Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1-H13vHXEt9msMsZOvqU-otxUOt0.roa
File: 1-H13vHXEt9msMsZOvqU-otxUOt0.roa (raw, json)
Hash identifier: Rgvq55zT5NBnfacf+JQZp1RRodipw94BIRoWgM8C2KI=
Subject key identifier: F8:7D:77:BC:75:C4:B7:D9:AC:32:C6:4E:BE:A5:3E:A2:DC:54:3A:DD
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B2972152C3855B3F13FD66E61817
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1-H13vHXEt9msMsZOvqU-otxUOt0.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59682
IP address blocks: 94.131.5.0/24 maxlen: 24
95.164.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b2:97:21:52:c3:85:5b:3f:13:fd:66:e6:18:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f87d77bc75c4b7d9ac32c64ebea53ea2dc543add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:c3:a9:ce:53:66:49:4e:1f:8a:cf:43:93:
50:51:31:fa:9e:22:6f:22:82:25:71:21:e3:52:b6:
92:c2:17:dc:c7:0d:71:fd:6b:9a:9e:a3:fd:11:00:
8d:a4:77:f0:25:e2:39:37:86:aa:f8:b8:ff:1c:ee:
4f:8b:05:b6:bb:4a:99:1e:0a:f9:1b:d9:35:0a:13:
41:42:2f:81:a7:8a:d0:1f:73:fa:87:4d:0a:f8:43:
17:ee:68:d6:f8:0b:f5:95:53:28:07:70:f1:09:e1:
da:c5:ff:b0:57:ff:60:6d:ff:57:b6:bf:4c:90:db:
41:b0:20:0f:4f:da:76:30:26:c2:e1:af:08:a4:9f:
05:82:b9:fe:a4:ca:a1:a1:81:6e:d5:19:d4:30:4e:
41:1e:13:6c:ea:62:1d:17:8c:d1:fa:b5:d2:88:a9:
c5:31:b2:ba:7a:63:92:44:24:d5:f4:7c:0e:7e:73:
89:00:9b:b3:15:33:f1:8b:79:6c:e9:5d:1a:9b:48:
27:7b:1c:c9:eb:ae:b0:62:f2:35:30:3b:4c:23:32:
b8:60:42:e3:b9:4f:41:1e:c9:90:0f:6f:84:72:8a:
b7:bc:ac:50:cd:9c:f3:5f:8c:8f:25:a2:ac:94:5e:
e5:78:ad:1e:ec:1f:f8:28:14:9b:68:af:88:5e:80:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7D:77:BC:75:C4:B7:D9:AC:32:C6:4E:BE:A5:3E:A2:DC:54:3A:DD
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1-H13vHXEt9msMsZOvqU-otxUOt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.5.0/24
95.164.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6a:8b:e5:dd:c4:09:b6:0d:b9:dc:68:1a:93:47:c4:53:f0:
90:bb:d3:ad:40:01:94:0d:90:7e:83:e7:5a:60:43:15:b5:bf:
b1:6a:5e:f5:27:cd:38:90:24:d5:80:57:51:11:35:e7:22:1b:
12:03:60:8b:ae:8b:a9:ab:6f:f0:7d:48:86:b5:c6:1d:19:72:
7f:e1:15:46:95:60:ed:40:75:1a:0c:6b:04:26:df:bd:7f:4d:
f0:6b:5a:0a:cf:5f:bc:b7:db:c0:ab:46:33:20:a1:31:ea:7d:
f7:8c:12:95:43:7e:2b:40:2b:c4:66:c2:21:d1:91:b9:a4:d2:
4f:d9:9a:9f:33:27:c5:96:39:f9:38:06:e7:b8:ad:bc:e7:01:
af:09:20:96:5d:21:89:a7:86:c9:f7:3b:c8:05:2e:d0:c1:f8:
b8:ed:37:8d:53:32:40:f5:b2:91:6a:32:e6:10:ea:8d:e7:1d:
0b:d2:c5:34:47:51:26:62:19:80:99:bc:d7:fa:55:c0:12:a4:
fe:3c:da:b8:e2:c7:bb:b1:1d:78:d4:45:f1:5b:cb:71:42:3f:
ee:29:c4:36:7e:d5:2c:2f:4c:3c:a9:fc:0c:28:7f:b6:a4:1e:
0c:8e:44:b7:51:14:65:09:26:67:ae:4f:3e:50:ee:aa:d0:b9:
94:66:da:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:33 2025 by rpki-client