Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/E1Q3WDbG1w_l9K2-Eo304BkVr0Q.roa
File: E1Q3WDbG1w_l9K2-Eo304BkVr0Q.roa (raw, json)
Hash identifier: 13m54vT3ucVgI5Y+hAoUINxrYMxE2yCFFp8qLD9bKHU=
Subject key identifier: 13:54:37:58:36:C6:D7:0F:E5:F4:AD:BE:12:8D:F4:E0:19:15:AF:44
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01942445136D4A8E73B71946CE774BC70041
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/E1Q3WDbG1w_l9K2-Eo304BkVr0Q.roa
Signing time: Wed 01 Jan 2025 23:48:14 +0000
ROA not before: Wed 01 Jan 2025 23:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39395
IP address blocks: 176.124.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:13:6d:4a:8e:73:b7:19:46:ce:77:4b:c7:00:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1354375836c6d70fe5f4adbe128df4e01915af44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:98:ec:62:4d:17:88:8c:20:bb:54:f7:3c:
88:9a:35:e1:ea:77:a9:ad:be:a8:fb:06:c5:8f:a5:
aa:4c:2b:7f:f3:89:9b:f9:8a:6f:bd:31:d6:1a:a6:
a1:2c:81:91:fb:2c:54:5b:73:84:18:4d:bf:62:05:
64:26:af:a8:d7:a6:d8:42:47:13:b1:4c:a5:4a:6f:
54:de:dd:b7:ca:29:92:59:c1:d1:b5:df:2d:a9:53:
1f:31:92:3d:e6:35:c2:6b:2f:19:6f:33:9d:17:1b:
9d:c3:20:63:04:a4:98:d8:db:87:07:92:42:18:20:
06:bc:ff:ff:a7:cb:31:6c:1e:98:d8:8f:ee:ef:b5:
4d:77:35:46:19:25:f1:92:06:6e:36:d5:04:55:02:
80:17:80:51:af:04:06:39:d5:98:29:ab:ca:b6:23:
9f:1e:7b:0d:55:0d:a7:67:d8:80:40:32:02:e8:a3:
d1:69:55:ce:0e:b6:db:eb:af:25:6c:4a:9f:f1:19:
36:8f:ef:52:4c:1d:9c:38:af:f6:37:e7:33:d4:82:
11:e4:d0:8e:2e:e0:2b:f8:12:ae:49:17:df:bf:5b:
76:b9:60:c4:2b:83:9a:f5:15:9b:33:0f:64:9b:72:
90:c7:30:ce:79:d5:70:36:63:a4:8e:e0:7f:94:46:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:54:37:58:36:C6:D7:0F:E5:F4:AD:BE:12:8D:F4:E0:19:15:AF:44
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/E1Q3WDbG1w_l9K2-Eo304BkVr0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.35.0/24
Signature Algorithm: sha256WithRSAEncryption
57:87:19:99:8b:b3:21:97:9c:ca:eb:77:63:93:5c:57:bc:0d:
c5:8c:d0:75:d6:7d:3b:ae:94:12:d6:4f:56:96:78:1b:39:a7:
3c:69:6a:ce:a6:08:a5:75:e2:92:8b:86:b0:6e:1c:93:bd:0f:
59:6a:9a:a0:75:73:70:ba:61:b7:c1:c0:c4:c9:31:1c:41:c9:
85:21:44:01:d2:f6:e1:dd:7e:85:69:71:b4:4b:68:af:5c:ce:
e2:2b:fa:49:f4:f3:26:a2:cc:a9:8b:13:dd:c3:9e:d4:c0:45:
7f:bc:d1:df:98:cc:b6:d6:9f:8b:1a:67:a7:75:fc:e2:42:e6:
ad:04:a8:0f:55:f0:3b:2f:d4:c3:3f:46:31:14:33:fa:a1:18:
c2:fa:a4:6c:e9:34:73:3d:60:fe:fc:d1:92:71:0d:51:e6:75:
c5:22:48:6b:27:da:34:54:49:d2:05:83:44:08:c2:fb:0e:70:
19:81:f4:f1:47:12:6d:11:8c:a5:11:ad:2c:a2:9f:fb:b6:91:
f1:9d:68:35:26:50:1b:90:d5:ff:e4:9d:45:b5:2e:25:31:c2:
be:5a:a6:64:92:fb:3a:ae:b8:06:fc:16:71:7b:11:77:1f:59:
ea:76:d9:4e:87:f5:79:bd:f4:18:2b:38:24:8e:51:b8:da:fc:
25:95:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:37:54 2025 by rpki-client