Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa
File: 1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa (raw, json)
Hash identifier: Q9hOadBBuPPxo3375iiCb6IfTPJTRKVivBWjEk+2yzQ=
Subject key identifier: D5:A0:F1:B6:4F:09:46:1E:A2:D2:43:3B:BE:A9:47:01:A4:2B:27:77
Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial: 01963F39BB99655D8473B2E764C793429538
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa
Signing time: Wed 16 Apr 2025 15:31:10 +0000
ROA not before: Wed 16 Apr 2025 15:31:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 195.248.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:39:bb:99:65:5d:84:73:b2:e7:64:c7:93:42:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
Validity
Not Before: Apr 16 15:31:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5a0f1b64f09461ea2d2433bbea94701a42b2777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:da:75:56:8d:ef:ae:20:08:46:8f:3c:38:a4:
1f:c7:1f:b5:dd:ff:e9:af:c7:ae:48:9f:10:05:f0:
86:6f:87:f0:7d:2a:51:30:d1:99:a6:85:18:60:f3:
eb:b4:0c:c9:aa:b5:5b:3b:f7:ec:91:7d:7b:40:75:
8f:d3:2d:88:04:f1:c4:af:50:b8:30:0c:01:5d:f2:
82:a1:95:20:2f:b0:f9:c3:9d:f5:31:b3:10:60:3f:
f6:53:56:08:1c:b1:3a:bb:04:bc:26:f7:13:37:f0:
04:43:65:75:1e:bc:6f:7c:6f:9e:a5:78:77:6a:b4:
75:15:12:c6:11:55:cb:a6:af:80:97:e2:b0:5a:8d:
19:f9:3f:dd:51:8a:45:5b:38:c0:4b:1e:55:50:6d:
5b:7c:9f:aa:96:ee:13:a1:df:2a:32:b7:0a:1f:d0:
f3:fc:45:b6:12:9a:23:27:fa:a4:fa:28:25:76:da:
ec:33:87:6a:73:ba:e7:7a:7d:48:62:67:af:e9:15:
c0:b4:14:cb:86:75:6d:3f:3c:6a:fe:94:7d:59:4b:
dd:f8:98:97:d2:f0:64:cf:9a:dc:3b:79:1b:b7:cf:
0f:7f:d4:b6:e1:9b:a7:2e:a6:c3:fb:9a:99:43:c6:
97:c3:25:53:01:b9:bf:0b:db:55:d1:e6:a1:f5:0a:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A0:F1:B6:4F:09:46:1E:A2:D2:43:3B:BE:A9:47:01:A4:2B:27:77
X509v3 Authority Key Identifier:
keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:db:f1:a5:a3:11:04:1f:a5:67:28:f0:40:ba:72:08:56:4e:
62:60:d4:35:cd:7b:3f:cc:48:eb:21:50:03:6d:13:0d:11:de:
20:04:bb:ba:40:2e:5e:ca:15:37:ae:4e:31:88:68:85:cf:41:
c8:cf:e4:5e:f3:c1:3a:38:ef:6b:ef:c1:35:aa:ff:7f:95:89:
8d:4c:51:5a:05:a4:9f:82:6e:39:4f:b0:72:55:5a:7c:f4:6c:
c8:06:95:cc:4d:52:36:cb:e2:73:ae:1e:94:6f:4a:f6:54:a0:
ae:ed:e9:20:76:13:5b:e3:93:db:ba:7d:22:b4:cf:8e:83:a2:
29:6d:b6:17:07:8e:10:69:34:bd:12:aa:ae:43:3c:95:bb:1e:
07:07:08:43:b6:7e:da:5e:09:22:8c:38:af:27:02:cc:83:48:
fd:cf:08:55:06:b8:16:18:b2:eb:40:70:a8:de:de:f2:61:92:
1c:69:73:73:49:08:24:84:0c:1b:9a:2c:c6:df:c8:2e:6f:9c:
9f:07:12:c4:07:67:68:54:0d:3b:6f:e7:b5:d1:a3:47:4e:29:
d4:6f:d1:98:5a:b8:4c:57:f9:6f:09:be:64:0d:0b:a2:54:12:
e9:e0:b3:d0:3c:e1:48:97:80:00:a3:7d:9c:21:d0:39:43:73:
8e:72:5a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 14:59:22 2025 by rpki-client