Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/e_UFXyqaeTvL3E6lukMB0WgwTVE.roa
File: e_UFXyqaeTvL3E6lukMB0WgwTVE.roa (raw, json)
Hash identifier: OXE+evWhqp6U3n1wOYbBBjgTwYv/71GDxDwJtwclFB8=
Subject key identifier: 7B:F5:05:5F:2A:9A:79:3B:CB:DC:4E:A5:BA:43:01:D1:68:30:4D:51
Certificate issuer: /CN=dbc7840920d1c709ff299aed3682c23fb432767d
Certificate serial: 019425FD9BD29D036875A64C25E96C78A75A
Authority key identifier: DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/e_UFXyqaeTvL3E6lukMB0WgwTVE.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43350
IP address blocks: 141.98.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9b:d2:9d:03:68:75:a6:4c:25:e9:6c:78:a7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbc7840920d1c709ff299aed3682c23fb432767d
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bf5055f2a9a793bcbdc4ea5ba4301d168304d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9b:f9:e6:f4:e9:60:44:fe:2c:37:49:ce:1f:
cb:70:bd:a8:8c:8f:98:72:aa:36:75:cc:ff:03:7a:
4f:95:b3:0f:f3:6b:b5:e7:c5:f2:7f:e1:ab:e1:aa:
e6:94:70:4e:70:88:fb:01:8b:64:5a:20:05:c5:7c:
fb:15:00:bb:ed:65:90:d8:b1:b4:e8:8f:a2:03:79:
d9:26:b4:0a:3b:bb:7c:53:63:7f:be:69:75:3a:a6:
d5:80:97:9d:a6:62:4b:af:ce:38:20:6d:64:93:ca:
16:9c:42:03:d7:1f:16:78:3b:8c:91:4f:6a:92:ed:
f1:49:88:80:c4:ef:98:d2:91:b9:09:5c:01:f2:d1:
df:c8:94:bd:bb:5d:3e:9c:62:be:1c:d0:56:65:68:
74:7c:90:7b:1c:40:b6:fb:2e:96:d3:27:5d:1f:0d:
8e:29:29:e7:76:44:ed:09:4d:ee:cb:82:21:a2:3f:
56:bd:a5:cc:00:11:59:71:7e:54:2b:06:65:e1:71:
41:75:a5:ba:f2:81:94:dd:4a:7b:1e:88:dd:b2:72:
19:66:11:54:90:b2:1a:93:45:08:23:a1:05:29:6b:
ef:91:2e:fd:18:0e:3c:49:7b:d1:04:af:38:71:27:
99:a5:7c:17:e2:cd:a6:f5:63:53:18:bb:4a:de:a0:
5e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F5:05:5F:2A:9A:79:3B:CB:DC:4E:A5:BA:43:01:D1:68:30:4D:51
X509v3 Authority Key Identifier:
keyid:DB:C7:84:09:20:D1:C7:09:FF:29:9A:ED:36:82:C2:3F:B4:32:76:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28eECSDRxwn_KZrtNoLCP7Qydn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/e_UFXyqaeTvL3E6lukMB0WgwTVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9521e1-7610-4d43-8683-51be2f9608bc/1/28eECSDRxwn_KZrtNoLCP7Qydn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.80.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7b:b2:34:d0:d8:40:69:e3:34:cf:5d:19:88:72:aa:66:4b:
f3:e1:c5:eb:c9:dc:14:2e:26:e5:b9:1a:12:67:0f:ac:46:bb:
da:24:10:dc:28:ab:57:3a:a5:99:cf:3e:f3:0b:bf:a6:93:26:
f8:32:de:af:a0:32:4c:f0:63:18:a2:46:42:01:e3:0c:8c:59:
53:7d:95:bf:c1:a1:34:67:51:71:2a:20:3c:86:3d:52:70:35:
f7:f1:8a:b4:cc:16:5a:50:b0:73:d8:b5:f0:e3:b7:d8:ee:cd:
6e:ca:3e:5b:d4:8e:32:45:0f:06:8b:de:0f:bc:fd:c5:87:4b:
f7:8b:b2:53:62:e6:60:f6:e7:07:ed:12:ab:82:76:58:17:ab:
1f:e5:53:71:23:a1:0a:f9:98:c5:01:06:59:d3:57:2f:9a:4b:
3c:e3:65:23:7a:ea:e3:e4:d7:3c:ce:11:a5:45:9f:10:b0:5e:
ce:62:84:80:de:a7:54:bc:3a:8d:1d:f7:03:11:71:2e:24:c5:
0c:ba:cb:69:5d:8b:ea:a5:4c:e1:2a:d3:91:10:da:53:c7:3a:
af:b1:dc:ca:5f:2f:bc:06:b9:f9:50:f5:ce:80:db:43:f4:79:
92:94:21:de:e8:5c:80:41:2c:02:a7:df:f4:ca:61:34:19:2d:
22:ba:c8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:35:32 2025 by rpki-client