Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4uaxv0aOAPpdms25r3DyZW0Pi9k.roa
File: 4uaxv0aOAPpdms25r3DyZW0Pi9k.roa (raw, json)
Hash identifier: GsIKyFN2OFjgfsnv+oDd5o0voows68XRhVTEszzShfQ=
Subject key identifier: E2:E6:B1:BF:46:8E:00:FA:5D:9A:CD:B9:AF:70:F2:65:6D:0F:8B:D9
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274854F88ACD29E1537D754FD403F47A
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4uaxv0aOAPpdms25r3DyZW0Pi9k.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 272916
IP address blocks: 141.136.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:54:f8:8a:cd:29:e1:53:7d:75:4f:d4:03:f4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2e6b1bf468e00fa5d9acdb9af70f2656d0f8bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:39:3c:f1:6b:40:03:a0:49:cf:65:6d:f2:
d0:7e:83:51:71:d4:a1:55:a8:12:26:d1:75:b3:11:
5a:29:37:b9:f3:d3:bf:61:2b:94:00:b6:a3:70:05:
ec:e8:3e:05:e4:b5:05:64:76:58:9a:01:f1:2d:0c:
de:46:d6:72:8b:e2:32:64:e7:bc:1e:be:48:6f:71:
a6:9a:7c:fe:c2:3f:6a:52:19:94:04:16:75:53:c9:
dd:bf:18:04:a7:44:2f:b8:b5:1b:33:f2:e8:bf:1d:
e9:d3:f6:b5:e9:ac:d0:88:b2:63:11:df:a3:d5:4b:
b2:93:8b:45:73:8f:3c:cc:e9:d8:a7:ef:b4:5a:f1:
15:22:7d:fc:e8:48:65:b5:42:da:84:79:bd:cc:60:
09:dc:fd:cf:77:a4:78:9c:e8:d8:57:5a:df:4e:22:
21:a8:22:05:80:99:91:ea:bf:40:bf:a6:14:76:84:
42:74:23:3a:61:ec:ad:48:c9:51:41:66:0a:02:3b:
e8:45:63:67:fd:ba:3c:50:ab:bc:df:ce:ad:0e:05:
56:3c:52:28:c5:3b:0f:c6:0a:97:04:57:99:d0:0e:
27:69:dd:02:2c:5a:c1:2e:fa:48:a0:00:5c:13:13:
f5:08:6e:89:7f:71:92:7c:6e:ef:4e:96:c9:2d:1d:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E6:B1:BF:46:8E:00:FA:5D:9A:CD:B9:AF:70:F2:65:6D:0F:8B:D9
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/4uaxv0aOAPpdms25r3DyZW0Pi9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:90:35:3d:08:4b:56:0a:b7:62:b1:e7:ef:d5:8f:3e:e7:4e:
36:5e:14:6b:1e:52:7d:bf:d9:c0:f6:51:f3:7d:f2:43:b6:ab:
dd:9b:56:63:d9:93:31:24:6b:c0:b9:b9:a9:b7:00:20:d9:b1:
96:0d:92:6e:dd:7b:08:d8:dd:04:8a:d8:c6:99:97:c3:c8:ed:
be:73:d5:1e:1f:e7:51:21:2c:86:59:93:be:7c:34:61:64:1a:
43:80:32:34:6f:0a:38:71:64:cd:0a:2b:23:ec:93:f5:9f:6f:
5d:75:d4:39:a3:f3:3a:fd:fe:44:a9:25:a3:86:b0:0e:77:c3:
21:ac:b7:a4:a7:b9:f9:4c:8b:13:44:66:24:3b:c2:4c:e4:17:
7e:0d:1d:39:86:eb:b3:68:0a:93:e5:34:9b:69:e2:7b:27:8b:
f9:a2:bc:2b:c7:e7:ec:4c:41:00:ec:61:56:68:0e:98:08:4b:
da:3d:19:c4:6e:6d:0f:4c:4f:e4:50:6d:50:b3:5f:d7:01:67:
0e:0d:4d:71:4d:bd:a9:70:b3:06:82:f5:03:1e:45:90:0b:82:
cc:22:90:b8:f7:38:41:a3:96:a9:78:bf:0f:ec:3c:ae:48:84:
58:9c:28:ec:d5:17:3b:9b:13:b0:71:74:d8:9b:cd:84:b1:4b:
de:35:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:34 2025 by rpki-client