Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa
File: V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa (raw, json)
Hash identifier: iuJ5R7a61uv63vftS3TPCits4UE3OCvlD1Io0BilMuI=
Subject key identifier: 57:EA:03:39:4C:CE:2C:1A:B4:46:3B:41:9A:27:0F:85:6F:46:C8:54
Certificate issuer: /CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Certificate serial: 01942825FCCBCB7332B3053580689E831AD1
Authority key identifier: 4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa
Signing time: Thu 02 Jan 2025 17:52:45 +0000
ROA not before: Thu 02 Jan 2025 17:52:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8757
IP address blocks: 185.144.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:fc:cb:cb:73:32:b3:05:35:80:68:9e:83:1a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0432f5429d861d7743bfc31d7ad019628a5eb
Validity
Not Before: Jan 2 17:52:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57ea03394cce2c1ab4463b419a270f856f46c854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:87:93:17:9e:ac:39:8d:d9:a2:24:c7:bd:
cd:23:dc:cf:72:8f:56:df:c4:d1:a0:79:33:c9:2d:
ae:52:85:7a:67:a9:02:fd:8f:28:64:45:3b:f8:cd:
2b:c9:6c:78:df:d2:2f:dc:e2:7d:62:f3:ff:cf:ab:
a7:97:b1:d2:04:42:8b:04:dc:78:f6:2c:21:7b:65:
3a:58:f9:a9:7c:f2:5e:8e:bf:07:89:cd:cd:65:cc:
56:de:a5:9b:62:ca:d0:01:e7:63:04:74:c2:f3:bc:
ad:75:9e:fd:9d:13:55:1e:69:d1:24:22:61:b1:0d:
cc:98:37:b9:e4:ac:05:88:e5:ff:e5:66:09:1d:92:
ca:29:fe:2b:8d:07:81:e8:2b:21:c7:47:87:f6:bd:
a5:b7:67:10:b7:41:72:68:d5:c1:1d:8e:a7:fa:ec:
b5:b7:d4:f9:1c:12:03:2f:01:19:9a:52:70:91:53:
e2:52:ed:5b:d4:da:a2:42:49:b5:16:08:2f:f8:c0:
cd:3e:8d:10:b3:a1:24:53:e7:ba:8c:49:d9:52:47:
7b:74:41:b7:ba:a3:fc:fa:b0:07:93:e5:e2:8c:0c:
8e:eb:e6:82:fc:9d:0c:94:31:5c:e5:ca:a2:41:34:
91:6e:a2:91:41:f1:66:fa:49:a9:f2:f5:e1:cf:2d:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EA:03:39:4C:CE:2C:1A:B4:46:3B:41:9A:27:0F:85:6F:46:C8:54
X509v3 Authority Key Identifier:
keyid:4E:E0:43:2F:54:29:D8:61:D7:74:3B:FC:31:D7:AD:01:96:28:A5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuBDL1Qp2GHXdDv8MdetAZYopes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/V-oDOUzOLBq0RjtBmicPhW9GyFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b17ca4-2e2e-415a-adde-77257e04765f/1/TuBDL1Qp2GHXdDv8MdetAZYopes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.84.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:62:cf:f9:d9:64:01:a8:8c:d5:f2:73:bc:bb:c1:6d:bf:18:
af:15:e8:e3:f7:8f:d7:d0:50:ee:58:47:03:2a:20:76:60:43:
8f:ed:8a:3c:be:1a:97:d7:e8:39:18:60:62:03:c4:82:92:fc:
79:83:25:aa:3b:88:e1:bc:e7:8d:ff:28:dc:cf:a6:8a:ea:89:
e6:52:83:ba:50:e5:44:a8:f9:40:a5:f0:57:25:65:72:ac:ec:
38:c8:f0:09:bf:29:78:65:59:e4:95:fe:b9:9d:3b:d5:2d:29:
96:c2:fe:40:0b:25:87:82:7c:d3:0f:2b:13:88:04:5a:2e:82:
7d:d5:33:73:2e:7a:76:30:8d:4d:91:6c:d4:ee:51:07:38:c0:
51:dd:f6:46:e6:e7:a7:25:2f:fc:8d:a9:e7:f5:ee:12:a7:26:
8f:9a:72:85:08:98:8a:7a:2a:44:a0:2b:83:85:06:ad:ff:05:
86:2b:e5:16:73:01:75:c6:fc:70:b3:39:4f:e6:a9:fd:1b:53:
25:b1:1f:24:06:c0:32:14:a0:33:f4:5b:0b:37:a4:9f:fb:b8:
cb:dd:70:2f:c2:46:84:3a:9b:3a:50:b3:5f:ed:1b:65:28:6a:
50:67:00:ab:b6:43:ac:b4:bd:0f:fc:98:c5:5a:32:5f:50:79:
e8:5a:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:27 2025 by rpki-client