Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa
File: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (raw, json)
Hash identifier: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=
Subject key identifier: 80:72:E8:25:2C:0E:47:67:C8:95:F6:50:F3:86:55:07:54:0E:6B:E7
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0194221FA5B7B3D7E15F9DBD2D5AAE168D79
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50352
IP address blocks: 185.94.80.0/23 maxlen: 23
185.94.82.0/24 maxlen: 24
193.42.157.0/24 maxlen: 24
2a05:bf81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a5:b7:b3:d7:e1:5f:9d:bd:2d:5a:ae:16:8d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8072e8252c0e4767c895f650f3865507540e6be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:85:b5:24:18:35:f8:41:b1:68:e7:02:12:
ae:3b:7e:d8:e7:c5:6c:40:5e:d4:c0:ce:b1:cc:83:
bb:c3:a6:ed:19:79:d1:6d:33:fb:b8:4f:2b:e9:85:
3d:ac:53:1a:97:02:db:5c:b8:bb:58:f8:77:12:5a:
31:01:42:02:12:9a:40:79:5d:06:e2:62:24:c8:49:
9c:2b:3c:5e:3e:9b:48:83:56:38:e7:b1:db:01:ef:
98:ce:cd:f7:91:06:19:46:fb:04:58:37:7d:d9:f9:
b1:a5:0a:4e:1a:78:7a:2a:4c:49:dc:f5:00:29:10:
88:97:89:f6:00:d9:ee:fa:88:5f:04:19:01:05:61:
8b:a7:12:d1:e5:50:11:7f:a7:e0:c1:5e:8b:b3:2f:
d8:c3:78:a1:f3:0d:26:42:7b:ba:ab:5a:6c:cc:a1:
4d:4a:74:f9:dd:30:62:27:a0:c5:e4:99:ee:c6:76:
4a:76:33:73:d1:ba:ec:97:8c:99:90:1f:14:83:99:
97:0c:98:16:37:75:8c:ce:57:d6:03:ac:08:50:44:
c3:27:b6:1b:2d:50:41:58:91:47:13:c6:29:b2:3f:
df:85:32:86:01:8d:13:ba:a3:4e:f2:cf:c2:66:30:
f4:cd:c3:d2:21:ec:df:45:c8:91:44:a6:3a:ed:20:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:72:E8:25:2C:0E:47:67:C8:95:F6:50:F3:86:55:07:54:0E:6B:E7
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.80.0-185.94.82.255
193.42.157.0/24
IPv6:
2a05:bf81::/32
Signature Algorithm: sha256WithRSAEncryption
7d:f2:f8:d2:0e:96:7a:57:e2:cd:50:77:46:c2:38:cc:3c:e9:
79:9b:e1:f1:32:c6:2a:05:a5:75:10:64:5c:ed:ca:c1:f5:6a:
f9:66:45:81:7d:af:50:1a:c9:c0:e5:27:77:6e:bd:6f:14:69:
f7:59:ea:82:25:37:91:a1:dc:1b:13:d4:8f:cd:c2:cb:f4:36:
2c:24:0e:60:a2:ca:9e:24:4d:3a:47:2f:27:ee:d1:f7:d6:94:
42:bc:09:66:92:f4:71:81:66:a1:d8:72:6a:cb:00:ab:f0:2e:
78:6a:cb:06:33:db:db:7f:0f:fc:3c:22:ec:8a:43:dd:7d:6f:
87:23:9c:15:a6:42:9d:86:d9:be:48:32:d0:09:39:57:22:dc:
fd:78:3b:e6:9a:36:a9:75:5d:36:c8:c0:d9:0d:d8:39:45:27:
ce:78:9c:3f:db:61:b1:cb:26:e2:81:32:5c:95:49:8a:b6:63:
84:29:96:2d:24:5b:4d:ee:1a:08:d3:54:c0:fb:ea:37:28:1c:
31:ac:8d:86:19:60:ab:47:cf:ee:30:f4:1f:db:41:d3:0f:7f:
f9:c2:c6:a8:60:f1:04:11:88:e7:31:74:54:94:88:84:24:3e:
5e:28:38:3e:f9:70:17:37:d1:26:d2:fb:9b:89:61:b3:55:5c:
8d:75:56:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:07:25 2025 by rpki-client