Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/l4VVCZADsC_ePFxTL6guxFgEFro.roa
File: l4VVCZADsC_ePFxTL6guxFgEFro.roa (raw, json)
Hash identifier: WvxtDRLyULKKlvSMAuopl5xLy8g7Ikjdy04aBbPa2pQ=
Subject key identifier: 97:85:55:09:90:03:B0:2F:DE:3C:5C:53:2F:A8:2E:C4:58:04:16:BA
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 01955BB31D2451FACA328C200B87690D12CA
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/l4VVCZADsC_ePFxTL6guxFgEFro.roa
Signing time: Mon 03 Mar 2025 11:10:19 +0000
ROA not before: Mon 03 Mar 2025 11:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 95.128.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:b3:1d:24:51:fa:ca:32:8c:20:0b:87:69:0d:12:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Mar 3 11:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=978555099003b02fde3c5c532fa82ec4580416ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:89:be:2e:a1:03:93:28:50:f3:7c:9e:05:60:
e9:c1:c0:64:3c:70:a9:11:e3:af:2e:fa:9e:26:65:
7c:9f:33:a9:ae:17:4a:05:f3:84:ee:33:2f:17:a5:
88:c2:17:98:43:35:97:56:aa:5b:d9:f9:b9:95:99:
a8:58:74:88:f0:ec:90:52:c1:d3:fd:dd:f1:d6:96:
18:f3:a9:29:7f:28:75:b5:96:bf:5a:22:be:5c:9f:
75:e3:49:fa:57:11:87:c5:48:18:22:e6:23:78:e7:
ec:7d:fe:82:a8:b8:69:b8:36:c2:34:2c:8e:cb:83:
85:db:1a:fd:7b:b2:c7:75:60:47:17:9d:77:95:28:
73:ab:f5:03:9c:b3:46:9c:31:4f:9c:27:7d:03:92:
3e:ba:f6:7e:20:c4:6e:43:62:14:bf:b9:51:a1:1f:
60:a9:5f:48:e5:aa:f0:d0:78:91:77:f2:f2:aa:cd:
eb:fa:54:20:52:33:8c:8a:8c:43:92:ee:34:c1:ce:
4d:36:19:60:8b:0f:45:f1:0a:90:ec:1d:c8:45:0a:
9b:5a:bf:9f:f8:40:f3:ed:d4:55:9b:35:16:98:3b:
62:d7:da:19:c8:b4:b5:7a:bf:80:c6:60:dc:ae:98:
28:7e:e5:e0:50:70:0b:7d:c8:03:3c:07:6f:e3:20:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:85:55:09:90:03:B0:2F:DE:3C:5C:53:2F:A8:2E:C4:58:04:16:BA
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/l4VVCZADsC_ePFxTL6guxFgEFro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.195.0/24
Signature Algorithm: sha256WithRSAEncryption
50:70:a3:c7:c2:80:60:b5:ac:ce:5e:3e:4e:9d:54:9d:19:e6:
9e:9b:a6:4c:33:c7:eb:3c:7c:02:61:9b:85:04:9b:b4:4c:b3:
57:9a:f2:fa:c2:4b:83:9d:00:ac:f4:e4:ed:02:26:2f:b2:61:
7e:5a:91:ea:96:18:70:c9:f4:be:e3:c7:62:d3:d0:3c:05:0b:
7f:e3:da:b7:5d:de:d0:01:76:97:36:80:94:37:cc:b7:0c:be:
23:e6:ef:e5:8a:86:28:12:c3:61:2d:7c:51:c4:89:4d:27:01:
fe:5e:ff:34:62:cd:5d:55:f7:6e:d8:23:c2:3d:09:41:64:15:
b2:40:5f:b1:fb:4d:f8:6f:5a:51:50:63:64:44:ec:d0:b0:ca:
cf:94:3d:38:ae:95:6d:c4:59:c4:10:ad:74:ba:e0:50:f0:76:
f7:92:33:c2:c8:5d:96:54:a8:e9:69:c7:2d:97:4d:f2:51:11:
07:de:be:c7:2d:f6:f4:e2:45:d0:34:0e:ce:b3:01:a2:b9:28:
4b:33:04:44:88:90:d6:46:fb:3b:e4:20:39:30:40:58:da:5e:
9b:37:96:65:19:f6:04:5f:e1:c8:cd:31:5d:a7:f2:7a:6d:09:
b1:fc:8e:1a:b6:89:23:34:7c:97:85:11:1b:db:0a:4e:32:8e:
70:4f:8d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:09:57 2025 by rpki-client