Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/l2HpuvC6f9fVbGRIU_YgYBjx4vw.roa
File: l2HpuvC6f9fVbGRIU_YgYBjx4vw.roa (raw, json)
Hash identifier: Kdrvt9fByjaGxTJ7co7gZehnEAPmEhpF7v2Q4ea8KVE=
Subject key identifier: 97:61:E9:BA:F0:BA:7F:D7:D5:6C:64:48:53:F6:20:60:18:F1:E2:FC
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B082DFC1E14D2FFC23A6717892E9B
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/l2HpuvC6f9fVbGRIU_YgYBjx4vw.roa
Signing time: Thu 02 Jan 2025 09:48:56 +0000
ROA not before: Thu 02 Jan 2025 09:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60790
IP address blocks: 194.110.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:08:2d:fc:1e:14:d2:ff:c2:3a:67:17:89:2e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9761e9baf0ba7fd7d56c644853f6206018f1e2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2e:62:5a:d6:f4:e5:b6:b9:df:fa:a7:51:ed:
f7:60:1d:f3:b2:75:19:69:8c:af:e2:21:48:7f:ae:
39:84:cd:26:70:20:9d:13:99:b3:ba:93:33:ea:3d:
80:a7:18:e2:06:af:ef:68:9f:f6:78:63:98:1c:22:
36:ef:72:d2:68:fa:71:95:dc:4c:ce:30:4d:0a:57:
0a:c5:62:3d:e4:8c:7f:ce:b0:6a:2f:7b:95:35:4f:
e8:a3:16:57:8e:74:7c:4a:f7:1e:c1:9c:53:06:52:
73:c4:a1:69:d1:27:65:84:53:ad:35:5d:13:b5:2a:
d4:e9:49:48:db:5b:e3:7a:c3:16:0f:2e:0a:a2:d5:
87:3d:c0:c1:1f:b1:66:d2:46:97:7b:8a:9f:e5:48:
cf:07:a3:ec:48:34:bd:80:46:e9:99:d5:4a:29:6f:
17:83:97:7c:6b:3a:12:40:16:65:52:46:8f:c4:ae:
d5:01:82:40:9d:9f:35:6f:6a:b6:f5:b6:8c:46:7e:
e8:b3:89:31:ef:87:9b:41:63:d3:9a:d8:3b:d4:68:
b7:22:ef:d8:e2:dd:ca:41:91:7d:17:ea:13:7d:75:
ce:52:30:f4:6b:a8:36:11:2c:9f:42:30:6b:00:49:
11:5a:93:2a:24:d7:64:d9:71:39:79:a3:f0:43:22:
54:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:E9:BA:F0:BA:7F:D7:D5:6C:64:48:53:F6:20:60:18:F1:E2:FC
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/l2HpuvC6f9fVbGRIU_YgYBjx4vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.172.0/24
Signature Algorithm: sha256WithRSAEncryption
01:89:8e:27:95:a0:76:3b:98:5c:50:a8:33:2a:74:d2:9f:a4:
0d:6e:70:6a:ac:01:48:a1:22:1f:79:b9:7b:c1:3d:aa:70:af:
cd:18:4b:76:5b:e5:6a:fc:cb:64:ba:43:09:19:43:6b:2e:66:
c1:58:f2:c8:9e:d9:30:58:c7:e4:d1:60:24:1e:f8:80:eb:62:
25:8b:86:d1:bb:d8:38:1f:f1:16:04:71:c6:16:84:a5:f4:35:
41:53:fe:23:ec:ca:e5:fb:84:1f:fe:e5:69:f3:84:63:19:a1:
50:43:27:9e:40:0d:43:d0:39:43:69:eb:c3:23:67:ae:02:0e:
04:2c:69:8b:a2:9d:46:08:b5:99:be:93:99:c4:3c:5f:e7:90:
79:8a:d8:8e:8c:d8:db:ae:83:5a:fd:5a:9e:2d:1c:8a:b3:57:
ef:f2:00:18:85:96:35:5d:ce:9e:d1:a1:ef:c4:e6:c3:b6:47:
a4:fe:39:11:c7:eb:a5:41:55:b7:8b:32:7d:b2:d4:c7:e9:40:
9f:c2:1b:5b:76:2e:39:ae:af:b9:7e:3b:1b:9a:c0:cf:a0:a5:
34:84:88:15:9f:cd:48:51:2a:d3:4f:e1:9d:59:8a:9f:ff:45:
28:95:5f:4e:99:b2:02:04:94:4c:57:be:91:92:39:9f:3e:c7:
72:33:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:34 2025 by rpki-client