Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S41Cd1AR9Z2hLvzGr_WeJ_4qMlU.roa
File: S41Cd1AR9Z2hLvzGr_WeJ_4qMlU.roa (raw, json)
Hash identifier: GjF5x01fdvJu7nYuxxfVRo6MwcjIthDWhsqgii6EbWo=
Subject key identifier: 4B:8D:42:77:50:11:F5:9D:A1:2E:FC:C6:AF:F5:9E:27:FE:2A:32:55
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019427B558A8EC6A20ED1B6B1EDFD10F5AAE
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S41Cd1AR9Z2hLvzGr_WeJ_4qMlU.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196886
IP address blocks: 188.255.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:58:a8:ec:6a:20:ed:1b:6b:1e:df:d1:0f:5a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b8d42775011f59da12efcc6aff59e27fe2a3255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:f5:6a:3c:ed:f9:ed:79:2e:c2:d6:1f:5f:
ab:c3:13:e8:2f:da:48:6e:91:7e:3a:bb:cc:d5:00:
b2:be:8c:10:c2:15:f3:83:da:33:9e:3b:fe:05:44:
21:93:a9:b3:93:46:bc:7a:2f:36:3f:74:89:61:b8:
6a:a7:5f:ee:78:fc:a3:c2:fb:a2:9d:ba:60:3a:35:
8e:de:a3:c1:8d:da:e9:ae:8f:a0:e6:f1:72:08:7b:
38:17:0c:a0:d7:20:1d:52:47:6b:9a:d4:ad:f6:ac:
cc:55:51:71:ec:63:4c:d4:11:88:61:33:7d:0b:fc:
ca:5e:ef:71:c2:46:c4:1f:f2:e9:9e:d5:73:2e:b8:
77:8b:9f:b2:a0:e1:2d:61:40:7f:dc:a6:1f:74:60:
12:3c:7a:a5:e3:fa:72:a8:20:01:d5:91:8b:9e:29:
00:d3:44:22:eb:9c:6f:d9:68:17:35:cf:61:90:47:
b8:f9:94:f7:9d:15:b3:c6:4b:8a:f8:a8:26:f2:3c:
cd:af:f0:44:ed:d2:61:f4:c8:9c:5b:40:85:c4:16:
95:3a:1d:de:2e:8b:09:82:54:50:1f:62:69:b1:35:
47:99:60:a7:2a:6b:74:61:d8:c2:a4:5e:2f:c9:6f:
80:f3:82:8a:f9:85:10:1f:65:2c:e9:ef:9b:80:17:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:42:77:50:11:F5:9D:A1:2E:FC:C6:AF:F5:9E:27:FE:2A:32:55
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/S41Cd1AR9Z2hLvzGr_WeJ_4qMlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:92:78:7a:7a:d8:02:a1:5e:fb:86:4b:64:7c:8c:37:7e:1c:
b2:62:25:49:fb:71:0a:7b:6c:bf:34:87:e8:3c:c3:9a:fa:ee:
f7:e8:64:f2:9b:60:2e:b2:8b:3e:4e:88:2b:dc:02:ac:8c:95:
da:1d:b6:5c:ce:e2:65:3a:39:d9:ff:24:45:9b:59:f3:23:a2:
29:11:14:de:96:32:4f:fe:af:5b:4c:fb:f6:e7:6e:2a:99:b3:
8c:e2:0a:b2:b0:ed:58:3a:ce:68:6f:37:13:87:5c:d7:46:e6:
cc:e8:b4:c8:f5:22:e3:5b:40:99:49:28:68:8a:37:9f:79:fd:
01:d0:61:a4:03:7a:59:c1:ff:09:d1:49:e0:28:3b:eb:b4:c8:
2e:35:c2:00:69:75:22:82:66:eb:07:fb:e3:bd:bf:c4:6c:a0:
39:f1:6b:60:04:41:42:c5:e7:87:41:6f:de:fc:9e:fb:31:bc:
f3:3c:70:cc:9b:bb:16:4e:dc:18:3d:66:eb:6b:06:82:05:7b:
3b:c9:63:81:bc:0a:12:5b:f7:ec:46:8c:ff:4b:80:15:b9:94:
62:22:92:70:c5:b3:19:69:1c:33:f8:53:f2:60:65:40:c6:3f:
00:1f:6b:d9:bb:10:5d:d9:6b:c9:52:4f:07:30:97:1f:09:ce:
ab:e5:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:20 2025 by rpki-client