Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/41bm5Vqv8ScziyTJq6nI_oCGqAU.roa
File: 41bm5Vqv8ScziyTJq6nI_oCGqAU.roa (raw, json)
Hash identifier: ulc3SJ3YKxDHAbbMzdtCth6xZ27OrwF1taGYFsk+Y2o=
Subject key identifier: E3:56:E6:E5:5A:AF:F1:27:33:8B:24:C9:AB:A9:C8:FE:80:86:A8:05
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194DCDEA7A1A83B5CBD21A6F497FD3523AE
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/41bm5Vqv8ScziyTJq6nI_oCGqAU.roa
Signing time: Thu 06 Feb 2025 20:06:06 +0000
ROA not before: Thu 06 Feb 2025 20:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203758
IP address blocks: 82.153.70.0/24 maxlen: 24
89.213.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:dc:de:a7:a1:a8:3b:5c:bd:21:a6:f4:97:fd:35:23:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 6 20:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e356e6e55aaff127338b24c9aba9c8fe8086a805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:df:a6:6f:5c:74:a4:01:2d:51:f1:ee:2e:
1b:8b:3c:1a:39:60:cf:f1:22:ef:06:37:fc:40:ae:
b2:43:92:c5:84:35:44:95:72:7b:0d:c6:09:00:dc:
26:f8:9f:27:ee:69:7b:14:84:de:95:98:92:06:18:
cc:bd:eb:7f:b8:ef:70:c1:35:61:e4:ca:9a:e8:0f:
26:3b:7e:c8:49:4c:2e:c5:83:56:c9:20:82:6d:f2:
65:2d:6a:1e:36:61:d5:53:08:9c:23:0f:45:6f:8e:
2d:06:ce:0f:50:50:ea:6d:de:53:7f:ce:32:66:06:
32:a8:c0:e3:f7:97:56:77:fe:b8:50:90:09:30:98:
3f:6b:16:21:28:cf:0e:97:45:2c:dd:0d:31:73:82:
e6:73:7a:9f:0f:34:98:32:48:dc:2d:31:6b:7c:09:
45:5f:9a:c1:e5:1e:fb:77:ab:18:35:fe:06:8f:ff:
92:48:19:b6:54:61:ec:1e:fb:1f:65:ae:7f:bc:f5:
ba:b2:17:9c:ae:af:b9:e8:28:48:3c:42:0a:4e:4c:
ef:61:7b:b9:a5:f2:96:d4:fc:bd:67:06:ac:ba:df:
76:8b:6f:23:1e:fa:d9:21:ed:12:71:b6:e6:92:f6:
6c:1e:9e:ff:a0:e7:a8:37:da:f2:8a:64:66:ed:4d:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:56:E6:E5:5A:AF:F1:27:33:8B:24:C9:AB:A9:C8:FE:80:86:A8:05
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/41bm5Vqv8ScziyTJq6nI_oCGqAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.153.70.0/24
89.213.196.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c7:2d:d6:6d:e1:f6:a7:9d:6e:c7:d8:66:81:5b:8a:7f:9c:
6b:f3:9d:2b:c8:77:a3:b2:17:0f:bd:91:e5:9e:c7:a1:01:68:
8f:40:26:db:6a:9b:e6:e2:76:b4:fd:d3:05:cb:05:19:d3:4d:
f1:33:33:0a:ff:f2:78:46:ff:1f:88:59:43:82:bb:69:f3:79:
1c:99:c7:ff:fd:47:7b:c3:7c:a2:42:53:fd:53:f9:31:91:7d:
6a:fa:a9:c5:fc:16:83:08:34:63:53:be:b5:b5:fd:33:e7:d9:
e6:fd:6d:57:2c:99:49:79:02:f3:11:1f:35:cb:a9:7c:28:85:
62:41:40:59:59:f1:0e:45:a6:62:f8:1a:d6:18:8e:5b:9b:34:
fe:e2:10:6e:7a:0d:a6:a4:fe:e4:f4:48:de:f3:e7:11:a5:40:
fc:86:f4:2a:7c:8c:23:72:fa:52:0d:59:50:5b:8c:11:8a:a1:
66:08:17:67:7f:ac:0a:70:1c:8d:d3:69:a7:9e:1b:cb:e4:23:
1e:8b:7d:eb:6d:58:f0:57:8c:f6:62:86:d1:37:f9:87:c0:a9:
80:30:76:2e:45:63:bb:7e:23:da:51:cd:88:8d:17:93:d4:5d:
34:38:9f:f0:93:22:60:6d:96:bb:2e:ed:69:d2:ca:d7:6b:35:
f7:9b:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:19:41 2025 by rpki-client