Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa
File: KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa (raw, json)
Hash identifier: TtnWx5gcstoPtaU3BdfsPkG0EZi+JY/3eJmxv3P7PTM=
Subject key identifier: 28:4A:0C:BB:63:7A:FD:3F:0E:F6:E7:DA:7F:46:36:72:56:75:EA:7F
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 01941FFAB67B771CCEB7B54A7823D7571D94
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 195.66.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b6:7b:77:1c:ce:b7:b5:4a:78:23:d7:57:1d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=284a0cbb637afd3f0ef6e7da7f4636725675ea7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:6e:98:cd:c5:b2:ce:f2:82:26:c5:60:67:
46:ac:4e:a9:60:b9:52:5f:be:5b:13:87:2a:36:8f:
a8:9c:ea:05:5c:a3:d8:7e:db:9b:d2:d1:30:fa:d3:
6f:c4:6b:55:bc:f8:fe:10:8e:57:a8:66:ab:a6:9d:
f6:61:11:d8:39:00:81:c2:5a:7a:1f:78:5d:9c:b9:
66:1b:77:ca:5e:b5:a4:98:87:db:f0:4b:44:6c:27:
52:ba:39:cf:c3:b9:35:96:47:3d:ce:75:a3:4f:e9:
46:23:8a:b1:dd:70:f2:21:bf:e6:42:5e:96:1f:11:
54:2c:64:b3:f2:70:cc:bf:10:45:b0:b1:4e:c9:26:
d8:34:78:09:c7:28:4f:b3:5e:55:b6:fd:c4:78:ae:
66:5a:74:05:c4:4e:c1:aa:b0:25:45:76:28:36:52:
8a:ac:0e:21:fb:b1:f4:86:8b:a0:fa:5f:34:47:dc:
c7:d1:69:8e:f3:78:1a:de:e6:d9:8b:a7:c5:83:e0:
87:83:15:df:37:bf:7e:35:e9:7b:81:05:90:42:42:
f6:27:27:35:81:a7:36:e6:6c:d5:6a:11:cb:4e:f3:
c5:e4:e0:78:dd:18:f5:c9:9e:e0:b9:86:81:b9:44:
67:1e:a1:87:82:d3:a8:b0:bb:2e:25:f8:42:2b:02:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4A:0C:BB:63:7A:FD:3F:0E:F6:E7:DA:7F:46:36:72:56:75:EA:7F
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.74.0/24
Signature Algorithm: sha256WithRSAEncryption
18:58:ca:a0:c8:96:d5:0e:9e:47:dc:09:3a:48:9a:dc:ac:a5:
ba:d2:a1:ca:0a:a3:a7:e0:ad:ee:bc:c9:34:a0:35:d6:52:c6:
ac:21:eb:9b:55:04:52:32:ad:28:3e:91:1c:7c:b0:2a:65:64:
fd:56:06:88:ff:0e:a9:1c:b6:ef:26:51:ab:4d:a1:14:11:e3:
c6:15:37:47:27:cf:ea:05:96:de:e5:43:76:f8:0d:e1:c1:ae:
02:31:7f:92:4a:4a:06:5e:9f:e3:0d:8e:7a:c9:2b:f8:86:a6:
bf:6f:c6:55:7b:6f:cb:55:9a:e6:23:40:52:42:ed:23:d2:a3:
2f:30:34:f6:fe:8a:4e:12:7f:85:53:ca:96:ca:8e:cc:de:e6:
11:f5:a6:f5:ff:b3:b8:90:b0:8f:57:d9:cd:f0:49:a0:9d:37:
1d:99:d0:9a:03:ef:42:36:04:98:f8:0b:77:bf:71:94:57:d6:
92:44:b4:5c:66:e4:59:d1:ce:88:3e:d9:77:40:7e:f8:6f:d7:
79:68:3d:99:03:02:68:29:28:2b:de:87:5b:e9:95:ed:a3:5c:
4f:8d:fe:ce:4b:14:73:1a:c2:5a:57:2f:ae:da:ef:cb:d0:e8:
52:27:dd:20:0b:de:52:3f:56:d1:c8:77:d1:62:01:3a:97:36:
bc:5f:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:36:11 2025 by rpki-client