Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/2OeHcKfmsEyG-2LRs0NWXFV5C60.roa
File: 2OeHcKfmsEyG-2LRs0NWXFV5C60.roa (raw, json)
Hash identifier: jZteFmx9inEQsnxXi9EJKFlZraBJ0Xs80P+ZZvDXyxY=
Subject key identifier: D8:E7:87:70:A7:E6:B0:4C:86:FB:62:D1:B3:43:56:5C:55:79:0B:AD
Certificate issuer: /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial: 01942521694787A4272177B3CCDFB0BE144F
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/2OeHcKfmsEyG-2LRs0NWXFV5C60.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12445
IP address blocks: 82.115.160.0/19 maxlen: 19
82.115.176.0/23 maxlen: 23
82.115.176.0/24 maxlen: 24
82.115.188.0/24 maxlen: 24
82.115.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:69:47:87:a4:27:21:77:b3:cc:df:b0:be:14:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8e78770a7e6b04c86fb62d1b343565c55790bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:8c:5e:9f:b2:32:9f:4f:89:42:1c:f8:34:
9f:c1:b6:2f:ff:f4:cb:27:c8:c2:25:ab:8e:17:1a:
11:70:76:38:d9:b5:39:98:1d:58:6e:c8:23:1f:6d:
26:ab:96:9d:7a:e6:9f:15:2d:4d:f2:7b:70:8a:c5:
ea:34:fc:2f:22:78:43:cf:07:ce:04:41:a6:56:31:
ad:f1:8b:06:8a:52:17:65:a0:e4:3b:30:f6:83:3e:
fd:00:de:70:94:b9:ee:58:bc:01:10:37:23:d3:34:
b8:a2:5d:0b:d9:6f:a8:21:c1:47:7e:da:4b:08:e3:
bd:4e:63:05:34:8f:45:a8:77:68:ef:0d:a6:0c:1b:
44:15:6e:6b:4e:9c:db:ca:8a:9f:bd:fa:b2:33:65:
4d:a9:5a:3f:a5:9e:1e:53:8e:4e:87:06:2a:dd:47:
94:c6:d9:53:bb:1f:20:78:b6:fa:f2:22:2d:1d:13:
0e:99:8e:0c:46:2f:c6:56:7d:ba:6d:9d:11:7e:1e:
aa:4b:c1:b7:b7:52:14:3d:d0:2e:f2:fc:c9:cf:c8:
87:90:c1:37:7b:bb:5e:2b:cf:f9:5f:d4:48:bd:4c:
30:8f:91:0f:f0:25:42:53:49:80:95:1a:cc:1f:68:
82:86:38:cd:fe:91:62:7b:1d:49:2e:32:01:fa:e4:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:87:70:A7:E6:B0:4C:86:FB:62:D1:B3:43:56:5C:55:79:0B:AD
X509v3 Authority Key Identifier:
keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/2OeHcKfmsEyG-2LRs0NWXFV5C60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.160.0/19
Signature Algorithm: sha256WithRSAEncryption
11:a3:3c:03:11:11:10:77:be:83:54:8a:98:fc:75:93:1c:f1:
2e:76:e3:ba:c5:45:7b:22:83:d4:31:eb:ed:0b:55:e0:d1:2d:
5e:01:95:48:a4:31:c3:fb:54:46:ba:5b:54:d9:e4:7f:ae:00:
2d:dd:84:ba:ef:0f:e4:ad:24:78:16:50:1a:58:7a:9a:71:af:
b0:4a:c0:71:e1:c4:e4:e2:b3:57:db:4d:94:7c:35:99:37:37:
31:78:bd:9b:20:33:a8:00:33:e8:8f:ca:19:ce:87:f4:35:f2:
5d:e2:9e:7a:56:23:d9:b4:69:b7:35:20:70:34:0d:f6:29:52:
61:af:98:30:e6:7b:d0:58:36:10:67:88:8d:f0:89:6e:5c:aa:
73:d1:3b:22:26:b3:e0:0a:a5:dc:0a:2f:9e:81:42:8f:17:29:
d5:be:a5:03:14:2f:88:a3:0e:62:5a:1f:6f:07:70:d7:47:ae:
52:a8:ec:93:20:ee:c0:b4:e8:33:db:5c:ea:5a:3a:26:a1:ac:
d2:20:36:0b:36:78:06:b7:c3:6f:cb:8d:3d:09:83:cf:16:f8:
21:a1:36:5f:0f:86:41:86:31:98:a8:a2:f0:35:8f:ec:f8:51:
31:42:e9:41:ca:70:cf:7c:73:61:f6:c0:da:3e:94:4a:f5:c9:
14:a1:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:34:24 2025 by rpki-client