Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mkIlXMbrVTP9NsnT1Cus5UmzpdI.roa
File: mkIlXMbrVTP9NsnT1Cus5UmzpdI.roa (raw, json)
Hash identifier: neIhnB/NtKy2U8egOXsML8PrsYjXvjtgMmV6Qn7DP6g=
Subject key identifier: 9A:42:25:5C:C6:EB:55:33:FD:36:C9:D3:D4:2B:AC:E5:49:B3:A5:D2
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0194282823AA3B1C67C00E3A90282F20DD4F
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mkIlXMbrVTP9NsnT1Cus5UmzpdI.roa
Signing time: Thu 02 Jan 2025 17:55:06 +0000
ROA not before: Thu 02 Jan 2025 17:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198280
IP address blocks: 78.83.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:23:aa:3b:1c:67:c0:0e:3a:90:28:2f:20:dd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a42255cc6eb5533fd36c9d3d42bace549b3a5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:a3:76:1c:77:d4:77:80:75:51:91:1d:51:
f4:55:33:18:8c:d2:90:12:4d:6b:c7:9d:a5:b2:83:
82:cf:41:4e:ea:e9:29:a7:20:a6:61:7f:22:5b:2d:
1e:b0:02:8a:fb:6e:5b:1a:9f:aa:1a:15:c2:56:12:
e6:b7:46:2e:99:69:94:fa:96:60:19:a8:22:80:ee:
56:6b:30:bc:75:50:51:e1:c6:f1:b6:a0:6f:1e:85:
95:be:93:65:a8:d2:0e:dc:2b:ae:52:87:f4:83:4c:
96:d3:4c:30:6a:31:ab:de:2d:5f:1d:d3:a9:2d:81:
59:03:31:ea:7f:f2:d1:71:23:3c:11:a5:ff:28:7f:
2b:61:8f:45:75:fc:d2:a1:fd:7a:4f:76:e4:2a:0d:
0c:70:ab:7c:fc:e9:7b:2d:40:bb:96:a8:f7:8c:b5:
8b:a4:f9:7b:69:a7:26:b1:da:c7:8e:77:b7:9b:94:
8a:3f:92:4c:c5:dc:08:71:34:d7:0c:fa:a1:a3:df:
ea:16:cd:04:dc:ca:bc:bb:0f:b6:ed:7c:a6:c1:4a:
c7:7e:c5:45:43:2a:34:9e:dd:fc:1e:31:69:25:ad:
3b:7e:ff:51:7d:18:d0:d7:7a:7d:f4:b9:68:5c:94:
80:8e:86:ef:e3:8c:be:a9:76:e4:91:e6:47:12:4d:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:42:25:5C:C6:EB:55:33:FD:36:C9:D3:D4:2B:AC:E5:49:B3:A5:D2
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/mkIlXMbrVTP9NsnT1Cus5UmzpdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:23:37:a6:6c:a2:d2:12:98:7e:4e:2f:ee:a0:86:4a:1f:e3:
ee:f8:62:f0:45:53:58:0d:af:c4:5d:22:c7:6d:01:eb:86:22:
a4:ed:8a:36:39:87:0a:b2:12:b5:2d:a3:c3:82:c4:93:aa:a0:
d5:b0:e5:d8:43:31:a0:f1:7b:e2:6c:45:a9:96:a0:db:e4:c7:
bc:58:f0:d8:89:4a:5e:b2:df:66:27:11:7e:b7:3a:f4:86:2e:
49:c8:85:e2:43:51:ee:9c:ec:09:ee:38:ef:c5:59:72:10:e7:
a6:77:aa:e3:16:65:5c:ca:c1:7b:1f:c3:f1:7d:99:94:65:f2:
35:a8:44:07:33:e3:63:62:16:b6:34:e8:ea:88:0e:32:a4:b3:
82:66:38:83:02:8c:fc:c6:57:b3:5a:3d:6d:9f:d7:f0:5c:05:
6d:76:92:5f:08:6c:eb:03:9a:13:84:a0:60:13:c9:60:4a:a6:
ca:c8:69:05:b6:67:d6:73:9a:7e:28:e9:ad:01:ed:14:fc:99:
43:77:e8:5c:9f:a6:7f:7e:87:19:ef:bc:ad:40:e4:83:cb:f7:
5a:63:a7:4a:28:b1:9a:b1:ba:03:f4:f4:2e:c6:07:5f:b5:85:
3d:fa:9f:df:5f:8f:ee:5a:6d:44:83:fe:b4:6e:85:69:db:8d:
35:1f:dc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:46:56 2025 by rpki-client