Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/buRieXRwJ5dUKENEeDp5Pi8762g.roa
File: buRieXRwJ5dUKENEeDp5Pi8762g.roa (raw, json)
Hash identifier: G+l9vHYe+eYSUKIqburJjsTM/A/ap2sNAgbNLcCY2V0=
Subject key identifier: 6E:E4:62:79:74:70:27:97:54:28:43:44:78:3A:79:3E:2F:3B:EB:68
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194259007590885871D71610FF46596F4A8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/buRieXRwJ5dUKENEeDp5Pi8762g.roa
Signing time: Thu 02 Jan 2025 05:49:43 +0000
ROA not before: Thu 02 Jan 2025 05:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210390
IP address blocks: 95.46.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:07:59:08:85:87:1d:71:61:0f:f4:65:96:f4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee462797470279754284344783a793e2f3beb68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:38:70:53:be:b9:04:be:bd:48:e9:62:46:
8b:e9:36:fb:20:1d:60:df:e4:bc:b9:f5:2c:2f:14:
6e:30:45:b5:d9:74:fc:ae:b7:64:e6:fd:22:93:83:
c0:81:77:ae:5f:8b:c1:31:79:c8:66:79:fd:1f:b8:
48:cb:b2:9b:5a:76:b8:be:aa:a5:7c:c4:d6:c4:c1:
e8:e9:63:e2:d8:cb:b3:25:08:ac:b9:f1:8e:6d:18:
15:fe:2e:d5:01:bc:19:5a:d1:d5:fc:90:25:9e:c9:
8a:5b:a9:8c:0e:ed:a9:9c:1b:38:c2:6f:08:90:44:
d2:b2:be:e0:31:33:44:98:b1:36:70:e0:45:43:cb:
f5:fa:8e:13:a1:70:14:f7:eb:4f:70:3d:78:5b:ef:
73:d7:d1:52:e2:ea:e9:45:97:d2:71:d1:16:20:b2:
39:be:91:e1:55:25:fd:ec:b0:09:02:00:8a:90:9b:
5d:3d:90:46:a3:06:7d:ac:e6:7c:9b:07:e6:a6:03:
7b:08:15:f0:93:40:a7:9f:ab:01:54:38:f3:cd:3a:
b3:d6:e7:a3:5e:42:57:2a:40:9b:7a:78:6b:c5:18:
ef:4e:c4:d2:d1:65:3f:43:b2:79:e8:0a:16:8e:90:
1b:3e:66:ca:7f:89:e8:b6:47:88:e4:88:ac:7f:27:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E4:62:79:74:70:27:97:54:28:43:44:78:3A:79:3E:2F:3B:EB:68
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/buRieXRwJ5dUKENEeDp5Pi8762g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8a:95:6d:d6:5b:32:a2:d1:94:70:a4:8a:01:1f:40:6c:6d:
ba:06:57:ec:f6:76:59:ce:a9:51:92:49:fd:15:ce:64:f4:00:
82:ea:0e:c8:59:fd:43:04:5b:c0:aa:50:15:02:25:b0:b3:83:
48:80:f7:ba:80:4a:a7:55:85:e2:ce:29:e7:5c:44:d5:a6:ff:
06:ef:72:fb:17:c2:a1:5c:77:4a:7d:e6:48:1b:da:1e:01:a5:
99:2f:46:48:3f:98:e4:61:f3:d7:e8:bf:00:76:a4:1f:88:85:
b0:0f:41:03:4c:cf:75:f0:b3:b0:31:5b:6e:10:27:bc:e6:1e:
31:51:60:18:7f:02:d7:66:27:f2:83:d0:ff:d9:c8:cc:26:7a:
2b:9c:fc:ae:32:96:2e:11:e2:61:07:16:e5:22:fe:b4:cf:02:
d4:be:9a:d7:40:93:e0:81:8f:69:a1:bf:20:19:18:f6:54:c6:
90:1e:89:f5:4f:2e:3e:30:90:1a:e7:2d:ea:f7:70:21:c4:b4:
a9:42:05:40:df:88:e2:3d:1a:1a:d5:8e:38:9f:8f:42:d4:9b:
22:f7:19:8d:64:90:81:58:93:85:27:b2:e4:2c:05:b4:84:81:
ec:bb:56:1d:30:36:14:cd:89:f4:63:db:ef:fe:00:6c:ec:b3:
c3:ed:c5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:37 2025 by rpki-client