Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa
File: E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa (raw, json)
Hash identifier: 0UXW9577f81NC0CmIqC0W/KDB1+9xji40a5s/Ktdi/g=
Subject key identifier: 13:C2:01:69:9A:55:54:F5:53:4F:7B:DC:65:DC:2C:65:E1:F0:3C:6E
Certificate issuer: /CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Certificate serial: 0194B78E436352348BB9DE2092E6B8A1E123
Authority key identifier: 6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa
Signing time: Thu 30 Jan 2025 14:12:21 +0000
ROA not before: Thu 30 Jan 2025 14:12:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196622
IP address blocks: 195.182.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:8e:43:63:52:34:8b:b9:de:20:92:e6:b8:a1:e1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8137875daffe018fa38ad43cc68a1fab335ef8
Validity
Not Before: Jan 30 14:12:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13c201699a5554f5534f7bdc65dc2c65e1f03c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:16:af:9b:b5:3c:3f:55:35:0b:c5:da:5b:d4:
87:7e:7c:cc:4b:81:8d:7a:65:3a:a1:fe:ec:7d:af:
c9:83:7f:01:da:23:13:a3:7e:d8:46:bb:bc:8a:7a:
cb:5c:9e:ac:5e:e2:cb:df:33:28:c5:13:78:9e:cb:
af:24:8b:67:39:cd:48:d2:d7:44:16:27:56:be:a8:
a4:0e:7c:35:f8:f9:78:23:0e:3e:b4:1f:e4:91:66:
bb:06:ec:44:31:a0:95:de:bb:b7:35:3c:df:9c:91:
b9:42:7a:4d:05:bf:62:67:cc:ba:17:93:03:30:94:
dd:06:f8:a4:8b:98:c1:89:f6:ef:53:01:95:39:0f:
22:ea:0f:49:e0:7e:5b:e6:9b:28:9d:fa:60:7a:29:
8e:87:45:9f:91:c5:5e:51:ae:2f:26:c1:f6:58:8c:
7d:ff:8b:aa:be:ac:fc:50:0a:af:ce:94:d8:e5:d4:
da:4b:ea:db:9e:5f:04:06:f2:35:b7:ae:f8:e0:dc:
cc:9a:22:d1:ff:fd:dc:5d:9b:d9:3c:cc:59:27:2c:
09:14:84:c8:5f:cc:fa:5a:a3:cc:96:3d:21:2e:31:
87:26:73:56:b3:3b:58:55:0d:f1:c3:61:36:c1:dc:
b4:31:f6:7c:01:d9:99:ad:a0:f1:d7:76:76:83:2d:
63:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C2:01:69:9A:55:54:F5:53:4F:7B:DC:65:DC:2C:65:E1:F0:3C:6E
X509v3 Authority Key Identifier:
keyid:6F:81:37:87:5D:AF:FE:01:8F:A3:8A:D4:3C:C6:8A:1F:AB:33:5E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4E3h12v_gGPo4rUPMaKH6szXvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/E8IBaZpVVPVTT3vcZdwsZeHwPG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1ebf55-e7a4-4026-9a22-8889ef131d89/1/b4E3h12v_gGPo4rUPMaKH6szXvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.46.0/24
Signature Algorithm: sha256WithRSAEncryption
28:89:cf:93:ed:f9:a6:fc:88:7b:46:85:7a:93:65:97:43:25:
fa:c7:5b:d8:ab:3d:2b:93:d0:86:8f:06:a8:3c:be:f2:60:a3:
a8:69:9e:ea:52:0f:6f:62:4b:90:6d:fa:55:36:e7:85:df:54:
ee:ae:f9:48:a2:08:f5:dd:51:f9:ab:c0:dc:7a:55:be:d9:ac:
f1:33:77:e5:db:a1:45:1d:2a:88:4d:00:9c:3c:80:ac:2e:c7:
d8:48:0f:e4:78:6a:50:08:14:d1:f5:60:53:26:d0:90:3c:21:
8f:03:ea:38:0d:56:20:11:6b:13:75:59:67:74:90:63:49:cc:
d8:12:b1:0c:68:5e:06:57:40:22:0b:07:54:04:b7:7b:b4:9f:
5e:6a:41:49:24:cd:ca:04:54:54:02:97:55:c5:0e:ef:c7:0f:
94:05:53:61:5b:24:12:82:60:1e:8a:aa:a0:56:68:33:6b:4c:
1a:e4:c7:6d:50:50:2d:13:88:c0:f2:9d:79:02:3f:97:9b:8b:
61:50:d9:c1:9c:38:4b:3d:3c:b7:77:a2:16:43:7b:1c:88:3c:
78:0b:ae:9e:e7:53:d3:f0:4e:29:10:38:ec:94:bf:4a:10:f8:
8d:23:2f:9d:0c:be:44:db:fd:57:f9:e0:30:3d:e6:98:0a:d9:
d7:ec:90:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:50:27 2025 by rpki-client