Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/5HOepO76tD27CgXh7AgBSaOVvIM.roa
File: 5HOepO76tD27CgXh7AgBSaOVvIM.roa (raw, json)
Hash identifier: fhyBpQTMKKX7db+5/rypfSBY1Vplej8lw2Wzs2aMOjk=
Subject key identifier: E4:73:9E:A4:EE:FA:B4:3D:BB:0A:05:E1:EC:08:01:49:A3:95:BC:83
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01942445A0FF733E3C7661E94ED18033BF10
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/5HOepO76tD27CgXh7AgBSaOVvIM.roa
Signing time: Wed 01 Jan 2025 23:48:50 +0000
ROA not before: Wed 01 Jan 2025 23:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60257
IP address blocks: 81.179.96.0/20 maxlen: 24
145.255.240.0/21 maxlen: 24
185.24.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a0:ff:73:3e:3c:76:61:e9:4e:d1:80:33:bf:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jan 1 23:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4739ea4eefab43dbb0a05e1ec080149a395bc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:a5:4d:ab:a6:22:f8:03:9a:a4:db:89:82:
6c:c9:c9:65:89:e7:a3:74:e4:0c:0b:05:88:76:f1:
66:2d:08:22:cb:3b:c6:23:a0:63:6a:b8:56:ba:11:
57:d2:c9:b1:45:ae:d3:3b:17:ac:f7:98:35:43:05:
d4:ff:49:db:f3:3f:55:de:e5:64:b5:cb:9f:40:3c:
18:52:ad:a9:21:28:40:4c:48:18:1d:af:b9:52:67:
ea:49:34:46:ff:dd:f6:9d:34:f2:96:25:d3:ae:fa:
dd:88:21:50:42:76:1e:e4:f9:66:25:fb:4d:80:06:
f2:da:ca:0b:d4:15:aa:bf:cb:00:db:b5:fd:cd:77:
c6:26:23:51:8b:5e:75:ed:7a:27:93:fb:c5:df:6b:
f3:b9:db:f0:2a:aa:d0:f4:38:34:17:91:b1:0e:f3:
c5:ce:ba:7c:29:69:08:55:32:64:e3:8a:7a:a2:ad:
e6:f8:59:5f:74:4e:d5:1a:cb:e0:20:e2:77:2d:6d:
1d:01:80:79:75:0b:96:27:f2:3a:94:1a:82:8d:6d:
66:0c:15:57:02:1d:e8:76:d2:0e:8a:4c:4d:ef:19:
ce:de:e3:3e:13:28:dc:b3:c2:9d:ed:8c:fd:46:41:
3d:2b:cf:46:d3:5f:ed:d1:66:42:57:09:79:b3:5d:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:73:9E:A4:EE:FA:B4:3D:BB:0A:05:E1:EC:08:01:49:A3:95:BC:83
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/5HOepO76tD27CgXh7AgBSaOVvIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.179.96.0/20
145.255.240.0/21
185.24.12.0/22
Signature Algorithm: sha256WithRSAEncryption
33:6b:6c:6d:fd:a0:86:21:45:96:e5:bc:b9:de:60:8d:79:32:
33:04:a8:eb:50:36:44:e4:bf:b3:fb:11:db:98:e0:df:0e:4c:
64:bf:cd:d3:31:29:96:e5:e7:77:da:cf:f4:19:2d:8f:1b:d1:
47:5c:30:39:46:f7:ca:e2:74:39:00:46:7b:f5:5d:78:8f:85:
78:27:fa:91:76:b0:25:a5:06:55:f9:dc:28:de:69:69:a3:f2:
3c:8a:13:a2:03:9e:d3:a2:a7:a9:2a:be:dc:7c:a3:08:d6:64:
1e:f8:07:d8:18:75:64:c0:3e:0f:04:b8:9e:ee:bb:76:72:9f:
70:00:6d:db:92:4f:c4:2a:62:ef:b4:4f:8a:e4:e9:cb:72:6c:
c1:ac:d1:19:23:51:16:bf:57:71:7b:47:8e:3e:8f:26:58:2e:
9e:64:bb:d2:8d:d7:cd:c5:51:a4:20:37:0e:f0:b6:30:1b:54:
55:7c:b7:c8:8c:39:5f:63:94:33:47:a4:9b:70:1e:4a:45:ff:
2c:fd:0f:31:fc:6b:f0:ea:d8:31:96:ad:6d:71:fc:4c:ab:39:
02:84:29:89:7f:55:30:ea:66:ee:9c:e5:19:83:4a:7b:59:74:
6c:48:cb:72:8c:97:a5:8d:4a:69:c7:07:7e:bf:dc:16:e0:31:
d2:48:c8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 10:14:48 2025 by rpki-client