Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/4OydZQEJVaj8JF-uoTmGENGb7Is.roa
File: 4OydZQEJVaj8JF-uoTmGENGb7Is.roa (raw, json)
Hash identifier: a1svWgU+LYKwh9ujA37IlIq254s7oEhH/xm68kQfTL0=
Subject key identifier: E0:EC:9D:65:01:09:55:A8:FC:24:5F:AE:A1:39:86:10:D1:9B:EC:8B
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 0194DABB29750EDD87E924E3F477ADE9969D
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/4OydZQEJVaj8JF-uoTmGENGb7Is.roa
Signing time: Thu 06 Feb 2025 10:08:06 +0000
ROA not before: Thu 06 Feb 2025 10:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6855
IP address blocks: 78.98.0.0/15 maxlen: 15
84.47.0.0/17 maxlen: 17
87.197.0.0/16 maxlen: 16
91.127.0.0/16 maxlen: 16
95.102.0.0/15 maxlen: 15
95.102.128.0/17 maxlen: 17
95.103.0.0/18 maxlen: 18
95.103.64.0/18 maxlen: 18
178.40.0.0/15 maxlen: 15
178.41.128.0/17 maxlen: 17
185.19.72.0/22 maxlen: 22
194.154.224.0/19 maxlen: 19
195.91.0.0/17 maxlen: 17
195.146.128.0/19 maxlen: 19
195.146.130.0/24 maxlen: 24
212.5.192.0/19 maxlen: 19
213.81.128.0/17 maxlen: 17
213.81.197.0/24 maxlen: 24
213.160.160.0/19 maxlen: 19
2a00:12a8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:bb:29:75:0e:dd:87:e9:24:e3:f4:77:ad:e9:96:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Feb 6 10:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0ec9d65010955a8fc245faea1398610d19bec8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:fe:1f:dd:bd:77:68:5f:b7:00:57:8c:f4:
e8:63:25:8e:58:ff:95:ff:92:73:86:a3:3a:8b:dc:
d8:37:1f:66:e4:36:4d:91:89:a2:e4:f8:0d:74:90:
09:49:6c:b9:62:92:52:c4:50:2e:b4:51:7a:af:82:
c2:cf:77:bd:b1:3c:36:65:ca:54:fe:f0:4c:a6:fa:
6c:b8:2d:3b:1d:58:1e:c4:f3:90:f8:47:5e:74:e2:
60:e3:e0:70:56:41:72:8f:31:b6:32:69:b6:a5:ef:
cd:d4:c1:d6:a1:d8:ac:c7:c2:37:b8:b2:2c:43:9d:
c3:ed:be:ee:df:3e:60:ac:23:71:e1:ff:44:9c:03:
d1:ed:e5:a8:a7:54:de:f7:ee:fb:ad:46:72:64:62:
28:92:28:c8:22:19:19:1c:18:f1:11:c0:88:30:92:
07:92:fc:7e:27:7f:b1:79:d3:98:70:45:c9:f0:34:
4d:55:3b:17:15:eb:3c:cd:7f:ee:59:c6:18:df:95:
b6:56:21:71:73:93:a2:7e:65:4f:40:d1:f4:d3:9b:
fb:ef:e2:d7:0b:ea:0c:f6:f8:60:fd:8a:69:03:3d:
b5:8b:41:87:fc:58:d3:37:7c:b3:1e:57:13:46:59:
70:b3:28:1a:18:4d:2d:91:6b:e5:3c:2d:81:d7:35:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:EC:9D:65:01:09:55:A8:FC:24:5F:AE:A1:39:86:10:D1:9B:EC:8B
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/4OydZQEJVaj8JF-uoTmGENGb7Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.98.0.0/15
84.47.0.0/17
87.197.0.0/16
91.127.0.0/16
95.102.0.0/15
178.40.0.0/15
185.19.72.0/22
194.154.224.0/19
195.91.0.0/17
195.146.128.0/19
212.5.192.0/19
213.81.128.0/17
213.160.160.0/19
IPv6:
2a00:12a8::/29
Signature Algorithm: sha256WithRSAEncryption
47:b9:da:0f:6b:40:97:ff:d8:ae:33:41:06:66:b0:86:b7:5b:
67:a0:26:22:15:5a:2e:0e:e3:a1:1c:a1:ed:d7:ce:70:b7:3f:
70:cc:24:5c:08:1b:f1:d4:52:04:7e:43:a1:46:ff:a3:5e:60:
dc:ab:59:46:e7:43:29:d9:62:c8:a7:d9:4f:68:ad:48:41:b4:
3e:02:a4:47:13:ea:34:2b:a1:c5:e8:08:5b:6a:5b:07:27:99:
7b:a9:db:e2:20:16:79:82:21:07:e5:f5:1e:21:25:7f:17:05:
cc:bb:ac:f3:fe:b9:29:9c:89:6e:17:98:53:ca:ad:9f:5f:7d:
1d:62:28:12:51:56:73:c6:f6:28:0b:03:91:bb:41:5b:42:aa:
30:0c:cf:e9:0f:05:8f:9d:7c:b2:4d:77:40:37:91:34:93:a6:
dc:e0:9b:7a:29:4b:41:64:3b:77:92:89:7b:49:ad:7c:d4:02:
f8:2f:f9:74:a7:24:77:2e:97:2e:ad:68:79:e5:c6:c1:df:e9:
de:f7:a6:3b:54:b6:97:11:80:45:90:d3:60:84:79:77:e0:3f:
34:3d:9d:cb:23:75:33:2f:35:b9:77:03:67:b9:6d:f6:12:ac:
40:2e:35:ec:d4:dc:d0:c7:5a:02:74:ba:d3:60:b2:b0:da:c8:
57:db:31:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:21:43 2025 by rpki-client