Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/kpBYvA7pyyD3z1jcuA_oTRs_124.roa
File: kpBYvA7pyyD3z1jcuA_oTRs_124.roa (raw, json)
Hash identifier: Ob8UloqnH6bNNxpYRDCFPpSnvfiM9GWnQYENZrL5zNk=
Subject key identifier: 92:90:58:BC:0E:E9:CB:20:F7:CF:58:DC:B8:0F:E8:4D:1B:3F:D7:6E
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 01942521C5283E4BC297DE864741EBD33D7E
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/kpBYvA7pyyD3z1jcuA_oTRs_124.roa
Signing time: Thu 02 Jan 2025 03:49:17 +0000
ROA not before: Thu 02 Jan 2025 03:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62057
IP address blocks: 78.153.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c5:28:3e:4b:c2:97:de:86:47:41:eb:d3:3d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 2 03:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=929058bc0ee9cb20f7cf58dcb80fe84d1b3fd76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:ae:52:3d:a9:e1:d2:45:d6:67:81:7b:ae:
23:d6:42:a7:e0:f2:c9:a6:29:21:d9:71:6e:aa:cc:
96:9c:14:ac:f0:c6:41:f7:83:65:6b:26:6a:11:34:
f3:a5:de:30:55:ff:d4:68:3b:5e:0a:96:3e:4f:aa:
be:98:ed:61:52:18:89:6c:f3:2c:3e:9d:68:93:5e:
0c:e4:ae:33:81:6a:1d:c7:2f:5c:da:0e:32:40:52:
80:30:1e:1d:4e:88:d7:d5:9e:7f:16:ed:29:06:33:
25:d9:6a:bc:b5:3c:0e:3d:10:5e:e9:69:2a:e7:18:
13:74:cb:3e:f5:53:29:d0:2d:70:02:f6:14:48:8c:
80:ad:20:87:0e:7d:45:2b:5e:7d:94:35:36:4a:2d:
08:c2:e6:a9:8f:93:d4:60:ee:64:3a:9a:91:dc:a3:
d5:ba:c2:6c:8f:34:f9:ad:59:92:a6:b1:f2:c1:d0:
80:10:8b:0e:db:63:85:45:b9:40:a4:86:8d:34:fd:
7c:6b:95:b8:dc:79:b7:c1:8d:fa:eb:38:b8:10:8a:
af:d5:69:af:d6:bb:7a:fd:1a:c7:e4:83:94:db:69:
32:7b:6d:0e:b2:63:77:68:a4:fa:05:20:e0:85:81:
4f:72:1f:9f:a4:ab:88:bd:1f:02:ac:66:12:38:00:
6b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:58:BC:0E:E9:CB:20:F7:CF:58:DC:B8:0F:E8:4D:1B:3F:D7:6E
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/kpBYvA7pyyD3z1jcuA_oTRs_124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.247.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7f:e9:e1:ae:15:8b:c3:e8:d4:5d:e6:ea:67:c0:8e:f1:a4:
81:58:77:a7:bf:2f:dc:7d:f4:93:41:fb:9c:31:8c:ee:e1:2e:
45:91:38:f8:29:60:14:1b:98:df:d2:f2:ce:57:49:d1:58:44:
b4:32:4a:8e:de:2f:23:d9:76:53:3e:66:3e:d5:13:f0:cf:2e:
d1:3d:88:98:d4:7f:c3:e2:fe:38:4e:a3:7c:a6:d4:79:2c:47:
80:f5:0d:e9:17:0f:87:15:9b:c5:c4:f7:36:1f:0a:c5:59:73:
9a:e4:ce:07:25:76:40:cf:f2:5f:6e:f8:46:11:10:ad:2a:d7:
c1:ab:a0:a7:c7:27:b9:4e:57:85:21:e6:f5:56:51:1c:2c:3f:
94:49:c4:f1:1a:25:de:11:fb:c9:ee:42:c4:a9:2b:f5:6d:6c:
f2:e6:df:91:f6:48:90:14:1f:46:89:9d:f2:9e:37:15:62:fd:
51:2c:73:d7:f0:b2:1e:21:c9:64:e6:42:3c:f6:f2:8d:92:67:
04:08:63:58:e5:b0:68:98:81:4b:47:3f:24:aa:ae:d9:d6:d3:
b3:a5:b9:2c:5b:2e:3a:56:78:4f:b8:41:b4:49:05:4b:97:8b:
32:d2:7e:ef:04:e1:69:c9:8c:58:b3:d3:dc:d0:52:d6:19:22:
ae:25:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:37:18 2025 by rpki-client