Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c1OCtQ983rmKLrPWLDhn4fy3Vi0.roa
File: c1OCtQ983rmKLrPWLDhn4fy3Vi0.roa (raw, json)
Hash identifier: TuK8DorRsOAvGkCgdvtX3vKAd4fSIBN1+1LXiS6KCH8=
Subject key identifier: 73:53:82:B5:0F:7C:DE:B9:8A:2E:B3:D6:2C:38:67:E1:FC:B7:56:2D
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01942144110A5F3B601F7ACE148CA0FDCF74
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c1OCtQ983rmKLrPWLDhn4fy3Vi0.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211091
IP address blocks: 82.163.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:11:0a:5f:3b:60:1f:7a:ce:14:8c:a0:fd:cf:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=735382b50f7cdeb98a2eb3d62c3867e1fcb7562d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5c:ed:18:04:98:e8:9b:83:5e:cd:2f:35:84:
98:50:e9:b7:73:d9:62:0f:3e:3a:4f:44:2a:e6:65:
a5:bb:f7:6e:ff:5d:ac:d5:96:20:d7:b3:f0:b0:45:
0d:22:3c:b0:f3:22:b0:f3:10:bd:5d:3c:04:fc:92:
7d:74:0b:89:3b:e5:0b:a9:38:07:8e:de:6c:b8:bc:
1e:31:35:9d:ce:ed:c7:f9:d1:cf:f4:dc:5d:6c:70:
82:27:89:da:8a:14:2b:28:f3:bf:8f:3e:9e:41:31:
33:59:74:2c:00:c2:75:8c:4c:69:6b:cd:27:eb:18:
bd:e2:e3:e9:b1:8f:0c:7c:3b:45:93:f6:a4:55:2f:
a5:7a:2f:93:ca:53:fb:d3:ab:9c:ae:ae:13:ae:04:
4b:15:c1:77:4a:d7:8e:a8:49:e4:63:a5:7a:9c:96:
ee:13:96:34:4d:65:fe:4b:c3:d6:11:9a:74:c9:fb:
f9:3f:90:da:fe:a6:1e:6e:ee:2f:9f:71:19:8f:6f:
90:7f:13:d7:30:50:69:9d:7c:88:4a:30:f3:24:6f:
a5:bf:fc:91:c4:06:d0:a7:1c:a5:42:d4:23:35:17:
36:ac:39:0f:7d:94:45:c2:c1:bd:1a:c3:d6:c5:48:
86:56:b3:06:99:dc:5a:8b:43:3d:98:5c:34:41:c1:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:53:82:B5:0F:7C:DE:B9:8A:2E:B3:D6:2C:38:67:E1:FC:B7:56:2D
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/c1OCtQ983rmKLrPWLDhn4fy3Vi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.163.21.0/24
Signature Algorithm: sha256WithRSAEncryption
14:cd:69:cc:03:af:f4:ef:f3:85:05:f7:34:a7:11:13:c3:43:
eb:0f:8a:c2:14:e8:16:af:ce:db:d7:9f:1b:f5:e3:57:af:c3:
c7:f8:ad:c6:4d:82:ec:f1:d8:42:99:4e:e3:1f:87:a8:e4:03:
c8:c0:6e:13:c7:ac:93:53:80:3d:1d:34:7e:ee:6f:06:14:91:
f9:47:92:4b:03:8d:92:d5:75:8d:71:0c:e5:53:78:6b:5a:47:
8a:07:49:91:a1:c3:e2:d4:ab:11:c6:ac:27:b3:d0:81:a4:4f:
f9:26:7b:aa:de:05:dc:76:8c:69:ee:14:fb:2b:cc:c3:f1:ba:
4a:d6:5e:b7:b0:70:bd:55:f8:b8:f7:f6:53:f3:d6:2e:30:2f:
59:6c:47:05:94:5e:ca:17:3c:a6:30:d8:c1:29:52:7e:8b:6c:
c8:d5:13:40:f1:14:8d:55:f6:41:82:03:23:2a:64:9d:be:9d:
88:89:97:0f:e2:2a:7d:cc:68:de:e4:0f:f5:72:94:50:c7:cc:
02:9b:97:f2:ce:00:ae:5c:17:2e:ad:25:28:a8:f4:b8:32:06:
f8:32:4a:f3:25:fe:e5:27:53:22:9f:f6:e6:45:cc:5f:6a:ee:
08:fc:b3:75:de:c1:06:16:90:7e:77:eb:7f:c9:0d:bc:a8:d3:
42:c8:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:41:06 2025 by rpki-client