Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/1-feNHEHoxAVzT15DqDBKqpRnimc.roa
File: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (raw, json)
Hash identifier: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=
Subject key identifier: F9:F7:8D:1C:41:E8:C4:05:73:4F:5E:43:A8:30:4A:AA:94:67:8A:67
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019421B1F00A7624770F5B8AD1157EE58B39
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/1-feNHEHoxAVzT15DqDBKqpRnimc.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214628
IP address blocks: 83.141.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f0:0a:76:24:77:0f:5b:8a:d1:15:7e:e5:8b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9f78d1c41e8c405734f5e43a8304aaa94678a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:ad:af:42:67:e5:3a:c2:a4:a0:26:86:49:
95:5c:ab:86:61:30:a1:cc:ba:b8:a6:ff:dc:b0:09:
ca:35:54:5f:33:a5:8d:6b:5a:16:7a:0c:37:d5:37:
28:83:38:e2:dd:b5:ba:33:98:a1:48:88:34:3c:cf:
cf:5c:8f:88:a4:4b:96:31:ff:55:b9:69:46:2c:ac:
1d:5d:8a:39:e9:68:b7:aa:0d:df:90:4f:4f:95:6c:
cd:95:c6:91:b5:6f:b8:af:48:49:88:c7:73:ff:28:
13:6d:ee:eb:b4:3b:1d:4c:02:52:56:4b:80:fa:05:
6c:86:93:43:e9:83:59:45:00:88:4d:80:7c:47:2b:
02:a5:2b:a5:4e:9a:21:ac:a7:9c:df:9e:7f:b6:db:
9f:66:1d:f6:ab:b2:e6:7f:02:84:29:aa:82:a8:91:
55:8a:48:b7:66:66:ed:88:fd:e1:5e:e9:55:32:f2:
9f:7b:d0:ed:e1:3f:47:04:28:d3:e6:a6:ab:ff:63:
ed:2e:f7:15:48:ba:68:f2:dd:81:b1:dd:5a:12:e2:
a6:b8:fe:ff:63:59:21:e1:01:b9:71:e6:20:85:98:
1a:0c:b4:58:5a:38:fc:3a:ec:7f:d7:0c:df:3a:68:
cf:c6:c8:90:d3:0a:86:fb:20:e2:7e:21:ac:68:79:
7d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:8D:1C:41:E8:C4:05:73:4F:5E:43:A8:30:4A:AA:94:67:8A:67
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/1-feNHEHoxAVzT15DqDBKqpRnimc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.141.21.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:4d:68:f4:7e:ef:bb:df:48:10:b4:54:4a:4c:68:e8:2d:5c:
ec:ea:02:20:8c:6c:fb:a3:36:54:c3:c1:0d:fa:d8:61:e6:f1:
42:58:f0:ee:d2:1d:e0:b5:a1:ea:c4:1d:22:c6:27:a2:c1:06:
93:5f:4c:94:8f:f6:80:9f:f0:4e:c6:0c:37:04:fc:01:bc:1c:
49:ef:b8:27:0d:9f:fe:ea:69:19:cd:f6:07:69:1b:63:a8:de:
68:08:39:c7:8e:7d:e8:f8:f6:e9:76:b7:ef:e4:5d:15:6f:05:
10:d6:ff:93:f8:41:5b:10:ea:1c:cf:78:fb:90:c5:ef:a4:d8:
0d:0d:23:96:af:40:c1:30:79:01:e4:2f:11:d4:1f:ab:8e:56:
bb:58:af:79:7e:c7:76:da:5a:7a:19:a2:fc:bd:e4:51:23:c8:
73:9c:3a:34:37:cf:86:2b:e9:38:1a:69:64:6c:fc:76:f9:13:
9a:15:4c:1e:ec:49:d3:26:d7:45:df:02:fa:9a:ad:d2:ca:10:
72:b7:5f:06:13:8f:8a:54:be:d7:eb:f3:17:ff:43:90:b3:df:
38:43:83:7b:9f:da:a4:c5:a4:82:f8:e1:ee:93:47:1a:fb:71:
11:43:7c:85:60:24:9e:a1:3b:bd:b2:2a:fc:c1:e3:dd:95:89:
9d:ec:ff:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:52:17 2025 by rpki-client