Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/1-1M7CZgabTyVBZWUc0Xixc3swjw.roa
File: 1-1M7CZgabTyVBZWUc0Xixc3swjw.roa (raw, json)
Hash identifier: us0aDF4f1IgYu9dERTPx8C/MbvDAweZqmscJC17+2uE=
Subject key identifier: FB:53:3B:09:98:1A:6D:3C:95:05:95:94:73:45:E2:C5:CD:EC:C2:3C
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0195F0EA1E1A4E1A17B5756BF4F615292FD6
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/1-1M7CZgabTyVBZWUc0Xixc3swjw.roa
Signing time: Tue 01 Apr 2025 10:33:49 +0000
ROA not before: Tue 01 Apr 2025 10:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49915
IP address blocks: 84.239.18.0/24 maxlen: 24
84.239.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f0:ea:1e:1a:4e:1a:17:b5:75:6b:f4:f6:15:29:2f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Apr 1 10:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb533b09981a6d3c950595947345e2c5cdecc23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:69:50:78:b9:bd:7a:1e:95:55:7f:59:e7:
16:97:cf:1f:d7:78:4f:99:9f:b0:6e:31:58:46:9c:
52:0d:62:4f:f4:94:00:86:4b:72:b7:db:4c:c1:f1:
15:19:93:fd:e8:d2:0b:41:d2:8f:7a:7d:7c:0e:80:
53:69:ca:a2:7b:66:69:1c:ca:3f:06:17:5b:13:fa:
fc:9b:32:e1:34:dc:a5:3d:86:64:c6:62:76:a0:1b:
58:89:d8:7e:f6:b7:37:a6:28:b0:0e:98:aa:2d:94:
c2:c4:35:fe:90:2b:92:51:d6:f6:05:55:ed:5f:1b:
69:2f:e5:aa:5f:f0:8f:61:a8:e2:e4:e8:01:c6:1c:
ba:41:76:63:45:76:2c:59:19:f9:25:73:4d:ba:4f:
1e:75:d9:e2:b5:d9:f4:91:ad:b7:bb:2e:0f:b9:7f:
01:25:09:6e:bf:1c:d0:11:15:16:d2:62:d8:f9:2a:
3f:e6:84:fb:d6:4f:6c:84:96:0a:f6:e3:c4:15:0f:
fb:94:da:82:ed:d6:6c:0b:7c:ae:bf:28:53:c3:eb:
b6:12:d2:8f:1d:66:60:50:57:19:10:59:d8:1a:86:
52:8b:4c:e1:24:2e:0c:3e:1b:d2:0d:f2:f3:8e:8a:
6b:fd:25:a3:d8:3f:e9:60:8e:7e:59:9f:19:27:1a:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:53:3B:09:98:1A:6D:3C:95:05:95:94:73:45:E2:C5:CD:EC:C2:3C
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/1-1M7CZgabTyVBZWUc0Xixc3swjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.18.0/24
84.239.30.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0f:29:62:32:df:aa:95:6a:40:bc:12:a9:0e:29:71:ca:fe:
72:5c:11:d9:b4:6d:86:21:75:3d:9a:db:c3:f9:a2:e7:97:34:
3c:2a:44:53:32:62:2f:71:c9:fb:d4:75:73:dd:81:ae:d8:65:
46:28:b7:60:7d:2a:81:04:f0:0e:89:62:75:db:24:07:fa:a2:
04:28:ff:2d:32:47:ba:cb:f9:cb:5e:c3:c7:d0:67:8a:8c:6f:
8c:1b:1c:83:e8:18:4a:41:e0:b8:ed:94:79:57:d2:4d:d6:ea:
f2:10:4f:7f:60:c9:2a:66:4a:15:ed:f9:97:88:31:9b:6b:b2:
55:e1:ec:3b:79:ec:58:44:10:0d:46:d0:d3:cb:13:d7:93:e7:
ed:37:02:70:3a:a8:d9:f5:8b:f4:32:69:a1:2d:80:eb:62:b8:
41:84:3f:d1:40:93:4f:03:48:d3:28:2c:28:c6:f7:9e:e6:79:
b2:f3:cc:14:97:8d:87:a2:13:44:6a:81:ff:4c:b3:eb:05:d2:
09:3f:ed:5f:75:c4:6a:05:0f:dd:e7:f6:09:c1:79:16:bd:05:
90:7c:e3:fc:de:d4:93:2a:b7:96:c4:28:13:e2:17:3b:3a:31:
c5:d0:33:ce:96:39:b3:48:b8:45:9b:91:30:79:da:66:56:bb:
2d:6e:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:08:34 2025 by rpki-client