Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/tD78yaOKHxAMN54cZ_UiavO4CHA.roa
File: tD78yaOKHxAMN54cZ_UiavO4CHA.roa (raw, json)
Hash identifier: jAbvoTBMupwzsMRTiVDhIW4eUBQnYA3NsicKftAzOOQ=
Subject key identifier: B4:3E:FC:C9:A3:8A:1F:10:0C:37:9E:1C:67:F5:22:6A:F3:B8:08:70
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019590AAE9DF3DC01CF76F2863F0E318716C
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/tD78yaOKHxAMN54cZ_UiavO4CHA.roa
Signing time: Thu 13 Mar 2025 18:01:14 +0000
ROA not before: Thu 13 Mar 2025 18:01:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214640
IP address blocks: 95.141.241.0/24 maxlen: 24
193.53.40.0/24 maxlen: 24
2a13:7c80::/32 maxlen: 32
2a13:7c81::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:aa:e9:df:3d:c0:1c:f7:6f:28:63:f0:e3:18:71:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Mar 13 18:01:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b43efcc9a38a1f100c379e1c67f5226af3b80870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:5f:ac:c7:f3:d0:67:21:f0:25:96:19:d0:
8c:e3:c3:41:82:3e:07:61:5a:34:de:78:39:82:57:
4e:98:ff:35:3d:b2:b7:b5:30:4e:75:32:da:66:6d:
86:58:00:08:87:51:e3:b7:4b:68:ec:36:44:c0:82:
46:b0:b9:ad:78:80:37:84:2b:11:85:16:bc:72:15:
d0:7c:84:c5:1f:e4:71:ce:97:49:1e:22:48:d0:e2:
30:c0:93:b6:f9:b3:88:88:74:a0:48:3d:23:65:3f:
cf:03:8e:7e:dc:c0:0c:ce:a8:20:17:c3:4e:7b:db:
8c:91:65:e5:9d:d4:4f:e5:35:f6:6a:81:92:36:5e:
cd:38:f0:cc:f5:37:52:3a:61:0d:52:9e:2a:4d:3d:
ca:f7:0a:2a:a3:55:4f:76:46:25:16:2c:dc:90:99:
ba:ab:48:8e:04:08:6f:64:7a:33:02:9b:8c:64:69:
72:17:ed:84:35:e9:61:4b:4e:44:41:46:c5:39:20:
b8:0b:e8:05:cb:c4:b6:68:69:1f:ae:7e:76:d1:29:
5a:28:86:9a:00:11:f1:c8:7d:1c:f1:d2:37:3d:30:
da:e4:1d:79:11:08:29:0a:bd:53:5a:ba:7c:99:25:
cf:58:59:2f:4a:00:09:43:6e:03:d9:cc:c8:f6:f4:
0e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3E:FC:C9:A3:8A:1F:10:0C:37:9E:1C:67:F5:22:6A:F3:B8:08:70
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/tD78yaOKHxAMN54cZ_UiavO4CHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.241.0/24
193.53.40.0/24
IPv6:
2a13:7c80::/31
Signature Algorithm: sha256WithRSAEncryption
4b:e1:fb:a4:ff:ea:7b:18:f1:3d:2a:87:fc:c0:71:16:e7:a3:
6b:26:a9:07:ef:58:4a:3c:64:0d:4a:1d:a7:d7:31:f7:5f:7c:
6a:b1:66:a4:43:cd:2c:49:d9:bf:ed:87:f6:91:0e:9b:b7:48:
e7:58:6d:95:29:6d:60:83:58:ac:96:24:59:c7:78:81:39:d9:
4b:dd:92:2a:b0:b4:eb:90:95:9e:92:e4:f3:c1:a3:3f:d8:35:
3e:79:3c:38:69:8c:33:42:6d:e5:2e:f6:39:c4:2a:3f:df:f7:
fb:bb:26:51:ee:80:94:47:8b:88:31:57:68:5f:42:d3:ac:fc:
c2:2f:84:1e:0d:6b:5d:4a:a4:e1:d2:19:ff:b9:20:93:0e:ad:
fe:b7:5c:3f:f2:97:6d:4f:5c:bb:f0:ea:82:47:35:4b:a4:a1:
9c:e4:1c:95:3f:5d:53:74:ba:68:9e:e8:d0:9c:70:77:73:2b:
81:7b:51:be:d1:e9:4a:45:f0:2a:a2:46:a9:06:78:9a:bf:4b:
60:64:e9:61:70:d6:13:0a:39:53:21:99:51:eb:bc:ea:cd:26:
d2:45:35:54:b0:91:34:6a:79:67:52:13:9b:3a:ca:5c:b2:85:
88:f7:a6:1f:96:fb:fb:a4:f6:d2:46:05:28:b3:95:7f:63:ad:
47:8e:30:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:05 2025 by rpki-client