Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa
File: vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa (raw, json)
Hash identifier: TDy4p0/0R2wjKaBRPb/eq3sprSVIkaJesmw7dyJ2VEY=
Subject key identifier: BE:2F:33:F6:21:D3:39:A0:76:15:61:D0:74:97:A3:4D:E0:1C:C3:96
Certificate issuer: /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial: 019427B64418DB9B914AE3D9E10634A38D15
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa
Signing time: Thu 02 Jan 2025 15:50:43 +0000
ROA not before: Thu 02 Jan 2025 15:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20676
IP address blocks: 153.98.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:44:18:db:9b:91:4a:e3:d9:e1:06:34:a3:8d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Validity
Not Before: Jan 2 15:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be2f33f621d339a0761561d07497a34de01cc396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:68:1d:89:e5:94:90:e4:5b:f7:73:10:9d:
de:a3:82:87:e3:87:a4:6f:4b:55:f3:24:62:02:78:
c6:55:b1:5a:c8:e2:8f:ed:f7:d7:71:e9:4d:76:0b:
27:81:11:50:b4:bd:8b:0e:d5:c5:a9:c2:5d:8c:13:
e3:d1:70:f5:d6:99:c9:be:99:19:25:69:95:ff:d7:
f0:d1:b7:53:b9:0a:a2:26:ab:3c:f3:69:14:0a:31:
64:db:82:26:38:06:64:4f:3d:fb:98:17:cf:5b:98:
13:6a:b0:b1:89:12:8d:da:ba:3a:e2:5d:bc:9d:8e:
cf:a3:2b:d7:70:09:73:2e:95:35:79:03:4e:de:f6:
f7:7e:81:51:d6:73:23:39:2c:e0:6d:33:0f:ba:3d:
13:4d:f7:ed:bf:b1:fd:39:5b:91:50:6a:2a:9e:66:
4b:66:05:37:51:9b:c4:a0:9f:ad:59:20:bb:40:22:
b5:44:09:56:86:24:d9:9a:6b:2a:c8:0a:8b:f0:64:
9a:ad:b1:f4:8c:7e:f5:b2:12:55:03:1b:44:48:03:
f4:a9:ef:8b:a7:c1:73:96:74:a9:be:4a:9b:53:07:
4d:ec:b7:05:ea:10:23:c3:34:16:01:cc:0f:9d:cd:
f3:b3:18:64:a9:c0:f8:ee:cb:0c:e9:df:a4:f9:3c:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2F:33:F6:21:D3:39:A0:76:15:61:D0:74:97:A3:4D:E0:1C:C3:96
X509v3 Authority Key Identifier:
keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/vi8z9iHTOaB2FWHQdJejTeAcw5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.98.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:69:fb:b3:be:03:ee:9c:91:9d:91:93:d0:6b:f4:43:80:45:
c3:f0:70:1e:1d:7a:87:a5:c5:b9:00:d1:af:ed:a9:85:f8:69:
16:10:38:31:33:47:94:f4:e8:09:ee:0f:52:06:2f:7f:15:11:
13:a6:78:17:f3:ef:77:01:f2:84:3b:02:ee:21:2c:c1:11:f2:
ca:dd:c7:a8:ae:57:06:0f:d4:eb:88:62:be:a8:6d:4e:13:6b:
fb:a1:9f:80:55:ef:4b:ee:5f:8b:a9:20:82:c3:b6:0c:25:ca:
bf:62:bb:96:15:b3:91:cb:d8:5b:68:70:76:1a:a4:7e:d6:7c:
23:e5:0d:94:8d:8c:40:45:cf:13:65:9c:8d:1e:33:a6:a1:21:
11:dd:b7:a2:ec:e2:2c:11:d3:ca:ee:ea:71:75:53:9d:d8:c8:
d3:90:e3:d1:d6:af:4a:31:ba:51:0e:fe:e7:b3:ce:f4:6c:ed:
a0:ae:ce:0b:ee:11:44:06:63:6e:5a:9e:4e:08:9e:18:95:76:
5f:2c:49:67:96:cd:f6:17:5f:da:0d:8d:b2:86:71:d0:90:76:
9f:74:db:dc:9c:7e:f4:90:11:21:4f:14:3c:d6:d9:2a:81:1f:
33:24:4c:c4:94:ab:57:06:7a:30:c8:72:8c:13:c5:8b:8d:1a:
b1:64:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:45 2025 by rpki-client