Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/hdrzSAEQ0cxr-hQ_0pjXR6aa4FU.roa
File: hdrzSAEQ0cxr-hQ_0pjXR6aa4FU.roa (raw, json)
Hash identifier: sfqipOVEI136CQV9RrCQ/2MEEAOWtOAMvL1rCoXPDGQ=
Subject key identifier: 85:DA:F3:48:01:10:D1:CC:6B:FA:14:3F:D2:98:D7:47:A6:9A:E0:55
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 01941FFA2019AD416C0607CB51939F37E42F
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/hdrzSAEQ0cxr-hQ_0pjXR6aa4FU.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41135
IP address blocks: 81.201.80.0/20 maxlen: 24
185.47.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:20:19:ad:41:6c:06:07:cb:51:93:9f:37:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85daf3480110d1cc6bfa143fd298d747a69ae055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:fe:8e:8b:65:45:92:81:3c:7a:97:79:3f:
11:23:39:24:8a:6c:e7:4d:6c:45:92:d6:ad:1f:2e:
d7:a0:46:26:53:ec:6c:08:69:b5:94:00:32:18:d1:
40:56:ec:7a:2f:f1:bf:e1:c5:98:30:8f:2d:2e:65:
68:b7:83:b2:38:73:17:5f:7a:b8:fa:45:4b:1b:7d:
9d:d3:71:91:04:69:3a:ab:18:01:87:d4:83:84:54:
5f:a4:4c:73:53:f1:0d:d0:bd:9e:d9:0a:4a:29:1f:
fe:6f:4e:af:75:cd:e6:29:f8:21:47:1a:ef:d3:5c:
86:2f:df:16:90:b5:ed:2b:f3:f9:0e:29:fa:cd:59:
d8:73:c0:18:10:3b:27:63:88:3b:13:93:23:0c:94:
b8:16:84:2a:80:70:20:28:d9:ef:07:a7:9c:05:0f:
51:44:a5:8a:21:3c:0c:d4:d2:da:6f:d3:5c:f7:c0:
30:75:0b:68:76:43:44:61:d2:3a:ee:69:30:0a:5e:
f0:16:14:94:45:d5:12:34:cc:94:39:5e:27:91:27:
a8:6a:63:a8:78:21:4b:aa:c9:5d:09:e5:36:ed:9f:
ff:9e:e3:c5:5c:3f:8b:ef:8d:a0:20:7e:95:25:26:
3f:1d:3f:a6:4b:b1:9d:1c:53:b6:5a:17:a8:12:98:
f0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DA:F3:48:01:10:D1:CC:6B:FA:14:3F:D2:98:D7:47:A6:9A:E0:55
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/hdrzSAEQ0cxr-hQ_0pjXR6aa4FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.201.80.0/20
185.47.148.0/22
Signature Algorithm: sha256WithRSAEncryption
08:6e:5c:b7:6a:64:66:2e:a5:c5:d6:a1:1d:bd:07:a5:4b:65:
b3:de:1a:ec:7e:1d:56:71:c9:f4:a2:f2:5b:e4:44:b2:63:ee:
3e:68:03:12:1a:4f:07:ad:08:85:3a:fc:05:8e:86:23:e1:13:
81:77:9b:f1:58:ed:97:89:f2:ab:60:b0:d4:16:41:21:c0:ef:
b0:c7:b5:94:57:94:11:5a:aa:ef:37:5c:28:f0:19:e5:c9:cb:
c0:7e:da:5a:c7:e3:d2:04:52:ce:a1:c2:bb:2b:84:48:8a:a7:
ba:34:62:7d:d4:50:c6:5c:8b:b7:26:29:3c:85:bc:c9:a9:b8:
7e:14:79:c0:4e:1a:36:e2:01:34:95:f1:c5:1a:76:58:38:34:
c4:fd:1c:c2:28:d6:d7:9b:bc:a1:fb:ac:9a:16:8a:30:46:8b:
cf:8c:1f:d7:22:05:18:d6:07:cf:03:3c:e9:61:00:5d:77:89:
f4:db:d7:86:1d:fb:ee:da:79:f5:99:51:63:2b:8c:d8:be:99:
4b:76:79:4a:9c:29:e4:b6:c5:f9:24:05:cd:78:ef:8c:fc:2a:
cd:f2:59:cc:d0:d0:32:84:0a:c1:5e:48:21:59:bc:8e:67:23:
e8:95:19:87:af:cb:c5:f7:ef:de:d8:cd:72:82:40:9e:96:93:
c1:7d:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:31:01 2025 by rpki-client