Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa
File: Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa (raw, json)
Hash identifier: +sFVK8H7AnsXd5rUe7kR0o92ssiFNiEpWCKNsSev/NE=
Subject key identifier: 0E:BF:CF:40:ED:81:3C:7A:1A:E0:69:74:01:9B:48:F7:4E:7E:77:E3
Certificate issuer: /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial: 01961FD84FF7B36F19CC3558688F912DF0BA
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa
Signing time: Thu 10 Apr 2025 13:16:31 +0000
ROA not before: Thu 10 Apr 2025 13:16:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212582
IP address blocks: 31.14.183.0/24 maxlen: 24
195.138.55.0/24 maxlen: 24
2a14:9680::/29 maxlen: 48
2a14:9680:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:d8:4f:f7:b3:6f:19:cc:35:58:68:8f:91:2d:f0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Validity
Not Before: Apr 10 13:16:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ebfcf40ed813c7a1ae06974019b48f74e7e77e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ca:f4:85:6c:bd:ff:0f:69:49:ae:43:63:a5:
a3:40:b9:c4:66:e0:d6:80:8e:10:73:f3:ee:e5:89:
d8:74:cd:81:ca:2e:f7:51:e6:b2:35:4a:98:a3:d6:
0d:e4:6c:a2:73:d4:4d:33:c5:db:2a:07:6b:dc:94:
ee:43:f5:e4:8b:2d:9e:d1:21:9d:5c:48:f8:62:87:
f3:05:5b:9d:fb:1d:84:04:70:c4:86:10:22:a8:56:
4b:40:a7:4d:cf:14:4b:a4:18:e7:8d:e5:fa:34:fe:
ae:ee:bb:50:c1:82:ab:2c:0c:76:d2:96:07:2b:79:
34:63:08:01:65:5f:20:b3:a4:c9:86:76:ff:f4:e6:
33:17:57:e3:b8:f4:de:9c:4c:dd:b9:bf:6e:38:74:
25:66:68:20:fa:b0:f0:38:98:1b:78:64:0c:03:e8:
1c:ca:11:17:48:83:64:82:53:a9:f5:b0:5c:89:5d:
cf:d2:fa:80:33:05:1b:32:e5:bd:d9:72:e3:4d:b8:
d1:2f:89:38:44:3b:c4:5c:24:6e:f4:f4:dc:ed:56:
ff:7e:5b:b2:3a:f8:bd:1e:91:da:1a:55:9e:8f:2f:
8e:98:01:f6:57:c9:b7:f3:d3:91:f6:9d:77:4c:77:
f2:37:7c:84:e7:b8:60:4d:6e:e0:7d:e9:4f:d3:24:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BF:CF:40:ED:81:3C:7A:1A:E0:69:74:01:9B:48:F7:4E:7E:77:E3
X509v3 Authority Key Identifier:
keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/Dr_PQO2BPHoa4Gl0AZtI905-d-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.183.0/24
195.138.55.0/24
IPv6:
2a14:9680::/29
Signature Algorithm: sha256WithRSAEncryption
3d:1c:15:71:ea:37:77:aa:6c:e8:50:98:25:d1:b4:c1:2a:bc:
d9:4f:03:db:20:6d:50:b0:2b:c1:10:bf:fa:92:c8:78:23:a5:
a8:79:e2:22:6c:d3:37:47:4f:f8:61:e6:5e:3a:8a:79:3b:b1:
fa:5c:df:29:95:d9:48:7b:75:f7:7e:53:c5:9d:7a:51:54:17:
84:a3:52:42:d7:1c:f5:94:52:0c:05:4f:ab:c6:ff:c0:d0:94:
5e:06:4f:19:6a:a7:83:f0:a8:82:7b:60:b6:60:af:38:d0:03:
a7:48:fd:2f:cc:71:92:b6:af:56:65:37:14:9f:37:4b:7c:86:
6b:c0:19:82:56:6f:7a:9a:c6:11:d4:46:b9:e5:ca:19:29:35:
c1:96:06:3d:c8:49:c1:18:5c:cf:7f:f9:88:5e:a9:99:3c:26:
c1:bc:0a:f1:df:48:38:08:5f:07:a9:42:3b:75:cf:47:85:c9:
0d:0b:a4:a6:27:1e:ec:fb:f1:16:1f:c2:1b:73:59:7f:70:c2:
16:10:07:b4:4c:89:3e:2c:f6:2d:b1:9d:a8:c6:55:c6:37:a5:
a3:b1:b2:7e:af:29:d1:31:56:ad:d2:96:ed:aa:c4:9d:73:8c:
0e:94:79:86:60:7e:36:01:27:a6:5a:3a:2a:56:4e:08:c2:5a:
55:5e:21:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:58:50 2025 by rpki-client