Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Dz0rOeiIDzeyPKFa0qSDRIdyYlE.roa
File: Dz0rOeiIDzeyPKFa0qSDRIdyYlE.roa (raw, json)
Hash identifier: N+zYCSHmiexDCQdvuUIJUcsyNkbquLS/TpB6HktGiY4=
Subject key identifier: 0F:3D:2B:39:E8:88:0F:37:B2:3C:A1:5A:D2:A4:83:44:87:72:62:51
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748A3330EAE23CCB3C5DF1145DA8A00
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Dz0rOeiIDzeyPKFa0qSDRIdyYlE.roa
Signing time: Thu 02 Jan 2025 13:50:59 +0000
ROA not before: Thu 02 Jan 2025 13:50:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216226
IP address blocks: 5.253.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:a3:33:0e:ae:23:cc:b3:c5:df:11:45:da:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f3d2b39e8880f37b23ca15ad2a4834487726251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8a:92:9d:97:34:95:a4:9d:bf:6c:a5:77:84:
0f:42:60:2c:c4:14:bb:48:fc:71:17:11:8b:90:95:
29:33:f8:18:13:64:6e:73:e1:65:51:da:4d:56:9d:
e3:29:da:b2:b1:42:77:bb:ac:9d:6f:67:4b:b2:04:
04:33:2c:0d:40:72:4e:9b:a9:3d:d6:10:ee:fc:42:
02:47:74:d2:fd:69:56:66:5a:92:cd:93:2c:79:52:
5a:a0:35:b9:50:3e:20:82:ad:ef:2d:11:ad:45:4d:
97:85:ff:00:e7:ca:e8:1a:ce:cf:70:cd:2d:4d:fd:
82:1d:9f:bc:e3:29:ed:28:0e:43:27:4e:be:c7:b5:
59:4f:59:ba:dd:03:15:60:86:11:c5:be:04:f4:a7:
a3:09:05:2d:32:43:cf:15:3b:48:cc:fb:8b:d3:56:
32:f1:50:21:90:ee:3f:dd:b6:04:6d:ad:4c:24:6d:
93:92:28:c3:b3:df:7d:fe:84:2a:14:7b:88:08:61:
15:50:1e:d7:39:4f:fa:40:39:d6:d8:bc:ae:64:29:
d8:6d:4a:52:56:57:3f:ee:30:0c:e6:74:17:98:83:
68:a6:df:90:38:e8:ab:0e:d5:13:69:e0:5b:fc:2a:
f2:33:f5:11:7f:4c:39:3d:5a:4a:46:2a:11:4e:91:
f4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3D:2B:39:E8:88:0F:37:B2:3C:A1:5A:D2:A4:83:44:87:72:62:51
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Dz0rOeiIDzeyPKFa0qSDRIdyYlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ac:5b:3f:29:1b:d7:e2:20:fb:8a:22:6f:65:da:6c:d3:e5:
5a:be:87:34:ce:e3:14:50:15:c3:07:3c:87:31:e5:71:2e:d9:
ff:8b:e2:3b:a2:06:01:88:b9:19:1e:2b:3a:33:22:99:a0:b3:
31:f6:ba:14:58:14:19:cc:66:2f:6f:d6:a6:2e:5d:32:53:c5:
39:52:4a:82:19:1b:fa:64:4f:2e:8e:ea:8e:a2:27:62:1c:85:
5b:6f:a4:a3:54:fb:ac:8b:25:bf:d9:04:a1:fe:aa:98:3b:31:
e0:48:4b:26:5f:c1:e7:44:46:27:f0:c9:a7:b1:a3:7f:11:a3:
40:4e:2d:67:7b:51:6a:30:b7:65:1c:76:9f:1a:7d:15:77:5a:
1d:63:22:eb:79:39:e5:47:1f:82:5d:14:64:c8:ab:63:ad:cc:
d1:ed:ad:51:67:12:5a:54:bd:20:4f:45:ae:d6:0a:01:14:08:
70:b6:1b:9e:59:f4:8a:ba:ad:93:91:2b:3a:bb:43:ea:df:ef:
e8:cd:6a:94:a1:f6:d0:c4:8c:fc:9f:d9:37:8c:11:20:d1:e9:
a6:9d:94:56:76:0b:ca:76:12:48:8f:ba:58:b0:35:00:35:af:
6b:9a:c3:1a:f4:9e:00:d6:b1:a7:ea:72:58:9d:d4:f4:36:5b:
3e:5b:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:09:35 2025 by rpki-client