Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/k9_h63CkyTFP9dp8XuNDvCxNzms.roa
File: k9_h63CkyTFP9dp8XuNDvCxNzms.roa (raw, json)
Hash identifier: Im4uKqma1iWFJ1wc2qRnkE5lMnQ4ol3CcsuFcdhwEn0=
Subject key identifier: 93:DF:E1:EB:70:A4:C9:31:4F:F5:DA:7C:5E:E3:43:BC:2C:4D:CE:6B
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 01956655E45638DCC247E67BD9CCD61FBBAD
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/k9_h63CkyTFP9dp8XuNDvCxNzms.roa
Signing time: Wed 05 Mar 2025 12:44:19 +0000
ROA not before: Wed 05 Mar 2025 12:44:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199732
IP address blocks: 79.141.212.0/24 maxlen: 24
81.27.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:55:e4:56:38:dc:c2:47:e6:7b:d9:cc:d6:1f:bb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Mar 5 12:44:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93dfe1eb70a4c9314ff5da7c5ee343bc2c4dce6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:b4:c1:e6:d3:ec:69:49:5e:d7:ea:a2:dd:
3d:ae:f5:98:3c:d7:5f:f1:d3:64:03:d6:5f:f1:c4:
1e:a5:87:56:7d:11:92:95:70:8e:9a:b3:b2:b0:e9:
bd:79:eb:b2:7a:d3:63:18:b4:50:73:4f:1d:af:cd:
e8:04:d9:e6:0c:9a:d7:72:09:8a:33:31:d1:db:ac:
46:5f:c3:10:f7:35:ad:89:f0:6b:c7:b6:b1:f5:e5:
b9:42:45:f0:62:8f:b5:33:09:6e:e7:06:18:2c:53:
46:5f:32:1e:e3:e7:58:5d:e2:fd:70:b2:0f:95:bb:
f6:37:67:5b:ae:c4:71:e7:2f:0b:0c:8a:d1:95:fc:
3e:2c:0c:71:90:66:df:e4:63:4f:f4:c6:72:dc:79:
5c:55:e9:ea:76:f7:81:00:d6:c2:78:73:7c:10:bb:
3c:dc:1a:21:f4:39:fe:26:25:de:69:fd:f1:d1:83:
3e:a0:c6:c4:e3:d2:3a:ea:cc:f2:b3:61:d7:c7:dc:
f5:2c:65:83:30:bf:79:6f:05:b1:89:9a:bb:6c:89:
32:c4:e3:ae:6b:4d:ea:bc:b1:8e:2f:c6:87:d5:a2:
7d:6f:b4:1e:88:6f:06:0a:36:3e:f4:28:41:8e:42:
36:19:a1:8c:c7:b7:51:b1:5a:3c:d8:17:35:9d:f9:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:E1:EB:70:A4:C9:31:4F:F5:DA:7C:5E:E3:43:BC:2C:4D:CE:6B
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/k9_h63CkyTFP9dp8XuNDvCxNzms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.212.0/24
81.27.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:4b:3a:64:27:45:08:0d:8f:7e:2b:3f:79:1a:dd:60:ec:62:
d5:ca:8c:60:7a:cb:b0:c8:b8:e0:27:65:43:32:56:2d:c5:3d:
58:4e:7a:76:d2:39:ed:f8:0c:69:63:1c:e5:f1:40:aa:40:09:
b4:49:3f:d8:c5:43:17:db:e8:51:42:db:b0:29:a8:0a:d2:b5:
8d:b1:96:2b:d4:7c:86:e7:1e:39:89:97:00:38:dc:b9:59:19:
be:ec:59:6e:41:aa:92:50:f0:ab:80:5a:59:5b:68:e3:18:82:
fa:06:60:77:28:a6:b7:93:c9:c3:d2:e7:df:98:f9:66:29:89:
39:f6:d6:c9:ac:59:30:8a:6a:c6:09:bc:ec:08:31:ac:69:b8:
d9:12:ce:8f:fc:8e:42:97:eb:dc:c9:57:c2:d6:62:dd:52:c7:
92:3e:de:06:2e:26:c2:45:d7:ae:c9:44:88:93:86:e6:23:71:
81:52:b5:75:a4:db:ca:e7:5d:df:13:d7:d1:91:39:08:c6:dd:
f3:63:e9:99:1e:fa:67:e5:e3:3a:06:0c:6d:3a:e2:98:c2:1a:
c0:96:e8:af:c6:dd:90:09:7a:b2:3f:f1:f7:d5:80:f4:11:15:
82:64:ea:46:58:ad:f0:64:eb:44:2a:05:4a:e0:49:0d:b2:55:
22:7e:c3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:44:55 2025 by rpki-client