Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/tBiDEoWCGA8hVhVgwo9Iim47EzY.roa
File: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (raw, json)
Hash identifier: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=
Subject key identifier: B4:18:83:12:85:82:18:0F:21:56:15:60:C2:8F:48:8A:6E:3B:13:36
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 0194221F8B6841E8960A42C895E95B1A1F45
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/tBiDEoWCGA8hVhVgwo9Iim47EzY.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31671
IP address blocks: 194.150.240.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8b:68:41:e8:96:0a:42:c8:95:e9:5b:1a:1f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b41883128582180f21561560c28f488a6e3b1336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4f:ee:f3:a7:a2:f7:91:3e:f7:ce:23:13:62:
ce:e6:16:8e:16:91:4b:32:d9:f9:b8:a7:30:02:53:
d6:b7:5c:91:d2:f8:63:fa:99:40:aa:ad:ce:d1:b4:
57:0b:ce:6d:b0:e7:18:1a:ab:2a:6c:09:04:22:f4:
ed:2a:04:50:66:94:72:1d:48:e7:9b:b4:33:2d:da:
7a:eb:d4:02:aa:4f:5f:27:bd:30:ad:05:7e:36:b4:
09:0b:4f:18:5a:15:a3:73:26:99:28:17:02:53:76:
af:98:ea:2b:93:d5:2e:40:b2:84:74:23:fd:5e:a6:
7d:83:86:56:9a:fd:13:fc:ba:cb:a6:75:b7:96:f4:
b9:c5:da:3e:97:17:12:d7:01:56:72:9c:3f:a3:db:
00:95:19:af:50:2f:4d:41:f7:aa:7a:8c:92:e1:5c:
17:a0:6a:28:54:5c:f5:e9:01:ab:8a:89:9d:23:ee:
9a:92:81:a8:dc:86:57:26:58:b9:5a:f1:b2:0b:dd:
a1:85:cc:49:cd:05:49:21:e4:ac:7a:af:7e:4e:06:
14:49:88:82:b4:b4:29:0d:74:05:8f:2b:68:66:18:
df:4f:fa:4d:91:0e:57:8e:f5:26:87:81:fa:29:2f:
ca:5e:f2:99:a1:89:91:54:a9:37:92:9e:f6:43:85:
b6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:18:83:12:85:82:18:0F:21:56:15:60:C2:8F:48:8A:6E:3B:13:36
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/tBiDEoWCGA8hVhVgwo9Iim47EzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.240.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:2b:40:7b:4b:c2:10:2d:18:f6:68:86:bc:68:30:61:60:93:
cd:33:a4:d4:2a:26:a8:58:66:86:29:00:28:ad:4b:08:d5:6c:
57:b7:53:f2:4f:30:76:3e:5d:b3:ef:ce:32:e1:1c:24:7c:84:
96:f4:7c:42:3b:b7:c7:be:48:18:c0:75:cd:a5:2e:e0:29:9d:
18:bb:86:26:2a:36:78:ba:fb:bf:ca:cf:3a:6a:4d:97:69:8d:
a3:ab:53:4e:63:47:4c:be:58:32:9e:9c:80:e8:c7:c5:6f:7f:
b2:c9:c8:c9:73:a9:ca:ab:67:1a:de:80:96:e3:ae:f4:92:ca:
52:08:21:08:db:11:a2:ed:af:4c:1d:a1:8b:e4:14:6c:17:32:
08:30:54:68:53:83:ec:34:35:63:3d:3b:97:10:6b:fb:08:64:
ae:e8:26:aa:25:47:b5:91:1d:6b:63:d1:23:19:9e:ed:0a:56:
ac:54:43:cb:fc:bc:2d:ce:a0:f7:08:67:6b:47:93:87:80:28:
4b:db:1b:4e:6a:90:1e:ab:6e:6f:39:6c:e6:63:38:b1:1e:ab:
13:ff:56:0e:45:26:09:b0:1f:44:24:69:f9:07:e4:a7:5d:48:
10:2f:6f:92:d6:39:63:93:d7:34:9e:ec:ce:66:c3:0a:4f:96:
c5:02:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:34 2025 by rpki-client