Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/1-16UNdr39GQR6WgTD6_itgdgXrc.roa
File: 1-16UNdr39GQR6WgTD6_itgdgXrc.roa (raw, json)
Hash identifier: zJk3e0ik342Ah/cCpBqTYO3BgJOewuzuYG0mEAa3aYU=
Subject key identifier: FB:5E:94:35:DA:F7:F4:64:11:E9:68:13:0F:AF:E2:B6:07:60:5E:B7
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 01941FFA43ECCE14A51FB36871A5AB7A10AB
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/1-16UNdr39GQR6WgTD6_itgdgXrc.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49127
IP address blocks: 185.82.73.0/24 maxlen: 24
193.23.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:43:ec:ce:14:a5:1f:b3:68:71:a5:ab:7a:10:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb5e9435daf7f46411e968130fafe2b607605eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:65:6d:58:7d:51:f9:a3:d5:a3:9a:ce:e6:e5:
26:2d:bf:62:75:5a:ab:36:f1:62:ea:c7:a7:ec:c3:
98:28:9b:e9:a6:22:54:9d:09:7a:c9:b2:e5:7b:c1:
df:d8:de:67:f3:f0:55:f0:01:5f:ee:c4:8a:01:82:
b1:35:f7:84:3c:c3:f7:78:01:c7:ed:12:02:d8:18:
06:2e:85:b6:4a:e5:48:93:c6:30:30:07:04:a6:36:
0f:80:98:20:7c:12:8b:3c:b1:b5:86:e0:ac:4c:90:
dc:d7:c2:75:b5:1f:a1:fb:1f:63:2e:40:3a:f7:f0:
ed:eb:79:56:83:2f:47:72:fe:ba:01:ba:01:9e:7b:
2e:44:bf:0d:e1:34:f1:00:b4:6f:9d:23:ce:9f:20:
a3:ab:c9:27:f5:34:1e:9d:eb:97:c4:8c:10:46:4e:
b5:18:b3:ab:cd:29:e0:25:dc:31:16:5c:3b:d4:5c:
23:6b:f5:e6:df:c7:ef:41:4b:7b:24:7e:75:44:bb:
e4:aa:bd:7e:e6:8b:3c:8b:43:71:a3:b4:96:b3:4e:
35:42:5a:91:5e:ee:b1:41:64:fc:3c:a8:95:84:1a:
87:3a:e1:29:d8:99:f0:0a:94:d9:d7:e0:ad:f1:70:
50:36:a5:02:f0:db:92:54:ca:b5:7d:fa:75:fd:b3:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5E:94:35:DA:F7:F4:64:11:E9:68:13:0F:AF:E2:B6:07:60:5E:B7
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/1-16UNdr39GQR6WgTD6_itgdgXrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.73.0/24
193.23.118.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c6:15:cc:f5:b8:b4:85:8e:f9:ef:28:34:77:66:35:3b:4e:
ae:b2:91:36:f3:4e:35:13:2a:74:04:0b:d5:37:a7:db:e7:61:
ff:c3:05:e3:bb:a9:88:b7:99:aa:9b:1c:01:fb:0b:fa:34:04:
24:6c:ba:1b:69:4f:87:5c:5a:4f:f8:0c:51:f6:b3:fd:65:11:
5c:52:4d:95:e5:ae:5d:99:e3:b5:e4:6c:81:b6:14:39:80:0d:
9d:38:fe:f1:c8:e6:60:1a:b5:98:88:7b:55:cb:0c:98:54:28:
0b:50:30:1d:31:09:ed:38:bf:f5:bb:fe:c9:6f:ff:5f:0c:ad:
4e:13:10:12:2a:35:43:5e:e8:64:db:eb:f3:27:ea:c7:0a:86:
d1:e1:1d:7a:46:ea:41:6e:75:5f:06:00:1e:bd:07:cb:18:73:
a5:55:41:4d:c0:b9:88:cf:ea:ad:e0:6c:d7:ba:c2:d8:31:27:
5d:92:fb:6a:71:22:30:6f:3c:d9:2f:7d:51:a7:3d:bc:84:7b:
ba:d7:6b:18:3e:a2:e8:4d:5f:35:26:9e:a1:87:42:db:56:9a:
cd:05:82:69:f5:67:40:e6:97:30:1b:5b:b3:1e:20:ef:48:ee:
57:12:6e:19:22:f8:d5:1e:a4:e7:17:e0:01:6b:12:1e:46:ad:
19:e9:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:15:29 2025 by rpki-client