Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cdjTwJ7m8ssRXFnlvVwD-6MJzgg.roa
File: cdjTwJ7m8ssRXFnlvVwD-6MJzgg.roa (raw, json)
Hash identifier: Gd33LyRtQPah2c/eVk7n3FhQL5hMFGKFgK3tvRjluTg=
Subject key identifier: 71:D8:D3:C0:9E:E6:F2:CB:11:5C:59:E5:BD:5C:03:FB:A3:09:CE:08
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01942220188B345427FB6B2E09AD92BEFAC2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cdjTwJ7m8ssRXFnlvVwD-6MJzgg.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214564
IP address blocks: 5.83.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:18:8b:34:54:27:fb:6b:2e:09:ad:92:be:fa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71d8d3c09ee6f2cb115c59e5bd5c03fba309ce08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:a9:c4:3a:0c:09:2c:8f:2b:52:e9:d5:e9:
1f:a9:6b:50:a6:0d:2b:23:ce:b3:55:61:7e:d1:dc:
88:54:da:30:20:18:72:62:3e:90:94:6f:45:04:0a:
a5:22:b8:04:dc:2e:ef:da:1c:70:e9:04:b4:a6:47:
ba:b6:c8:8b:42:42:86:e9:10:7a:59:5c:d1:9b:63:
ed:09:00:d1:7f:f9:1b:79:6a:11:19:aa:12:93:97:
9b:5f:13:e4:fb:05:d9:5b:ba:2f:86:3b:e6:8a:06:
0e:9b:e2:70:08:27:e3:3e:28:cf:90:ea:2d:83:cd:
43:65:45:44:8a:d2:26:19:03:be:ae:34:01:7b:69:
2a:a2:46:43:12:79:2b:ec:4d:15:45:94:bf:ab:39:
83:ae:67:8a:e8:aa:10:5c:a9:1e:db:90:5b:5c:e9:
5e:db:f1:63:77:8a:19:30:bb:07:5b:44:ba:2e:f2:
6d:87:9a:d8:b0:39:2e:b5:58:65:1c:35:41:e3:77:
b3:96:77:0a:36:dc:da:96:3c:8f:af:e4:ef:fe:ca:
95:72:17:8f:24:12:c4:70:cb:59:d5:2c:32:41:58:
f0:8c:8b:bd:b4:d1:7a:1a:03:7f:74:70:74:45:52:
a6:e6:9e:f7:32:e7:f7:1f:d3:d4:66:67:16:9b:e5:
f0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D8:D3:C0:9E:E6:F2:CB:11:5C:59:E5:BD:5C:03:FB:A3:09:CE:08
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cdjTwJ7m8ssRXFnlvVwD-6MJzgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.146.0/24
Signature Algorithm: sha256WithRSAEncryption
57:63:fd:68:3e:ee:e4:5c:0c:59:0e:d6:d4:67:66:b3:e9:a0:
58:f6:e4:db:38:3d:97:59:69:34:9a:9d:bb:f0:2a:7d:ea:1a:
20:33:19:bb:eb:41:3d:52:ec:b5:52:a6:75:67:02:78:68:51:
60:c5:41:6f:83:be:45:08:5e:ac:ac:08:51:d5:08:aa:71:c0:
e3:fd:80:c1:b0:4f:02:5c:4b:e2:ea:27:7f:f3:c2:f3:79:b6:
b3:6f:c1:2b:56:d0:40:d0:5a:44:ba:8c:2e:19:33:f2:67:e8:
d9:b1:fd:86:08:00:0d:47:cd:74:6e:f1:86:83:db:08:06:4e:
e7:b3:a9:87:40:08:c0:b6:9b:23:94:6e:cc:12:ae:6f:30:cc:
a8:eb:ac:01:ef:5c:29:cf:75:6e:52:dc:d3:60:42:49:2a:2b:
ae:f6:7b:bc:03:9d:82:86:d2:f2:6b:c0:a7:94:73:6b:41:18:
1a:07:4e:87:72:36:1b:e4:85:a7:e7:4b:76:5c:14:58:85:16:
10:91:c1:52:dd:26:a8:fa:2b:72:4e:72:b4:fa:1f:31:a1:92:
00:d4:14:a4:4c:01:8e:01:6f:3e:87:db:5d:79:2e:b0:af:82:
45:cf:57:7f:03:30:37:ef:f7:32:d4:f7:31:b8:f7:f0:52:ef:
f2:d8:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:24:17 2025 by rpki-client