Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/1-5_3bDm0VDwkAP81ZPTR8bYgxV8.roa
File: 1-5_3bDm0VDwkAP81ZPTR8bYgxV8.roa (raw, json)
Hash identifier: RzW5Sxa8Ig7ortwok8le/uC8SZCAaYDS0oxlRymBz0Y=
Subject key identifier: FB:9F:F7:6C:39:B4:54:3C:24:00:FF:35:64:F4:D1:F1:B6:20:C5:5F
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F51535751EF988A011659417CF440
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/1-5_3bDm0VDwkAP81ZPTR8bYgxV8.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215128
IP address blocks: 213.198.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:51:53:57:51:ef:98:8a:01:16:59:41:7c:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb9ff76c39b4543c2400ff3564f4d1f1b620c55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:2a:27:ce:92:e7:f0:f5:c6:25:9f:ff:f6:
4e:b5:40:0b:59:f5:de:66:a1:3b:c5:cb:ab:90:d3:
87:6f:45:11:5a:cc:a4:0a:12:89:07:16:d9:9e:c8:
24:32:94:17:c6:1f:f6:8b:96:71:a2:22:e7:7d:0a:
ba:77:93:4e:39:db:43:79:62:03:4d:d9:c9:6c:e7:
76:68:5f:c1:86:99:5b:69:70:f8:89:2e:18:be:2c:
3d:d5:6b:63:b1:10:4d:d2:35:bf:53:65:a5:f1:b7:
10:29:7a:5a:6e:74:6a:2d:b2:ed:d8:56:93:b3:2d:
e1:53:9f:14:a1:dc:7b:b4:a5:20:64:97:2f:7a:37:
ad:d7:86:51:99:99:ca:c1:42:04:2a:2b:6e:de:e2:
22:02:da:f1:71:20:b2:23:09:dd:73:f9:fa:68:1c:
74:1b:83:e5:8b:33:5e:0a:c1:04:58:6f:c1:dd:4e:
64:54:57:30:ec:3a:17:2b:a1:49:9e:93:63:e0:6d:
5a:2d:ff:a7:ca:89:2c:78:f5:ec:fd:63:c8:52:fc:
69:62:fa:58:e2:13:77:25:79:01:62:79:1f:d1:bd:
b5:a7:eb:b9:58:4d:ee:1d:0b:5d:86:1b:62:af:99:
d9:d0:6f:88:17:c3:f4:ed:74:aa:45:4e:f6:37:08:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9F:F7:6C:39:B4:54:3C:24:00:FF:35:64:F4:D1:F1:B6:20:C5:5F
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/1-5_3bDm0VDwkAP81ZPTR8bYgxV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.198.6.0/23
Signature Algorithm: sha256WithRSAEncryption
00:db:68:8d:81:7a:f7:ce:02:44:2a:c7:59:df:24:ec:42:50:
d5:2c:bb:a3:6f:ca:87:f5:11:c0:57:48:1b:b0:48:26:2a:8e:
df:4d:84:da:64:08:33:08:3c:21:be:e6:dd:a7:b0:9b:e8:88:
4e:36:66:ac:f8:db:37:cc:2b:7e:de:1e:12:a2:c7:8f:34:c7:
72:d5:c0:f3:7e:c1:c9:e7:04:0e:8e:da:6c:59:57:2f:6f:00:
cd:75:28:b3:ef:50:79:0f:07:58:3b:e6:ae:57:b1:49:e0:fc:
83:ad:26:66:bb:ea:f0:49:fb:a0:35:4f:85:a3:9a:0f:80:cf:
ab:5d:04:7b:3b:a3:a0:53:32:51:d4:03:bd:82:2d:3b:9d:37:
38:aa:e1:f7:ff:4f:dd:ac:16:71:bc:ff:a9:05:a4:be:d7:14:
cc:e2:4c:78:49:c7:29:89:49:4a:57:1d:1f:1e:b1:e9:6a:d0:
c8:72:27:04:57:61:29:c5:e5:5e:e9:02:78:e2:b2:53:d9:1d:
e2:0c:08:e9:2b:cd:bb:a1:52:4b:ca:8f:65:b8:f2:be:6d:5d:
0f:6d:2d:14:c3:92:c5:47:26:98:1d:1d:c3:8e:4b:02:7f:0b:
6c:f6:de:53:9d:bb:75:64:f2:94:80:6c:50:13:b4:3a:ae:cc:
8b:70:fe:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 24 20:37:36 2025 by rpki-client