Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/ExN9i5VesHU3F7YUwnAG8cmmWIY.roa
File: ExN9i5VesHU3F7YUwnAG8cmmWIY.roa (raw, json)
Hash identifier: ohUReGOM59d9wdFacF3liO8XNYgM9oH2+Bntxv7lM1Y=
Subject key identifier: 13:13:7D:8B:95:5E:B0:75:37:17:B6:14:C2:70:06:F1:C9:A6:58:86
Certificate issuer: /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial: 0194244507BEF240196FFF3BDDBD6D97F9EC
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/ExN9i5VesHU3F7YUwnAG8cmmWIY.roa
Signing time: Wed 01 Jan 2025 23:48:11 +0000
ROA not before: Wed 01 Jan 2025 23:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48702
IP address blocks: 83.137.242.0/24 maxlen: 24
83.137.243.0/24 maxlen: 24
83.137.244.0/24 maxlen: 24
83.137.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:07:be:f2:40:19:6f:ff:3b:dd:bd:6d:97:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Validity
Not Before: Jan 1 23:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13137d8b955eb0753717b614c27006f1c9a65886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:db:4c:ca:fb:04:16:f0:a2:46:b5:1e:8e:b5:
57:00:f5:31:5d:1c:a8:0a:65:7e:4d:52:ef:53:f7:
38:d5:c7:4a:a0:94:2c:20:59:58:0e:43:28:b4:16:
4e:36:c4:00:1d:8f:9d:c6:14:86:17:96:13:f7:01:
0f:7b:d2:e6:11:3f:54:cb:f3:31:ab:48:b5:f4:d7:
8b:52:d7:5c:1a:d5:89:c4:e3:f4:70:20:ce:94:f9:
73:c7:06:0b:9d:ff:b9:51:c5:ef:ec:93:fd:cf:65:
ba:5f:96:2f:77:8b:45:cf:25:a6:69:28:b2:90:0c:
53:8f:7f:0f:c3:4f:ce:0d:3a:d2:32:78:54:ff:65:
05:20:fb:30:e9:49:0c:31:52:96:a4:60:b8:59:5e:
ea:73:49:2e:a8:63:10:07:fe:07:8a:63:64:ca:58:
cb:62:29:47:e3:c7:8c:94:6d:5d:26:5f:4f:6d:7b:
8e:cf:9a:60:24:50:ef:4c:75:ec:35:15:15:b5:17:
bd:78:a7:f4:67:bc:73:28:91:49:98:be:b9:53:dd:
c0:4f:6e:4d:1a:ec:0a:3d:60:c0:99:49:82:79:24:
c4:6b:24:5b:33:47:4a:15:be:5b:68:e6:fa:f0:ef:
f9:5b:4e:6d:cb:32:e1:57:50:b1:a6:a5:74:f6:01:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:13:7D:8B:95:5E:B0:75:37:17:B6:14:C2:70:06:F1:C9:A6:58:86
X509v3 Authority Key Identifier:
keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/ExN9i5VesHU3F7YUwnAG8cmmWIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.242.0-83.137.244.255
83.137.247.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d2:9d:b2:ce:20:4d:05:ec:7d:67:a3:84:72:81:e3:9e:10:
58:73:4e:28:e9:15:bf:35:35:6a:19:f5:d9:11:ff:3c:c0:63:
20:e5:f6:38:0c:10:46:db:6c:95:fa:d5:28:99:ff:db:3d:7f:
f9:cf:6f:2f:80:af:22:18:f8:8e:68:e7:15:67:07:f8:ee:f0:
ed:40:43:cb:5a:20:c9:20:d9:6a:a6:99:b3:1c:17:33:f8:ea:
d7:70:8b:0b:bc:80:ef:48:cf:17:00:32:8e:0f:9c:b5:98:fb:
fb:a2:c9:26:36:6c:77:63:4b:bc:b4:79:f4:0f:b9:2d:83:cd:
2f:aa:da:ef:38:ff:49:52:0c:2f:30:3e:a3:19:09:69:ef:4f:
12:1a:91:63:0c:79:4c:38:e7:dc:9f:4e:7a:20:48:60:15:be:
70:60:d8:ce:66:d9:35:22:ed:9e:f3:ef:aa:81:c8:18:e7:b1:
a4:3c:0e:13:11:25:1f:cc:6d:6c:d6:ad:60:3c:a8:47:8e:dd:
f9:74:03:cc:9a:bf:e2:53:bf:c7:f4:1f:8f:60:b2:5d:24:42:
73:ca:a7:d3:e3:35:83:6d:72:14:07:0b:11:cf:23:ff:37:8d:
59:e0:93:bd:1e:d4:42:c4:3f:79:21:33:8d:4f:66:3f:ba:5b:
1c:f0:a3:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:15 2025 by rpki-client