Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa
File: rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa (raw, json)
Hash identifier: bQ3pfnomHu4HsTEieZAKwSmcNcTX0iUiJ6dLeZmZYWg=
Subject key identifier: AC:0E:E5:A5:FB:B5:6E:6E:54:EF:FB:B9:29:87:40:E8:1A:6F:6A:80
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA2282E05857125FC2E834A060BB3
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19740
IP address blocks: 83.136.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a2:28:2e:05:85:71:25:fc:2e:83:4a:06:0b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac0ee5a5fbb56e6e54effbb9298740e81a6f6a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:f7:2c:ef:e9:df:3d:c5:b3:c4:8f:47:79:
58:31:7a:b4:31:f4:bb:7a:3a:e6:16:61:22:f0:af:
1d:6a:72:80:bc:22:50:8e:38:d0:06:7b:02:12:41:
cf:66:35:ac:1c:af:ee:e1:ad:55:0a:03:04:5f:e9:
85:c6:d7:ad:b2:16:25:cc:83:cb:e9:34:cb:ae:f9:
77:68:bd:8c:34:05:c5:43:64:ac:e1:57:f7:11:3a:
1c:80:a9:23:fa:3d:73:7a:91:01:96:e1:0b:b5:d6:
19:b5:c7:cf:cc:41:e6:5d:7e:e4:29:86:8c:3f:c5:
a8:e6:b8:81:50:b0:e8:a4:6e:e3:34:24:fe:61:56:
64:c6:8c:02:49:9c:4d:a5:f5:e8:46:1e:4c:13:2d:
da:cc:98:75:4a:e6:00:e9:58:11:cf:f2:d6:ed:89:
70:57:ed:10:e3:41:c8:b2:90:3f:e2:a4:8e:40:20:
71:17:5b:52:6e:3b:ae:34:65:d2:ea:09:98:9d:8d:
26:c9:d4:ff:09:28:30:30:2f:fe:1c:3d:0d:50:1e:
7d:1b:c9:bf:ed:e8:00:b0:b3:9b:dc:9d:5c:98:38:
ef:27:46:2f:86:12:08:98:69:f2:3f:9b:ff:55:b5:
1a:4a:b7:8e:95:78:c4:19:d2:d0:7b:e9:03:2b:35:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0E:E5:A5:FB:B5:6E:6E:54:EF:FB:B9:29:87:40:E8:1A:6F:6A:80
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/rA7lpfu1bm5U7_u5KYdA6BpvaoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:84:f4:5e:83:c6:00:f4:52:e6:69:3b:52:f1:64:bb:69:7e:
03:92:55:cb:46:72:06:8f:ae:ad:53:94:6b:17:33:e8:a0:28:
ff:b2:f5:56:46:a0:e5:95:08:2b:ee:36:7c:a4:44:ad:cc:11:
69:19:85:7d:f2:1e:8b:c6:04:ba:41:fc:56:7f:3a:b4:00:7c:
b9:b6:25:eb:a5:c6:a7:9f:65:52:ba:6e:68:49:c7:8b:c4:cf:
50:0a:fd:13:d0:69:e1:6f:72:04:ed:87:56:ce:84:4a:db:ef:
e8:65:d8:26:ee:62:7d:26:f6:ef:ff:3b:56:bc:4a:f5:eb:e3:
1e:4b:18:4d:6b:27:09:fb:cd:2a:97:c8:68:4d:a1:d8:6b:41:
c1:0e:0d:8e:e0:84:19:33:39:db:5b:75:04:d6:99:70:5d:ac:
fc:55:da:6e:1c:d1:1a:4c:4e:ad:a7:d1:6e:c0:e3:dc:29:e0:
7d:7e:60:05:fc:96:70:d0:64:06:b9:09:a0:02:7a:39:59:9d:
99:1d:6f:42:f3:6e:3a:a7:2a:8f:5f:3d:55:3e:50:6b:76:c0:
d5:ba:18:54:d9:f1:c5:9c:bf:64:a5:9e:9a:df:c5:d5:59:2c:
f4:c2:ea:c0:68:eb:e9:5e:67:ef:83:57:b6:e2:8f:63:c3:e1:
a4:42:0a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:31 2025 by rpki-client