Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/4sP42GCgs2AI1q38BZqUFNnf0sg.roa
File: 4sP42GCgs2AI1q38BZqUFNnf0sg.roa (raw, json)
Hash identifier: CknajvS4pn5bWEXVquILmPoBaxykd3UlHu3TAMkqiiw=
Subject key identifier: E2:C3:F8:D8:60:A0:B3:60:08:D6:AD:FC:05:9A:94:14:D9:DF:D2:C8
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 019421B2466DDE1BE0A77F4965D53E254C3D
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/4sP42GCgs2AI1q38BZqUFNnf0sg.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15683
IP address blocks: 78.27.128.0/18 maxlen: 24
91.196.192.0/22 maxlen: 24
91.200.248.0/22 maxlen: 24
91.203.48.0/22 maxlen: 24
94.45.32.0/19 maxlen: 24
193.222.140.0/24 maxlen: 24
193.243.152.0/23 maxlen: 24
2a01:6d80:2000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:46:6d:de:1b:e0:a7:7f:49:65:d5:3e:25:4c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2c3f8d860a0b36008d6adfc059a9414d9dfd2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:60:25:3d:3d:d5:66:1a:9c:41:1f:b7:30:
16:a0:52:d8:d4:fa:ff:16:3b:9b:d7:04:04:3d:2a:
00:cb:d4:9a:00:b7:f2:4a:5b:81:19:22:72:84:21:
a6:65:9e:bb:89:f5:4e:a7:37:82:e8:6f:b2:b8:8b:
e7:40:f7:64:0b:3a:74:a6:65:98:6e:1e:d6:ab:ab:
63:b9:51:8c:40:d6:40:3e:5a:aa:33:38:f2:cd:17:
48:35:85:ab:02:f4:d2:cb:b5:45:18:95:e7:3c:7b:
1f:75:8e:b7:1e:ed:3c:65:ed:78:ab:26:90:84:c0:
c7:5d:9b:42:10:4e:aa:b1:87:71:11:3f:6d:0b:5e:
a5:74:44:c3:00:ef:12:1d:84:c5:8f:89:11:52:05:
93:76:ee:ac:96:c3:56:9b:d7:97:59:8e:f0:42:f5:
ed:4b:71:a0:38:4f:bb:78:0c:d1:5e:bc:95:5c:49:
cb:08:02:ce:2f:87:80:e5:a6:04:3e:e7:06:d9:a0:
0e:1b:66:9a:4f:6f:16:d1:a4:86:53:fb:a7:df:5d:
58:f6:60:1a:b9:e3:ff:85:2f:26:f6:9f:d8:c1:f9:
33:43:75:bb:42:f3:f6:06:54:91:10:19:bb:d9:8a:
74:e7:f6:1d:e5:a6:90:cd:d9:61:3c:83:12:29:6b:
0e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C3:F8:D8:60:A0:B3:60:08:D6:AD:FC:05:9A:94:14:D9:DF:D2:C8
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/4sP42GCgs2AI1q38BZqUFNnf0sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.27.128.0/18
91.196.192.0/22
91.200.248.0/22
91.203.48.0/22
94.45.32.0/19
193.222.140.0/24
193.243.152.0/23
IPv6:
2a01:6d80:2000::/36
Signature Algorithm: sha256WithRSAEncryption
74:22:ca:cc:93:4c:75:90:a3:7d:bb:5b:af:f4:00:98:e1:65:
c5:e6:64:77:bd:eb:2b:12:da:be:df:d2:6b:0c:73:67:54:98:
80:41:8d:88:dc:fa:6f:94:48:34:3f:c8:6e:9b:4b:89:a1:74:
c8:1b:8d:ec:9e:cf:a9:09:e3:cf:24:52:e8:03:5b:6e:2f:c6:
9b:0c:ae:3e:10:a3:81:45:b8:27:e9:f9:ea:55:3f:8c:58:cb:
fb:d0:25:ff:02:e7:c8:cb:01:ff:bc:c5:bd:41:73:c3:24:e1:
d5:7d:25:71:2a:37:ba:59:9b:c9:2e:db:20:14:fc:6f:da:5b:
c1:33:de:41:cb:24:c9:ff:79:d3:1e:76:5d:63:d3:25:00:d6:
81:f7:51:8b:bc:fb:a5:54:33:70:52:52:40:03:a1:54:cb:b8:
69:2f:5e:8c:07:d5:0e:b8:7a:4f:17:38:3e:01:53:5d:a8:bd:
e4:63:46:36:6c:05:58:2e:43:3b:8e:95:77:95:be:1f:65:a1:
be:0f:01:c1:59:e0:94:b9:40:25:df:7e:58:13:cd:63:4c:ad:
85:cf:f6:00:c2:4b:3f:f5:3d:a7:46:9a:49:03:9e:99:19:18:
2c:f9:bb:1e:e6:70:6c:da:5a:66:09:c2:88:e7:56:13:1b:14:
9a:ba:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:08 2025 by rpki-client