20:8d:e5:41:93:22:99:
1e:57:da:2e:58:4a:8f:39:a2:8d:fb:e5:65:33:43:09:63:dc:
d8:c9:b2:8e:4f:ef:af:ef:3d:e6:e2:3a:4b:4e:96:76:39:98:
63:b9:7d:7f:ba:cb:77:f4:d4:30:84:1c:66:ef:fe:49:d4:2c:
97:ba:23:7c:5b:f1:58:b9:79:c1:c9:b7:d8:7d:75:e9:3d:77:
d2:2e:98:40:02:04:3f:b3:1c:d3:67:4c:d2:b5:3b:86:14:33:
3f:9d:34:cf:97:2e:24:66:d3:01:c7:5d:d6:d3:63:10:ba:2c:
83:d2:cb:12:2f:75:94:7d:10:39:1d:4e:ca:06:2c:fd:d5:cc:
1e:83:fc:eb:ec:92:71:7f:4a:ee:29:4b:9f:49:94:a9:19:e4:
8d:93:fc:ad:76:ac:40:ff:83:f8:95:da:af:0e:90:20:90:07:
28:75:0d:3c:eb:bb:43:e3:2c:04:33:73:29:be:41:9f:94:7d:
cc:1d:53:66:77:91:d2:9f:77:76:8d:86:22:21:94:45:90:29:
59:bf:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:49 2025 by rpki-client