Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/s0KIOZO8K0-bvsE8LtH-hJIgHsc.roa
File: s0KIOZO8K0-bvsE8LtH-hJIgHsc.roa (raw, json)
Hash identifier: e86K5YLSMPEhpTlh/vBWOzCnUNyHG3C0lhR14BOKa3M=
Subject key identifier: B3:42:88:39:93:BC:2B:4F:9B:BE:C1:3C:2E:D1:FE:84:92:20:1E:C7
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428282C8C4098ECDE20B2D6FCAB5C6B78
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/s0KIOZO8K0-bvsE8LtH-hJIgHsc.roa
Signing time: Thu 02 Jan 2025 17:55:08 +0000
ROA not before: Thu 02 Jan 2025 17:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203312
IP address blocks: 78.83.211.0/24 maxlen: 24
82.103.79.0/24 maxlen: 24
151.251.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:2c:8c:40:98:ec:de:20:b2:d6:fc:ab:5c:6b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b342883993bc2b4f9bbec13c2ed1fe8492201ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:9a:bc:df:87:72:34:38:b5:40:27:d9:f8:
aa:d0:5d:69:4b:cb:45:d9:df:58:f0:1c:c3:66:e5:
c7:58:7f:ed:52:c6:87:7d:f0:42:a8:f6:39:4d:6b:
1b:be:92:e7:0e:94:78:c7:59:7c:03:71:bd:6e:6c:
d7:d6:f1:cf:72:bf:b4:ae:46:01:35:b5:cf:97:f1:
73:e7:2a:19:33:71:e4:90:6f:84:bd:ea:40:7a:86:
9b:f5:39:07:c1:63:ea:cb:9a:09:44:fb:ec:09:30:
18:c1:69:32:eb:5d:e3:f5:ba:aa:37:f0:24:97:d5:
88:c6:32:ab:85:7a:41:3b:1a:c3:92:10:b5:40:f2:
33:24:60:da:73:24:10:1a:b2:eb:8a:0d:26:cf:b4:
f9:ee:d0:c0:27:94:8a:fc:c4:44:12:41:54:2e:10:
2e:f2:ff:12:aa:ba:4d:87:1a:ad:64:f0:fe:22:d6:
c5:08:f4:0b:84:64:bb:6d:3e:b5:f7:51:69:4e:17:
a6:30:af:ee:bf:4d:7e:e4:bf:d7:69:3a:f1:ea:96:
2a:f7:7c:cd:6c:e2:aa:70:b1:ad:97:13:4c:d2:de:
76:04:22:fc:4e:74:88:da:0c:c6:54:4d:21:40:e8:
9f:3b:1e:80:e1:9d:49:d5:be:38:97:70:3d:3b:e3:
23:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:42:88:39:93:BC:2B:4F:9B:BE:C1:3C:2E:D1:FE:84:92:20:1E:C7
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/s0KIOZO8K0-bvsE8LtH-hJIgHsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.211.0/24
82.103.79.0/24
151.251.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c4:20:cc:71:d7:1a:98:c3:2e:9c:64:24:0c:c5:e9:32:22:
a3:6a:66:33:bd:a3:b2:b2:f5:19:dc:0f:10:5b:fa:e6:8c:30:
b3:8b:71:ef:01:72:e9:ab:ee:9b:34:a3:43:5b:09:5e:1c:3e:
47:74:54:8c:86:2e:8d:5f:58:5f:ba:0d:87:bf:ef:54:2a:36:
1c:f6:ac:d3:f8:1f:02:8e:76:54:fd:3f:62:45:29:f8:12:7e:
76:15:b8:42:36:ec:ae:45:b0:6f:7a:e3:b5:36:b4:64:d7:3c:
47:cd:b0:cc:d8:a4:d0:3c:db:9a:3f:58:65:02:a3:d8:5a:2a:
84:3b:12:7c:0a:b7:ce:c1:f4:9b:7a:f0:c4:78:1b:ea:ae:66:
4a:7e:e2:c4:f2:2a:83:ac:10:72:3e:cb:2c:da:b5:c7:71:f6:
f1:dd:19:db:d1:80:c5:0e:f9:06:ba:dc:e0:34:d1:38:cb:5c:
9c:7d:1e:a3:3e:e3:ef:c5:09:6b:38:8d:d5:79:d6:58:f7:51:
93:fd:e1:68:cb:32:d1:19:5c:2e:d0:51:73:9f:d2:23:d0:be:
a0:68:a0:8e:e6:2b:16:2a:20:cb:d9:02:a9:9e:17:80:8f:0f:
ce:82:fe:26:bb:58:3c:5d:4a:59:cc:af:29:dc:16:21:cc:78:
0a:15:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:26 2025 by rpki-client