Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/4n60dmESH0S_t55G5kL7m5-9nPQ.roa
File: 4n60dmESH0S_t55G5kL7m5-9nPQ.roa (raw, json)
Hash identifier: 8Yl7mPdCOASLn21jFFZtRnqVACPq2IcHgd8DlOM4RfQ=
Subject key identifier: E2:7E:B4:76:61:12:1F:44:BF:B7:9E:46:E6:42:FB:9B:9F:BD:9C:F4
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 019422FC27244F7AE819188C3D78FB5975B8
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/4n60dmESH0S_t55G5kL7m5-9nPQ.roa
Signing time: Wed 01 Jan 2025 17:48:57 +0000
ROA not before: Wed 01 Jan 2025 17:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206720
IP address blocks: 140.94.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:27:24:4f:7a:e8:19:18:8c:3d:78:fb:59:75:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Jan 1 17:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e27eb47661121f44bfb79e46e642fb9b9fbd9cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:44:99:17:21:45:de:e7:ab:dd:06:31:2c:f0:
3b:22:b8:a4:ae:01:89:8c:2e:4a:c9:9e:77:a4:33:
89:24:93:f8:e6:ea:d2:bf:54:e9:e6:e2:4a:8b:53:
f5:d3:24:75:7e:b7:f2:37:80:86:3a:b3:19:d6:ca:
56:ac:c5:bb:ba:08:27:bb:ab:2d:f8:61:a4:2d:34:
47:79:97:1b:f3:50:94:1c:5c:2d:bb:95:75:5e:c5:
71:73:74:64:5d:b8:6b:96:23:2c:85:18:ff:51:4d:
aa:01:9f:1e:d2:75:5e:f9:9d:82:e1:d7:3f:48:48:
6d:b5:80:48:53:8d:bb:72:65:3b:2d:79:18:03:b7:
73:48:96:a0:a7:b2:a4:97:77:65:a9:e5:80:bd:c4:
b4:20:36:8d:f7:f7:21:82:c2:41:0b:9f:88:ad:a2:
a8:0a:a6:b4:0a:39:75:51:73:ca:b5:91:a1:8b:28:
a3:84:39:2f:9f:5f:07:e5:fa:2b:7e:b0:b3:ff:7f:
96:10:79:51:d1:2c:65:bc:c6:5b:dd:f0:c9:d8:0c:
1f:68:99:71:42:57:73:ef:e3:21:2c:e3:3e:f0:04:
ef:34:83:31:5f:2f:7a:09:27:45:3a:53:72:1e:38:
24:02:17:74:9d:b7:24:0c:b9:07:a3:ae:5e:38:e8:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7E:B4:76:61:12:1F:44:BF:B7:9E:46:E6:42:FB:9B:9F:BD:9C:F4
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/4n60dmESH0S_t55G5kL7m5-9nPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.94.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:3d:13:ef:78:89:e4:c7:86:40:74:74:02:f6:7e:f3:78:f1:
3b:98:0a:11:96:98:89:e2:1b:59:b1:52:f2:0c:60:1c:4e:a2:
a5:b5:1f:ca:05:1b:e7:e1:79:84:e4:08:d7:d5:80:83:57:fa:
a1:4f:ab:ed:df:a4:09:29:d3:b8:5c:dc:66:29:58:a4:ac:18:
07:ba:da:35:60:62:95:99:1e:b9:45:25:ed:df:5e:55:1a:e6:
52:4a:d3:18:64:5e:d7:cc:88:9a:7e:db:2a:e8:5c:90:f9:b4:
cd:06:32:0f:4b:ab:ab:6b:13:c8:3a:80:a7:55:ed:67:20:c4:
aa:5f:75:91:bd:09:46:3f:d4:82:ab:4c:94:d8:c3:10:d3:6b:
ca:30:2f:11:34:96:1d:14:1e:0b:55:37:5b:39:04:a2:52:77:
4e:35:4e:e6:09:7b:74:99:a9:db:67:e3:fc:bf:7d:a8:de:ec:
6f:5c:a2:66:f4:6e:5d:26:a6:19:3c:75:44:d3:04:6b:54:0a:
a5:56:5b:a2:73:44:08:09:89:0d:50:88:c0:ad:44:24:dd:1e:
b3:7e:7d:9a:4e:fe:7d:f1:00:f1:5c:f8:c0:44:8a:93:10:0d:
fa:32:f6:ce:10:ed:1b:5a:58:65:0f:07:8a:78:72:0b:e2:df:
bb:b4:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:47:54 2025 by rpki-client