Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/atn5vU-LUDLVuG9_jCJwAEGbEYc.roa
File: atn5vU-LUDLVuG9_jCJwAEGbEYc.roa (raw, json)
Hash identifier: Se1mBbI1MkbJDFobm6H8aQSyPPadkVuTf7O6JGFke8o=
Subject key identifier: 6A:D9:F9:BD:4F:8B:50:32:D5:B8:6F:7F:8C:22:70:00:41:9B:11:87
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 0194221F3761E62FBDE16417B34F948A517A
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/atn5vU-LUDLVuG9_jCJwAEGbEYc.roa
Signing time: Wed 01 Jan 2025 13:47:38 +0000
ROA not before: Wed 01 Jan 2025 13:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140042
IP address blocks: 188.130.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:37:61:e6:2f:bd:e1:64:17:b3:4f:94:8a:51:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: Jan 1 13:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ad9f9bd4f8b5032d5b86f7f8c227000419b1187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5d:85:3b:d9:1b:aa:a6:b8:be:a2:f4:0c:2a:
09:37:03:9c:12:49:a7:8f:0c:1f:20:e1:09:40:c9:
88:d3:44:52:2d:8d:b2:68:1d:00:9c:d0:26:00:d7:
7e:d3:a8:13:8f:47:6e:10:30:d3:0e:e0:2c:73:98:
d5:4b:08:79:4c:05:29:37:9b:f2:f1:bf:e8:15:ad:
cb:5c:99:37:56:39:02:30:15:6f:01:e3:e2:f2:c2:
28:78:a1:db:71:1b:c7:e7:07:65:c5:42:f9:4b:b4:
3f:46:49:18:48:fc:26:ca:b9:9d:34:91:0a:d2:a3:
09:e5:0d:7a:76:0b:7a:fb:60:32:66:ff:d4:d3:46:
0c:19:71:f7:d9:c5:78:91:12:b1:5a:eb:59:05:6d:
7a:e1:be:7b:b7:a9:3f:d0:ef:fd:0e:ac:1f:1e:9c:
b7:86:2a:e0:a3:e1:01:d8:f0:f6:74:63:43:f7:31:
83:dd:99:84:53:9b:9e:96:18:43:4e:d8:5c:6d:29:
fb:7e:10:d7:f2:7b:58:47:ff:65:67:50:c5:76:ef:
c6:b2:f1:69:c3:a7:77:54:b9:21:cb:b8:a2:f8:97:
6c:fb:27:f8:b4:80:87:39:ff:8a:7c:c0:0f:cf:b0:
24:1e:1b:85:f0:37:1c:22:1b:0b:f5:8a:33:13:3a:
df:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D9:F9:BD:4F:8B:50:32:D5:B8:6F:7F:8C:22:70:00:41:9B:11:87
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/atn5vU-LUDLVuG9_jCJwAEGbEYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.231.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:35:0d:b6:08:8b:c8:2b:b6:98:c8:8e:09:fe:e3:94:d4:85:
cf:05:33:f4:92:00:52:9f:69:82:98:4d:9e:78:cc:85:40:ef:
e6:15:70:c2:71:04:90:38:48:95:17:6e:17:c3:24:7d:2c:87:
3b:e2:8d:5b:88:c3:77:71:88:50:f8:74:8a:76:5e:65:a0:f8:
44:f8:7e:a8:ee:4e:62:a4:26:5a:e3:69:d8:58:74:31:98:0a:
28:32:1b:fa:21:a3:2e:4b:65:ff:9e:78:ea:0b:1a:f4:06:1e:
40:45:85:04:2b:d0:a2:4d:21:f7:ae:39:75:91:9e:5b:f5:78:
b8:23:82:c4:c3:5d:1e:f9:28:98:16:0d:b1:5c:85:64:4a:d3:
f5:d7:59:8c:a4:af:6e:9a:c5:9b:8a:44:8d:5b:95:41:2b:b0:
f9:0b:c5:27:cf:ab:5d:fd:f1:45:c3:dc:84:6f:0a:55:7a:28:
4a:fb:5c:0f:5f:d5:02:8e:4e:58:eb:b4:24:f4:44:a9:28:08:
c8:a1:fc:f5:98:ac:2e:dc:60:8a:97:12:5d:08:43:26:9f:f0:
48:ad:12:06:b5:10:74:62:c7:bf:e0:9b:59:d6:de:4e:15:e9:
52:f0:f1:72:b1:fc:f6:f5:b3:de:ae:a1:86:dd:01:7a:4c:7b:
b4:11:dc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:36 2025 by rpki-client