Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/X76QjYF4g5Fz4FCmSoNd6V50kTA.roa
File: X76QjYF4g5Fz4FCmSoNd6V50kTA.roa (raw, json)
Hash identifier: CHpvo1zzCCL9PYgTZz2mENFCdruZbcqklK3h+qFFqkw=
Subject key identifier: 5F:BE:90:8D:81:78:83:91:73:E0:50:A6:4A:83:5D:E9:5E:74:91:30
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019421B1CF3F36FFAB2C7EAEBA7CFC70E7E8
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/X76QjYF4g5Fz4FCmSoNd6V50kTA.roa
Signing time: Wed 01 Jan 2025 11:48:08 +0000
ROA not before: Wed 01 Jan 2025 11:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49637
IP address blocks: 95.181.146.0/24 maxlen: 24
95.181.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cf:3f:36:ff:ab:2c:7e:ae:ba:7c:fc:70:e7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fbe908d8178839173e050a64a835de95e749130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:bf:b3:9f:4b:ab:be:71:32:07:61:d2:a2:
5d:ad:6b:d4:70:40:49:26:97:c8:b3:cc:ab:bc:47:
08:99:6f:33:19:6b:a9:56:c6:bf:e1:a5:2a:7b:f6:
2c:d0:1d:2f:b3:b8:7d:6e:db:ed:b9:c5:51:b5:02:
8b:72:0b:a4:88:91:71:a8:59:6a:83:bc:1e:e0:fc:
1f:60:6d:f8:2f:2c:ca:46:fc:b5:6b:c1:e6:71:25:
9b:0a:28:e5:71:3d:a1:0b:96:3a:a8:2b:28:e2:56:
64:c1:81:6d:26:b3:1f:85:8b:7e:c6:72:6f:9e:3a:
10:44:12:79:d9:06:e4:53:54:be:33:6b:0d:f4:99:
36:4c:b8:6a:da:9e:54:2e:5c:52:3c:ba:30:12:74:
46:15:9c:7a:ab:a0:03:11:7f:cf:be:4f:46:8d:db:
b3:6f:00:6b:82:eb:bb:94:a3:14:e6:8d:7d:d4:e1:
93:96:9f:af:50:31:7a:4d:5d:be:5f:31:90:ef:3b:
ee:69:ad:86:20:43:62:cd:f5:63:92:36:9f:0d:cd:
33:18:6f:ad:b0:6e:8a:ce:dd:90:ba:4e:2b:f8:32:
f9:b3:04:6d:71:57:4a:57:f9:8c:a8:c9:09:0f:d4:
97:6b:35:90:97:3b:95:62:62:f4:a7:dd:32:cd:90:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BE:90:8D:81:78:83:91:73:E0:50:A6:4A:83:5D:E9:5E:74:91:30
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/X76QjYF4g5Fz4FCmSoNd6V50kTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.146.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:80:ae:93:ee:40:c2:e5:ec:5b:f5:b4:2f:fe:86:69:f9:22:
9d:6c:7e:ce:9a:c1:fb:99:44:12:29:63:fa:24:45:4b:22:4f:
40:f5:f3:a2:d0:3c:9d:0d:69:88:fe:30:4e:e2:4a:37:df:be:
f4:ac:3e:4b:b5:82:a7:81:5b:f9:d1:61:25:a4:48:51:fb:72:
8b:17:f2:2f:ce:80:6c:a7:37:a4:36:c5:02:0a:69:8c:db:5b:
4e:96:b6:0a:c0:d8:33:7d:04:6d:1d:f3:cc:51:91:e8:b5:fd:
35:81:6d:10:47:72:37:af:8f:64:1b:c0:07:08:33:86:bd:87:
e8:6a:63:ab:45:9d:72:ea:86:df:98:8a:d1:a8:c1:5a:c7:d9:
bd:c0:d3:1d:e7:78:b1:43:92:ec:95:ec:0e:43:71:20:b1:d2:
66:8d:d9:29:b5:56:95:fc:50:62:2f:eb:17:0a:10:f4:4c:73:
f3:2d:e0:de:78:da:03:55:22:0f:e8:bb:86:ec:c4:1d:90:fa:
e0:fb:8f:f0:af:60:41:4c:a5:8a:df:1e:d0:25:ac:95:69:5a:
ea:80:27:5a:3e:a8:32:a0:d2:37:4d:c3:5e:5e:dc:85:4b:94:
f4:2d:04:68:1b:13:2d:7c:64:c9:7e:0e:6c:b0:dd:c6:04:ca:
75:b0:35:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsc8/Nv+rLH6uunz8cOfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjUwMTAxMTE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmJlOTA4ZDgxNzg4MzkxNzNlMDUwYTY0YTgzNWRlOTVlNzQ5MTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoue/s59Lq75xMgdh0qJdrWvUcEBJ
JpfIs8yrvEcImW8zGWupVsa/4aUqe/Ys0B0vs7h9btvtucVRtQKLcgukiJFxqFlq
g7we4PwfYG34LyzKRvy1a8HmcSWbCijlcT2hC5Y6qCso4lZkwYFtJrMfhYt+xnJv
njoQRBJ52QbkU1S+M2sN9Jk2TLhq2p5ULlxSPLowEnRGFZx6q6ADEX/Pvk9Gjduz
bwBrguu7lKMU5o191OGTlp+vUDF6TV2+XzGQ7zvuaa2GIENizfVjkjafDc0zGG+t
sG6Kzt2Quk4r+DL5swRtcVdKV/mMqMkJD9SXazWQlzuVYmL0p90yzZAIXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF++kI2BeIORc+BQpkqDXeledJEwMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvWDc2UWpZRjRnNUZ6NEZDbVNvTmQ2VjUwa1RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX7WSMA0G
CSqGSIb3DQEBCwUAA4IBAQC1gK6T7kDC5exb9bQv/oZp+SKdbH7OmsH7mUQSKWP6
JEVLIk9A9fOi0DydDWmI/jBO4ko33770rD5LtYKngVv50WElpEhR+3KLF/IvzoBs
pzekNsUCCmmM21tOlrYKwNgzfQRtHfPMUZHotf01gW0QR3I3r49kG8AHCDOGvYfo
amOrRZ1y6obfmIrRqMFax9m9wNMd53ixQ5LslewOQ3EgsdJmjdkptVaV/FBiL+sX
ChD0THPzLeDeeNoDVSIP6LuG7MQdkPrg+4/wr2BBTKWK3x7QJayVaVrqgCdaPqgy
oNI3TcNeXtyFS5T0LQRoGxMtfGTJfg5ssN3GBMp1sDWq
-----END CERTIFICATE-----
Generated at Tue Apr 15 21:38:14 2025 by rpki-client