Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/jGhXzh2b4PKVeDKStlkuKpWSF1E.roa
File: jGhXzh2b4PKVeDKStlkuKpWSF1E.roa (raw, json)
Hash identifier: UKCCCfaCTIYyvaiefORFa+m9CnomjkMQIkqcoPohqCk=
Subject key identifier: 8C:68:57:CE:1D:9B:E0:F2:95:78:32:92:B6:59:2E:2A:95:92:17:51
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0194228E47EB89E5741A431E69A4C91FF745
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/jGhXzh2b4PKVeDKStlkuKpWSF1E.roa
Signing time: Wed 01 Jan 2025 15:48:57 +0000
ROA not before: Wed 01 Jan 2025 15:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214000
IP address blocks: 213.145.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:47:eb:89:e5:74:1a:43:1e:69:a4:c9:1f:f7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 15:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c6857ce1d9be0f295783292b6592e2a95921751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:46:3f:97:b5:d2:72:1e:95:c8:b2:93:2b:
ac:f8:17:06:0f:ba:ac:10:65:1f:ce:4c:33:50:c3:
13:4e:12:66:d3:f0:2a:b0:d1:ca:42:ff:d8:f4:1b:
70:36:b0:9a:5b:8a:51:3a:c7:59:8f:56:09:f8:1a:
66:67:be:97:be:36:99:23:2b:15:61:b5:bb:d7:d9:
18:d3:92:2a:81:f1:24:7a:ca:63:f0:2b:72:b1:c7:
5e:c1:61:87:11:db:07:cb:72:4e:8c:4c:9b:7d:a0:
a7:b8:aa:32:8e:57:9d:0e:be:58:8e:81:e4:da:ab:
53:f5:2a:1a:1f:3f:c9:4d:ba:b2:b7:c9:07:bc:76:
89:7b:87:3f:0f:1f:60:be:0b:71:4e:75:a6:77:62:
80:51:99:90:56:ca:4b:23:c1:88:38:c9:dc:d8:c3:
b7:d6:fa:70:97:84:d5:a7:ff:10:4c:4b:95:4d:09:
37:fd:c9:23:64:f3:77:81:d4:72:7b:35:15:ab:ae:
47:ed:4b:bc:f4:62:f7:11:0f:59:d8:37:b1:2f:4d:
9d:70:31:be:d3:0b:09:5d:31:1a:f1:f4:47:c1:00:
88:6f:d6:f4:12:45:3b:e7:3f:4a:77:12:13:26:7c:
59:6a:86:69:04:71:12:9f:03:97:e8:49:ff:85:21:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:68:57:CE:1D:9B:E0:F2:95:78:32:92:B6:59:2E:2A:95:92:17:51
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/jGhXzh2b4PKVeDKStlkuKpWSF1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8d:b3:8f:97:dc:43:3a:46:0d:38:00:23:1d:32:2c:91:06:
0f:4d:45:67:c5:d2:95:7c:be:98:43:36:8c:80:30:59:7b:6c:
96:3b:3f:1f:80:91:b0:3d:ad:d5:88:66:9b:eb:4e:66:34:3c:
24:00:f5:f8:3a:d0:8e:84:9e:0d:dc:12:55:2b:aa:83:38:ee:
c4:e4:e6:84:98:3b:04:fa:67:32:6c:c3:05:c4:4f:ca:91:d7:
61:5b:57:54:60:27:d0:ff:10:42:2d:2c:71:42:8c:49:eb:2c:
c4:e5:24:96:20:66:aa:76:10:29:51:79:11:f5:ba:25:ed:b2:
0b:bb:e0:c9:66:bd:2b:ca:ce:28:32:1a:71:4d:8c:02:f7:78:
77:09:8b:21:bd:0e:b8:7a:54:b2:01:3a:1b:ca:2e:8a:c9:15:
b9:fd:73:90:37:fd:25:c4:ae:39:89:b3:65:5d:27:fc:84:28:
e1:68:6b:42:2e:85:33:97:3a:35:d5:b0:a0:28:6a:a2:89:a5:
b0:53:83:dd:cf:bc:ba:be:98:4a:0f:c7:b8:a8:d1:3c:67:2b:
ff:f3:dd:45:1e:f3:98:98:ef:9f:f1:b3:65:88:49:80:79:6e:
7f:18:42:91:b3:f1:c1:e4:76:6b:b8:9a:b2:90:37:c9:5b:6f:
9e:e0:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:47 2025 by rpki-client