Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/8K2lGgpGXjS00-GcfRjT3a_eJgA.roa
File: 8K2lGgpGXjS00-GcfRjT3a_eJgA.roa (raw, json)
Hash identifier: C+7sI9Pyh9Bl/Kj0tjtivklrSn2Sxfv2neZ3RxgZoe8=
Subject key identifier: F0:AD:A5:1A:0A:46:5E:34:B4:D3:E1:9C:7D:18:D3:DD:AF:DE:26:00
Certificate issuer: /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial: 01942067FEB8C0E337E6DF227E8B96A5C7A5
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/8K2lGgpGXjS00-GcfRjT3a_eJgA.roa
Signing time: Wed 01 Jan 2025 05:47:53 +0000
ROA not before: Wed 01 Jan 2025 05:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201010
IP address blocks: 195.4.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fe:b8:c0:e3:37:e6:df:22:7e:8b:96:a5:c7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0ada51a0a465e34b4d3e19c7d18d3ddafde2600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:b9:3f:7d:ae:4b:52:d8:ef:9c:e0:6a:64:
4f:b6:d5:f2:67:de:13:9f:cc:d5:d2:1c:23:d6:c4:
70:02:8f:d4:9f:a2:f9:e0:59:28:1a:36:f3:96:90:
0b:28:d1:4c:2f:91:18:c1:6c:e7:1c:12:a1:8d:43:
b7:62:b0:d8:86:18:c3:a8:50:55:17:58:d4:33:53:
ed:3e:76:8a:6f:ac:28:74:68:8f:b5:f6:5e:fe:86:
4e:4e:fd:90:a6:9a:c9:67:ca:de:35:0b:59:2f:3e:
a9:5b:96:ff:6a:6b:2b:bd:f1:1e:1b:87:88:5d:4e:
c3:f9:f7:75:c3:f4:c1:e3:ca:f8:68:84:d6:33:8a:
51:e3:e1:c3:70:28:1f:e3:96:73:d0:9d:f4:fc:e0:
37:d5:c6:95:a6:c2:01:3c:6b:d1:db:9c:86:f6:82:
77:a1:6b:ac:f5:c9:b7:de:ea:9b:9a:86:18:dc:f9:
a7:6f:c4:aa:ad:40:4b:0d:da:47:b4:80:9a:c2:f3:
b3:7b:79:99:73:35:7e:26:24:ac:48:eb:ba:32:38:
04:4f:24:fb:c4:eb:dd:ec:03:c3:97:77:19:d2:ac:
cf:3c:26:ca:8c:a4:ca:a7:fb:ea:3d:52:cd:c9:49:
55:f6:61:a4:da:d7:a9:f3:3b:8b:2a:ef:c8:9f:a7:
30:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AD:A5:1A:0A:46:5E:34:B4:D3:E1:9C:7D:18:D3:DD:AF:DE:26:00
X509v3 Authority Key Identifier:
keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/8K2lGgpGXjS00-GcfRjT3a_eJgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.4.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b9:3b:1e:f1:6b:7d:08:6a:e0:79:a0:74:5b:ac:01:56:45:
ed:90:d5:a1:50:d4:c6:54:0b:be:ef:76:12:bb:88:5c:26:7b:
5a:30:2e:5c:60:ee:bb:a8:e1:8c:ca:08:a1:43:3a:e0:e1:aa:
91:3f:a2:ab:e7:3a:ce:fa:a0:74:c3:f5:eb:f6:7c:40:36:67:
5d:3d:2b:4d:79:a5:2a:c5:45:9c:79:be:d8:28:2e:01:c6:f9:
ce:1c:b6:40:ef:d0:55:ff:8f:24:2f:10:bf:f1:53:de:dc:17:
29:ac:67:02:28:ed:13:a8:8c:ae:1e:43:92:81:d5:f3:94:04:
0b:b5:90:83:be:8e:84:4b:18:e1:8f:f4:7f:bf:87:72:59:89:
ec:f0:c9:75:8b:ea:de:ba:f7:3a:b8:7a:e8:8c:ca:dc:ad:17:
1e:93:8e:af:54:c9:60:9b:bb:f5:e8:b1:a3:73:ad:a6:4f:dd:
a1:eb:c8:86:be:2e:ea:74:fe:18:ad:93:a0:d3:4c:80:bb:6d:
24:e5:d6:c3:47:19:71:dc:db:ba:38:fe:18:84:3f:5c:5c:da:
f4:0e:0b:73:03:8c:95:9a:8b:8d:df:10:a5:09:dc:19:2d:57:
59:f7:6f:f3:5e:90:4f:ac:4f:e8:53:67:18:6a:a4:41:74:92:
ff:bb:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:57:45 2025 by rpki-client