Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/f4TxDXFDlDjZ9z2Vv77Z1myRBk4.roa
File: f4TxDXFDlDjZ9z2Vv77Z1myRBk4.roa (raw, json)
Hash identifier: 2GF/hcmuZptIjGpBhlhl/n2eM7lvmTB8GpajvQTfO1o=
Subject key identifier: 7F:84:F1:0D:71:43:94:38:D9:F7:3D:95:BF:BE:D9:D6:6C:91:06:4E
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 019421B1DF3E3A5F6EBFB2AF6004096B731C
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/f4TxDXFDlDjZ9z2Vv77Z1myRBk4.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209455
IP address blocks: 195.228.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:df:3e:3a:5f:6e:bf:b2:af:60:04:09:6b:73:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f84f10d71439438d9f73d95bfbed9d66c91064e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:fd:c2:6f:fa:4f:28:4e:fe:57:07:34:d4:
cd:88:35:81:17:6e:f3:63:52:ff:1c:52:af:54:8c:
61:7b:04:36:36:64:98:ed:c0:93:39:0b:02:2d:13:
b9:e7:e6:15:81:8c:46:cd:91:d3:84:8c:4e:97:88:
fd:e8:f6:f9:76:ad:e8:fa:94:a1:76:c8:1a:1a:cd:
e1:cf:5f:b8:a9:2e:db:a9:35:73:62:c7:f1:a6:a3:
86:f3:a8:25:df:10:58:12:a1:22:dd:ab:e6:c9:d9:
f0:b9:05:61:19:25:15:60:83:a6:89:21:67:7e:65:
48:2c:5b:66:08:f7:82:99:44:58:63:39:7f:e4:63:
9c:3b:5a:a0:86:22:c8:f5:e8:12:1a:d4:da:11:0a:
59:c9:46:60:10:0d:bb:ef:ca:69:59:5d:13:e6:4c:
3c:7e:34:7c:1c:11:54:15:ac:0c:13:ed:d9:ee:f5:
26:19:83:43:99:c1:9b:f5:ea:f9:63:9f:87:2e:a3:
82:c8:69:ac:4b:f1:9b:5b:7e:3e:40:4d:28:ba:4f:
08:02:82:c3:bd:2a:07:0e:23:75:14:c1:58:ee:5e:
0e:04:1b:d2:ff:67:b9:69:fc:37:0e:e9:92:3c:2c:
92:ac:05:39:3e:d3:de:75:77:73:4c:98:57:35:ce:
87:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:84:F1:0D:71:43:94:38:D9:F7:3D:95:BF:BE:D9:D6:6C:91:06:4E
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/f4TxDXFDlDjZ9z2Vv77Z1myRBk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.228.58.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a6:e7:03:cd:ce:87:7a:8c:4e:ee:7a:bc:e2:58:ee:65:ec:
8b:48:2c:d1:be:72:94:7c:e7:61:ae:76:dc:da:41:2d:78:e9:
e8:b2:fe:b2:49:41:dd:b5:8e:ec:12:b2:5d:65:36:46:10:f7:
0c:3f:f1:6c:b0:c4:20:48:ab:9d:6e:37:21:78:e0:ae:f2:98:
30:b9:cf:07:39:11:6d:c9:4e:1d:9a:bc:01:50:46:26:8a:b3:
ee:80:6a:0d:cb:fb:44:0d:57:44:9d:13:9c:b9:65:57:3c:01:
06:b3:4a:8a:b1:6a:4c:9f:e1:0e:44:a0:ab:4f:1d:d0:83:71:
aa:52:ab:fb:b0:a2:56:5f:7f:d9:88:30:7d:54:1d:dd:0f:6d:
dc:80:eb:7d:8f:a2:bd:7c:80:e9:c2:2e:41:ea:42:bc:6e:0c:
41:f1:ee:d5:18:a2:cd:9a:9b:48:23:8c:b0:e4:e4:92:33:6f:
e7:2a:13:0b:38:34:29:73:85:c7:af:db:49:7d:69:9e:56:a9:
10:ca:2c:ca:dc:98:63:c9:f2:d7:80:25:3a:3f:8c:be:1e:e6:
a5:00:90:70:b2:f2:0e:37:c9:1e:64:7f:67:1c:9f:ea:6e:fb:
b1:14:6d:8b:7d:8c:cc:2c:99:e4:a0:79:a0:8c:62:34:3a:0a:
3e:93:83:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:44:15 2025 by rpki-client