Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/r03a4FD5QDtqrMjhRP_L2N8sPt8.roa
File: r03a4FD5QDtqrMjhRP_L2N8sPt8.roa (raw, json)
Hash identifier: MsCswh8Y77pSHpRZqJYoQ4n9OWB/3Qp0BgO62Er81go=
Subject key identifier: AF:4D:DA:E0:50:F9:40:3B:6A:AC:C8:E1:44:FF:CB:D8:DF:2C:3E:DF
Certificate issuer: /CN=54913026f079cda241aef4514fd353c28330e461
Certificate serial: 0194266BDC209B0F60884F74D4FBC0F7C3AB
Authority key identifier: 54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/r03a4FD5QDtqrMjhRP_L2N8sPt8.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199245
IP address blocks: 195.85.44.0/24 maxlen: 24
2a12:b940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:dc:20:9b:0f:60:88:4f:74:d4:fb:c0:f7:c3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54913026f079cda241aef4514fd353c28330e461
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af4ddae050f9403b6aacc8e144ffcbd8df2c3edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:64:c2:e6:b7:4e:d7:7c:c4:13:ff:f9:dc:
06:d0:52:70:75:be:0a:e5:ed:0f:9f:c3:7a:2e:14:
0b:85:50:19:71:3c:02:76:88:97:8d:7c:7e:1f:f4:
bd:76:e5:00:1c:a9:37:79:7a:22:2d:54:f8:11:34:
22:1c:a9:5e:e3:ff:de:a8:f8:3d:80:27:04:e8:66:
14:3e:31:d6:86:6d:c8:ea:67:45:12:1d:ef:4d:18:
a2:e3:d1:39:78:a1:69:e5:24:f3:c8:ca:ee:3e:f8:
de:85:7c:7d:cd:b6:84:3b:49:39:62:96:dc:49:7b:
83:50:32:e9:71:0d:9f:66:47:52:6e:a8:0f:b9:48:
81:af:ad:66:c3:7b:48:82:9c:19:64:21:dd:61:89:
6e:f3:cd:22:9a:db:05:da:b0:e5:d0:51:ea:2e:5f:
fa:d4:c3:b1:74:63:45:ef:a2:8c:e1:f2:ac:fd:33:
78:e1:23:c9:f8:bd:35:bd:70:16:e8:ac:b7:e7:a4:
b5:09:41:7f:75:be:45:10:4d:1c:ed:a0:a1:fa:ae:
f8:0c:13:cc:a3:07:79:0c:c0:03:44:25:a6:fb:12:
3b:2c:0e:e5:81:fa:7d:70:de:ff:93:69:75:50:87:
89:aa:9a:e3:79:7a:27:e1:61:03:98:c9:c9:d3:6f:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4D:DA:E0:50:F9:40:3B:6A:AC:C8:E1:44:FF:CB:D8:DF:2C:3E:DF
X509v3 Authority Key Identifier:
keyid:54:91:30:26:F0:79:CD:A2:41:AE:F4:51:4F:D3:53:C2:83:30:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJEwJvB5zaJBrvRRT9NTwoMw5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/r03a4FD5QDtqrMjhRP_L2N8sPt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3f63df-b6f7-4d42-a9a9-1a76784a0a21/1/VJEwJvB5zaJBrvRRT9NTwoMw5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.44.0/24
IPv6:
2a12:b940::/29
Signature Algorithm: sha256WithRSAEncryption
ae:bb:5b:46:18:74:9f:fc:b2:1a:e7:d4:e3:d4:08:81:00:4f:
da:c6:f2:80:97:07:c6:18:f8:8b:fe:c5:a3:c3:b5:c4:df:96:
33:9c:6a:86:be:5c:24:8c:ef:bb:8f:43:bc:f7:99:eb:a1:b8:
c6:f5:9c:96:d5:68:ae:c9:e0:a7:77:5c:16:13:43:eb:ec:33:
fc:df:68:4f:a8:18:16:06:ac:37:7e:fd:b1:fb:f2:69:2a:8c:
a9:34:af:16:f2:40:bb:93:2c:4c:29:27:2e:6b:d1:fa:eb:e8:
53:12:84:16:8c:ae:9a:83:fe:a7:55:13:06:4a:43:9d:88:06:
25:98:d7:fa:97:b9:0e:a5:53:1b:d5:a4:5e:d2:db:fa:51:f8:
e4:0b:1f:99:f8:45:c8:04:90:6c:3f:87:d9:78:8e:5a:97:d0:
01:8b:ec:6b:e2:1f:bc:47:6c:8a:9e:40:1b:fd:db:a6:50:42:
cd:02:9e:3f:68:07:08:7a:61:6f:99:a7:1a:bc:c3:41:13:62:
5e:fd:29:1d:70:5b:99:ff:eb:e7:25:78:4b:d5:d2:8d:14:9c:
9e:df:03:2f:3c:f8:c8:68:8f:bf:37:a9:ff:3a:07:8d:b6:00:
8c:51:df:09:e0:24:e3:ec:77:30:7d:8c:70:f6:60:0e:31:e4:
5d:ef:fb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:25 2025 by rpki-client