Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/g_Ac1qKee1NpuutF8IKP-ANuClg.roa
File: g_Ac1qKee1NpuutF8IKP-ANuClg.roa (raw, json)
Hash identifier: DXjxdUKb/yitoOX37zqD4KPlpT+IacnK/EiGFGcJ7cE=
Subject key identifier: 83:F0:1C:D6:A2:9E:7B:53:69:BA:EB:45:F0:82:8F:F8:03:6E:0A:58
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 0195D6A4A7DB47C8ED0B9C409D8A88401600
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/g_Ac1qKee1NpuutF8IKP-ANuClg.roa
Signing time: Thu 27 Mar 2025 08:07:49 +0000
ROA not before: Thu 27 Mar 2025 08:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 87.229.12.0/24 maxlen: 24
87.229.35.0/24 maxlen: 24
87.229.48.0/24 maxlen: 24
87.229.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d6:a4:a7:db:47:c8:ed:0b:9c:40:9d:8a:88:40:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Mar 27 08:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83f01cd6a29e7b5369baeb45f0828ff8036e0a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d5:2a:b6:9f:55:df:c4:b6:31:6d:17:e7:6d:
09:e6:44:b5:01:94:6e:47:c8:36:31:03:8a:c0:2e:
c0:6c:50:06:be:16:85:14:ac:32:37:81:54:d0:aa:
bf:35:ea:13:81:5f:77:32:d4:07:dd:f4:30:59:c4:
f2:a0:66:d5:c7:9e:0a:b8:5e:66:bc:2a:ba:1b:f6:
75:0c:1b:92:0f:58:a6:5c:64:90:d6:54:b7:28:62:
8f:70:29:a8:63:38:5d:b6:c6:7b:73:ac:a8:5b:e0:
d9:1e:9a:fd:eb:a0:12:32:94:d7:64:b8:d0:f1:ae:
c7:34:16:55:ea:68:78:ea:b4:6d:fd:62:cf:dc:40:
b2:92:c4:12:f7:e7:07:89:69:69:e2:ec:16:19:b0:
d8:fc:f5:37:bc:8c:dc:f0:c1:59:0e:f9:f9:2d:eb:
aa:5e:78:ad:11:ac:f6:38:b1:7a:69:26:07:b0:aa:
4e:df:ba:2f:37:a9:31:e2:74:0c:95:f3:b9:b5:b7:
63:f2:68:27:96:8a:3a:23:4b:89:99:32:c1:73:79:
46:6c:97:32:81:15:3d:d4:cf:b0:7b:be:2b:0e:fb:
e6:27:4b:b9:1d:3a:97:6f:d6:39:e8:33:f3:76:62:
53:ab:44:f2:39:61:d3:a5:9e:1c:3f:43:c7:e7:1c:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F0:1C:D6:A2:9E:7B:53:69:BA:EB:45:F0:82:8F:F8:03:6E:0A:58
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/g_Ac1qKee1NpuutF8IKP-ANuClg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.12.0/24
87.229.35.0/24
87.229.48.0/24
87.229.50.0/24
Signature Algorithm: sha256WithRSAEncryption
99:6c:b9:78:8e:65:6a:2d:cf:8a:e5:cd:f6:4c:e2:95:f0:91:
4e:f3:d2:c3:17:f9:36:89:0b:8f:77:bc:e4:45:39:ae:5b:1f:
0c:cc:83:50:24:da:35:96:43:51:ab:f5:62:93:e7:3a:1a:28:
a9:bb:31:49:37:a7:33:8a:05:7f:c6:b8:2d:7e:f7:ac:7c:e5:
85:a2:b3:9e:2a:d9:2a:e9:e4:2f:4b:16:38:5b:f4:a6:38:b1:
48:d9:f9:8a:69:d3:0c:c4:a4:f2:7e:b4:ff:53:94:4b:78:60:
e8:d0:00:c1:44:9d:54:6c:8a:21:0e:30:7b:59:e6:c0:7c:44:
00:dd:ed:99:a7:84:f4:44:30:58:04:38:92:0c:f9:0a:93:36:
c6:0e:32:3e:7a:ee:74:ae:ed:c2:6f:2e:fb:07:c1:db:90:86:
8f:9a:56:85:b8:12:af:3f:fa:b8:1a:ea:9f:2a:35:bb:13:73:
b8:77:13:d1:a7:71:6f:70:10:90:e3:0f:c2:7f:60:26:b9:5a:
1d:ae:fb:06:3e:cb:9a:03:67:0a:46:44:03:f1:5c:2d:88:65:
c7:5a:17:38:05:2e:af:fe:6b:12:f5:64:77:13:29:51:fe:f5:
1c:1b:65:dd:4f:85:6d:a9:fa:ec:f5:ce:b5:35:71:b0:2f:9e:
0b:09:63:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:18:03 2025 by rpki-client