Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/_BEpaJVTnLuu4g_3ZKMdTRNWQjo.roa
File: _BEpaJVTnLuu4g_3ZKMdTRNWQjo.roa (raw, json)
Hash identifier: k8EcqRXO6qE7dh0sZMrStvXZSe4MfyCpQ3c8YvsPCiA=
Subject key identifier: FC:11:29:68:95:53:9C:BB:AE:E2:0F:F7:64:A3:1D:4D:13:56:42:3A
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282809696A096184D2AE3B66BEAA4AA4
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/_BEpaJVTnLuu4g_3ZKMdTRNWQjo.roa
Signing time: Thu 02 Jan 2025 17:54:59 +0000
ROA not before: Thu 02 Jan 2025 17:54:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7155
IP address blocks: 82.103.105.0/24 maxlen: 24
195.34.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:09:69:6a:09:61:84:d2:ae:3b:66:be:aa:4a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:54:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc11296895539cbbaee20ff764a31d4d1356423a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:69:77:2d:38:1e:e7:95:16:f7:89:1d:19:
bf:f5:aa:8f:6f:18:4c:7b:05:41:c0:9d:6a:4e:f1:
90:99:db:39:34:7f:a7:53:45:cc:61:c8:e2:51:ee:
97:51:fb:1a:c4:d2:42:8d:7e:d9:c2:80:d9:10:ea:
65:a4:d9:0c:4b:9e:54:4f:36:c0:77:a0:67:da:8d:
73:f2:4b:42:cb:9e:4b:55:14:11:d5:f0:75:88:41:
a5:17:a0:f2:22:11:ff:9b:0d:f6:d6:46:c9:38:89:
0a:53:ea:bf:24:0c:4b:0f:f6:9e:4c:c9:e7:23:a8:
cd:6e:9d:d2:54:0e:1e:61:ed:d4:34:bb:58:87:35:
4f:a6:84:bc:e5:06:0a:a4:aa:98:77:14:10:64:67:
ee:19:9f:34:8c:03:8d:eb:9e:91:ac:69:b9:33:63:
4d:f7:e5:e3:33:cc:9d:26:80:e5:50:e2:cc:98:44:
0d:fd:83:8f:87:ee:78:05:82:29:c4:90:2a:58:5c:
5c:a9:83:56:a8:1b:b5:3e:1f:57:e0:47:d2:e4:2e:
3a:3d:39:3f:48:96:2a:f2:05:89:25:f8:ae:68:fd:
2d:5e:ca:7a:71:41:89:38:e9:40:77:d7:c2:6a:2a:
0f:8e:4f:b6:7c:03:a3:0c:58:95:a5:1e:29:a7:2d:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:11:29:68:95:53:9C:BB:AE:E2:0F:F7:64:A3:1D:4D:13:56:42:3A
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/_BEpaJVTnLuu4g_3ZKMdTRNWQjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.105.0/24
195.34.109.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a9:82:ca:1b:b7:74:5b:48:28:96:d3:42:24:84:70:b9:50:
00:ba:f7:87:6b:67:6a:18:7c:3a:f3:90:8e:65:8c:86:c4:7a:
3d:34:cc:17:10:3e:ea:a4:2b:22:8f:73:5d:35:a1:6e:4f:21:
3a:9c:10:56:b6:64:75:60:b0:f2:8f:aa:80:13:52:3b:97:68:
91:e9:50:cf:bb:b5:66:f0:f2:f8:5e:77:19:6e:11:4f:02:df:
3f:4a:21:bd:fe:36:b5:31:85:bb:65:26:43:18:79:89:f2:34:
d4:6b:b4:7c:90:ca:7d:8e:77:11:0b:d5:a3:a8:63:9a:0f:62:
60:dd:26:12:e2:01:b0:a6:eb:26:03:5b:8b:8c:45:1d:bd:82:
c0:89:9a:54:c8:59:ce:66:ba:88:a4:27:19:d6:52:fc:d3:34:
9c:b2:9f:fa:14:96:97:4c:d4:96:80:2a:5d:03:79:a3:d1:b5:
f7:80:b9:e3:4b:fa:b9:c7:db:78:59:df:9e:c5:b9:98:39:ea:
1d:6d:96:0b:18:5b:ae:ee:b6:53:52:da:22:71:ce:1d:69:9b:
b0:3e:01:85:0d:7c:da:70:25:5b:da:c6:b2:39:05:b3:36:e4:
8e:dd:b7:20:4f:76:90:48:c4:11:30:c7:5b:b3:49:dc:53:6a:
e4:78:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:31 2025 by rpki-client