Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ISAlGlp7Yzr04u7b8-0mZNNkcIA.roa
File: ISAlGlp7Yzr04u7b8-0mZNNkcIA.roa (raw, json)
Hash identifier: L20KzrB5jMjo/9t+I886NQGbFB5q4519OaiGQ3sbEBo=
Subject key identifier: 21:20:25:1A:5A:7B:63:3A:F4:E2:EE:DB:F3:ED:26:64:D3:64:70:80
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 01942826B24B54CC3D3C98E66A484DFD935A
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ISAlGlp7Yzr04u7b8-0mZNNkcIA.roa
Signing time: Thu 02 Jan 2025 17:53:32 +0000
ROA not before: Thu 02 Jan 2025 17:53:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47436
IP address blocks: 84.32.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:b2:4b:54:cc:3d:3c:98:e6:6a:48:4d:fd:93:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 2 17:53:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2120251a5a7b633af4e2eedbf3ed2664d3647080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:93:6d:bb:8f:26:73:bb:a0:12:bd:00:ca:
76:7d:71:1a:91:5e:bf:de:b8:1b:f1:1e:1c:93:76:
c7:1a:45:58:3a:93:bf:4e:d5:8d:64:80:30:60:73:
71:4d:51:42:85:ba:63:33:00:34:3d:cb:f3:38:dc:
8d:63:86:a7:86:53:21:8c:99:16:3b:40:11:ad:4f:
c3:68:6c:6b:1a:c0:9a:b0:65:e5:a1:f9:3c:c0:96:
7d:bb:3e:11:6a:1c:93:e9:5d:68:e4:99:21:63:14:
81:61:af:e8:fc:14:7f:e4:d0:77:ec:3c:b6:a6:35:
82:d2:8e:6a:37:a7:87:4c:1a:48:37:7f:12:34:79:
2d:1a:c7:b4:bf:22:fe:8a:17:7b:a5:52:80:98:b5:
af:d0:6b:4a:e9:41:56:9c:f5:6b:ea:8c:ed:9b:4b:
29:67:b4:c6:12:09:6f:03:5f:08:14:82:e7:c0:3e:
f9:60:7b:2b:b8:c1:a3:44:a0:4c:57:46:b5:d1:7c:
ae:75:33:4b:dc:d5:4f:02:b8:48:44:5a:47:dc:55:
dd:c1:e5:9f:32:43:19:d6:75:20:6c:e6:83:ec:1b:
ee:59:04:00:1c:7c:34:85:ec:12:e5:c3:51:e6:ef:
39:59:99:ef:b3:24:25:66:09:12:9b:51:1c:d4:0d:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:20:25:1A:5A:7B:63:3A:F4:E2:EE:DB:F3:ED:26:64:D3:64:70:80
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/ISAlGlp7Yzr04u7b8-0mZNNkcIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f3:af:23:15:38:01:8b:71:fe:9d:87:c1:c3:c4:12:4a:18:
d6:6e:52:3c:b7:bb:49:99:c1:02:53:5a:1e:1a:ba:f6:b8:21:
3f:17:1f:9b:75:09:79:6d:20:49:f8:bb:fe:d9:3b:e7:47:da:
7f:26:61:a1:53:c6:2f:a4:ca:8d:2f:c6:85:ef:26:de:a4:01:
c3:e5:f8:d1:1b:84:69:91:39:f1:cb:05:69:25:87:94:70:1b:
77:30:ce:86:e9:02:62:5f:7a:8f:0c:ae:d2:1d:de:43:a8:42:
27:98:e4:51:74:34:3f:02:b4:c5:16:dd:2a:35:4d:86:e0:c8:
ab:ed:6c:4a:31:2e:1c:2d:d5:95:6c:b6:bf:25:52:dc:a1:63:
cb:e0:70:1d:d5:1f:1a:d5:31:8b:91:6c:6f:4e:b9:5f:fb:79:
2e:fb:1c:f8:e9:fa:9f:b0:fc:d6:b8:8b:ba:25:4e:85:1b:15:
da:f5:3e:33:ea:3d:a1:a1:c3:2b:ec:f9:8e:bb:45:18:4b:3e:
86:93:df:85:20:d3:00:6f:df:18:af:28:8e:22:b1:2f:5f:db:
f6:62:44:54:81:43:e7:62:f9:10:a8:6b:43:9c:1c:07:d9:f7:
1d:0e:12:1e:9d:b5:db:7c:47:d3:b6:7b:5d:d6:a0:ab:1d:85:
14:81:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:32 2025 by rpki-client