Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/4ugbCy83DcO9TYhxoGqg3xYqKBI.roa
File: 4ugbCy83DcO9TYhxoGqg3xYqKBI.roa (raw, json)
Hash identifier: uW7VWLBw91JN4k11JcZFpOcPQ5HtPfwoG25WkIgbLeQ=
Subject key identifier: E2:E8:1B:0B:2F:37:0D:C3:BD:4D:88:71:A0:6A:A0:DF:16:2A:28:12
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 01942827B34EE8ED7B9587392E3E06D01581
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/4ugbCy83DcO9TYhxoGqg3xYqKBI.roa
Signing time: Thu 02 Jan 2025 17:54:37 +0000
ROA not before: Thu 02 Jan 2025 17:54:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214271
IP address blocks: 195.216.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:b3:4e:e8:ed:7b:95:87:39:2e:3e:06:d0:15:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jan 2 17:54:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2e81b0b2f370dc3bd4d8871a06aa0df162a2812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b0:6c:ae:4e:38:f0:fb:27:64:bc:d5:45:bf:
3d:b1:0a:bb:6d:a8:ca:ee:8d:95:1e:08:ab:e6:c9:
88:50:32:50:e2:69:8c:6b:fc:9c:71:5a:67:5c:4e:
38:4d:bf:05:9e:c3:45:b6:5e:94:2c:24:73:61:a3:
40:00:3b:e9:c5:13:fa:17:fe:23:fb:a7:ab:cb:87:
ff:02:4b:42:56:0d:c2:93:de:53:3d:a2:29:eb:4e:
cd:19:65:ab:f1:59:e9:6f:c9:93:7c:5d:20:4f:26:
0b:ab:00:76:59:a3:97:b1:94:5e:3e:e6:d7:bf:e4:
a8:b4:ff:f0:23:6c:0e:4c:eb:8c:b5:69:ef:e8:b9:
c1:5d:67:e2:02:47:32:27:02:c5:63:69:35:42:e3:
34:15:5b:bd:74:91:88:7d:a6:ce:a6:a8:55:73:21:
12:4f:6c:de:c8:84:78:a5:1e:67:b7:c2:d8:30:be:
d8:3d:ab:97:f9:91:ea:c8:a8:47:57:21:32:73:b9:
b6:05:6c:8c:7b:a9:1a:4d:c9:0e:48:30:d0:3f:b5:
65:49:bd:5a:3e:e2:d9:a9:f8:a8:7a:a0:48:a8:83:
14:12:e2:d5:22:63:08:ec:f8:be:98:c8:8d:5f:c9:
0b:c1:27:69:e2:1d:7b:19:27:8d:11:ab:65:63:00:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E8:1B:0B:2F:37:0D:C3:BD:4D:88:71:A0:6A:A0:DF:16:2A:28:12
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/4ugbCy83DcO9TYhxoGqg3xYqKBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.161.0/24
Signature Algorithm: sha256WithRSAEncryption
77:e8:87:36:4a:a4:32:3a:ce:66:3b:66:74:e2:9a:0f:3d:95:
57:2b:5a:73:60:cc:fb:84:44:3c:ec:08:e0:df:6e:2b:31:51:
58:cc:89:f0:36:9f:86:ad:b5:8c:9d:d7:05:07:35:a4:97:c4:
5b:24:fe:d2:21:6a:71:b7:7d:e1:6c:48:de:f6:0d:c0:5f:93:
5c:3a:20:72:3f:3d:fe:bf:35:42:c4:75:b1:7a:df:01:c7:1f:
ff:e9:e6:a3:8f:04:b6:80:b5:1a:73:60:7f:e7:1e:46:e0:41:
42:71:84:97:92:97:98:94:10:8b:f1:67:58:6a:84:ef:2e:63:
e5:33:6f:9c:68:de:31:69:7e:fc:5a:29:4f:08:6a:17:19:19:
c1:96:a9:c8:e8:de:d5:d2:89:1c:35:8c:c2:0e:79:25:80:2c:
18:de:37:18:e1:c6:46:d3:28:c2:3b:4a:ca:74:fc:29:57:83:
a7:f8:d1:2d:23:ea:b4:17:36:8c:33:b5:3f:a1:b3:4f:82:c9:
c3:89:19:98:2f:f3:80:89:92:7d:3a:b2:bb:d3:b5:45:1d:1f:
4c:51:f9:46:36:31:5d:2c:9d:06:80:37:61:a1:07:d8:48:cd:
da:8b:e1:eb:10:61:8d:38:30:e1:41:65:86:23:b9:48:9f:a7:
2a:c2:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:42:00 2025 by rpki-client