Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N1_ebDw5VHVNRes1TmZ_ZtsRwcA.roa
File: N1_ebDw5VHVNRes1TmZ_ZtsRwcA.roa (raw, json)
Hash identifier: +NxNxeWiBHkVow5gH9zXDC9tmpdxtPmgbvAg+RiadIw=
Subject key identifier: 37:5F:DE:6C:3C:39:54:75:4D:45:EB:35:4E:66:7F:66:DB:11:C1:C0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C1E60BF6DA28C1E3D32E0B7BDE6D7
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N1_ebDw5VHVNRes1TmZ_ZtsRwcA.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39383
IP address blocks: 81.181.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1e:60:bf:6d:a2:8c:1e:3d:32:e0:b7:bd:e6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=375fde6c3c3954754d45eb354e667f66db11c1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:cc:4e:58:0c:67:59:e1:2a:49:97:bb:8d:
6c:d4:60:c3:fe:37:dd:88:cb:1f:80:4c:b5:75:6d:
3c:e3:5e:1b:d3:11:4e:3b:dc:23:41:33:b1:4d:b3:
1f:af:33:62:82:c0:03:1f:cf:21:74:f8:24:aa:d6:
cd:42:af:cd:0b:2f:b2:b2:71:42:3c:e5:83:f8:c1:
54:49:97:78:0f:c3:38:ff:b5:bf:d1:24:c3:9f:4b:
d6:09:1e:09:ec:38:9b:18:6a:42:23:dc:89:2f:5f:
52:f0:34:71:b3:41:66:5f:fa:3d:46:fa:df:35:80:
91:86:07:9e:6f:2e:59:d5:75:85:17:1d:b0:dc:4a:
2d:1b:19:6a:96:66:9e:5c:1a:84:1d:33:b7:46:86:
3e:ed:2e:b4:2c:f4:82:ce:22:ac:96:26:5a:99:d6:
03:64:d8:0f:1b:d7:dd:0c:d2:5a:d0:99:41:d7:20:
94:4f:6c:d2:fb:58:b7:8b:d3:8d:6b:b1:aa:75:42:
fa:44:20:6f:c9:d5:73:b7:0b:58:e4:f2:50:f2:80:
1b:ab:9d:b9:fe:3b:cd:77:0d:d1:c4:0c:c4:8d:8f:
98:91:45:3c:b3:aa:08:44:55:01:8a:93:42:d7:f3:
8e:5e:bf:c3:fb:41:53:78:5f:36:50:46:1f:52:80:
3c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5F:DE:6C:3C:39:54:75:4D:45:EB:35:4E:66:7F:66:DB:11:C1:C0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/N1_ebDw5VHVNRes1TmZ_ZtsRwcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.129.0/24
Signature Algorithm: sha256WithRSAEncryption
07:31:d6:51:f2:a1:bb:85:bd:31:4a:b1:76:f4:91:33:94:f5:
3e:60:d5:0e:7d:6a:71:2b:c8:33:ca:9d:ff:15:d0:5f:5a:d7:
b2:55:7f:9f:03:1d:ae:e4:7a:5a:01:b5:8b:e5:2b:f1:1c:8d:
c3:45:47:ab:f6:49:26:c7:40:17:6f:78:a0:b5:eb:a2:51:d2:
1d:32:d8:ce:2d:96:55:e5:3e:90:0f:67:4a:91:d9:30:7c:fa:
05:3b:03:96:57:78:30:ef:63:a4:12:dd:97:dc:2e:0f:eb:a9:
d2:1f:b2:55:78:94:5d:e8:6d:6c:07:77:b2:c8:5a:d3:1d:d5:
b9:5b:a8:6e:50:5e:4c:e0:4d:e0:a9:3a:57:6d:a6:9e:59:25:
b4:68:19:6f:46:62:d1:59:19:32:a5:a0:ac:4e:07:e6:47:62:
f1:71:99:92:0f:3b:70:6a:8b:c6:79:43:4b:11:67:c1:12:4b:
fe:c2:5d:a6:38:fd:6e:0f:59:7f:72:c9:27:e0:1d:9e:05:d3:
30:7d:53:1f:c3:2f:d1:7c:c8:28:70:26:78:b4:0a:b3:a3:d5:
4b:80:7e:76:e8:8e:1d:ad:36:8d:d3:14:e6:bd:62:0f:c4:64:
0d:14:34:b0:76:be:61:e5:94:77:b5:a6:a7:22:cf:4f:94:50:
a9:a3:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:30:31 2025 by rpki-client