Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tNr543L6wAHVptJKHUZ7Rn6pqdc.roa
File: tNr543L6wAHVptJKHUZ7Rn6pqdc.roa (raw, json)
Hash identifier: brOKQhxkhgnWrLnvkLjwAbtyrTy4Mhtks9nG8qrg+x8=
Subject key identifier: B4:DA:F9:E3:72:FA:C0:01:D5:A6:D2:4A:1D:46:7B:46:7E:A9:A9:D7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01954C3768B9D1C2B0BA6740BD68DFB9AE27
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tNr543L6wAHVptJKHUZ7Rn6pqdc.roa
Signing time: Fri 28 Feb 2025 11:00:54 +0000
ROA not before: Fri 28 Feb 2025 11:00:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49392
IP address blocks: 195.133.10.0/23 maxlen: 23
195.133.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 14:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:37:68:b9:d1:c2:b0:ba:67:40:bd:68:df:b9:ae:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 28 11:00:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4daf9e372fac001d5a6d24a1d467b467ea9a9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:d4:bd:7e:30:7e:76:ff:2b:b9:6b:90:88:
be:e4:8c:a2:e6:d8:69:ad:9c:31:92:1b:ce:00:e0:
20:92:cf:5e:57:d0:0b:d9:52:67:9d:ca:e7:b8:66:
06:83:c3:86:ae:fb:08:8c:2c:c2:15:f6:2b:84:08:
11:46:7d:e4:75:12:d7:83:c1:40:4b:63:27:2c:8c:
9f:ac:cf:e8:03:2d:18:7e:ec:f0:ef:71:82:3c:95:
f6:69:36:b3:2a:e1:c7:f8:a6:94:86:f3:a4:f5:5c:
c8:7d:21:55:d3:d8:34:ba:e6:48:ce:22:52:e1:5a:
d0:38:97:c9:4c:7e:1a:45:cf:90:92:63:fe:5b:d0:
4a:21:2d:e0:fe:4d:32:12:2b:74:1f:8b:de:5a:b3:
ae:fb:70:79:ee:11:b7:d6:e3:b2:02:b3:9e:40:76:
53:fc:af:f4:9a:9d:c0:5a:85:0f:97:c4:5c:cd:b8:
34:65:25:4d:2f:dd:4b:93:92:cf:9f:f9:ea:61:2f:
d5:5c:b7:5c:1a:a9:1e:ee:09:8c:09:83:86:89:4f:
3e:88:0d:5f:a4:93:b7:07:41:20:65:08:71:53:55:
4b:d5:95:4e:42:a2:37:4c:68:e6:81:7a:a2:4b:99:
ec:4b:15:06:57:62:02:f1:29:5e:8b:66:97:0a:a5:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:F9:E3:72:FA:C0:01:D5:A6:D2:4A:1D:46:7B:46:7E:A9:A9:D7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tNr543L6wAHVptJKHUZ7Rn6pqdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.10.0/23
195.133.52.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:22:e3:e5:c8:bc:b1:a2:bf:4f:79:8c:c3:dd:cd:0b:35:15:
95:42:24:b5:ff:49:34:4a:06:73:5f:aa:d3:08:ee:be:89:fa:
08:80:50:da:da:ee:78:01:66:1e:08:3d:fc:40:86:60:7e:fd:
43:21:0e:bf:80:c4:7b:9f:99:e0:4f:d0:b3:de:a0:25:c9:1a:
14:ac:34:d8:ec:59:1a:38:d5:31:90:f6:c2:a1:98:34:46:87:
5c:09:d9:7b:d0:7e:fa:03:3b:30:9d:ad:8f:b2:68:9a:d2:41:
e3:2d:47:52:13:2f:e1:00:5a:c8:85:67:06:df:61:98:4c:0d:
f2:37:98:9b:90:2d:9e:f6:d6:e5:47:b0:78:e1:f2:1b:74:0c:
80:b3:1a:7e:30:e3:d6:7f:29:12:2a:f1:b1:1b:7f:8b:e2:34:
3e:ad:7e:63:be:16:dc:f4:cd:42:20:b2:d5:b6:15:d1:3d:33:
4d:fd:ff:76:9a:96:47:d1:c4:6f:f8:50:57:62:11:4b:88:c1:
99:60:56:c4:aa:73:21:2c:20:1d:8c:29:b9:0f:82:34:a8:ed:
c3:91:28:27:18:e9:6b:cb:1c:27:a1:22:9b:5e:b6:e6:f5:30:
85:e7:ac:37:49:b8:8b:f7:77:1f:66:67:af:d3:ba:0f:7c:bc:
bb:ef:b1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:53:03 2025 by rpki-client