Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/4lG6f_Qt9ke663aj3CqWxLBjD4Y.roa
File: 4lG6f_Qt9ke663aj3CqWxLBjD4Y.roa (raw, json)
Hash identifier: Ce0xfqYvAYGmg5KwQIRuXB3GqTBWuYg+7c4t6KVIetg=
Subject key identifier: E2:51:BA:7F:F4:2D:F6:47:BA:EB:76:A3:DC:2A:96:C4:B0:63:0F:86
Certificate issuer: /CN=e5398c96f784781b2edc203c751c4e8798785fa1
Certificate serial: 01942F4F61F6F311AA4B6B206A874B4B164D
Authority key identifier: E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/4lG6f_Qt9ke663aj3CqWxLBjD4Y.roa
Signing time: Sat 04 Jan 2025 03:15:19 +0000
ROA not before: Sat 04 Jan 2025 03:15:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52194
IP address blocks: 193.109.60.0/24 maxlen: 24
194.150.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2f:4f:61:f6:f3:11:aa:4b:6b:20:6a:87:4b:4b:16:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5398c96f784781b2edc203c751c4e8798785fa1
Validity
Not Before: Jan 4 03:15:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e251ba7ff42df647baeb76a3dc2a96c4b0630f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e7:7d:0c:4f:37:66:d0:16:7b:15:f4:83:a8:
f7:cd:5e:12:09:4d:0e:e4:2d:f4:21:33:a0:71:42:
5a:e1:91:51:11:3b:57:b8:b9:63:ba:c7:32:91:5f:
be:00:8d:dc:fd:60:bf:fd:ad:e0:56:af:9d:27:45:
fc:58:fe:ea:4c:7e:14:8e:b2:12:a5:44:24:10:59:
9a:6b:0c:dd:05:a0:f7:80:33:96:d3:84:88:d1:ec:
f6:1b:d7:aa:82:da:50:26:38:43:2d:63:01:99:0d:
74:54:09:e8:76:29:23:44:c6:ae:33:45:a6:12:68:
26:8b:9f:a4:3a:fc:cd:b8:96:b9:9a:2d:de:9f:a1:
9c:e6:43:e0:f7:6b:ae:3e:5e:ae:61:52:38:4c:1d:
ef:8f:2b:cc:6e:92:41:05:44:27:db:e7:38:e0:0f:
68:f4:3d:95:59:0b:34:41:39:92:39:fd:50:c8:4f:
2f:0a:0f:74:c8:64:40:5c:cd:29:0e:cf:c4:be:06:
52:e0:46:d8:32:7a:ff:8d:27:07:11:6c:38:25:5a:
a9:cd:7d:da:ff:1a:dc:04:b3:9c:e2:a0:22:f1:ef:
72:c6:85:e2:41:f4:e0:29:af:56:83:c2:c1:1c:7b:
aa:7a:24:ec:b6:23:6e:f5:ed:7b:48:62:13:12:1d:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:51:BA:7F:F4:2D:F6:47:BA:EB:76:A3:DC:2A:96:C4:B0:63:0F:86
X509v3 Authority Key Identifier:
keyid:E5:39:8C:96:F7:84:78:1B:2E:DC:20:3C:75:1C:4E:87:98:78:5F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TmMlveEeBsu3CA8dRxOh5h4X6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/4lG6f_Qt9ke663aj3CqWxLBjD4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/9f54b5-a39a-4e60-8b1c-d1e460518483/1/5TmMlveEeBsu3CA8dRxOh5h4X6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.60.0/24
194.150.222.0/23
Signature Algorithm: sha256WithRSAEncryption
90:0a:72:cb:77:63:28:8f:4c:04:4b:ba:97:23:f5:3f:c5:8b:
d4:10:4c:84:c5:71:17:44:f1:29:8b:5c:cd:aa:82:39:7f:bf:
e0:02:84:3f:6d:8e:ee:ba:e4:5c:52:61:65:0b:f2:20:a7:a8:
4c:c5:1f:e5:05:22:83:54:60:13:fd:43:ce:f0:d7:c7:3a:f4:
62:e9:42:ba:3d:35:6b:e8:3f:f6:a6:46:d2:3a:cb:70:77:7f:
68:c6:84:63:eb:2a:d9:a0:ef:b2:61:88:bc:8f:d4:3d:ce:c8:
80:0d:e9:70:28:35:d1:66:29:99:eb:66:3e:18:9a:06:f8:8e:
96:91:2f:30:3c:d4:f1:6f:95:e7:d5:42:1a:e9:f8:ef:cc:42:
4b:e5:1d:03:70:de:2a:4f:8f:0a:55:e9:f8:dd:29:8f:95:d3:
f1:7e:eb:83:ca:cf:98:97:50:d9:b1:e3:6a:74:f6:19:e7:4a:
01:e0:0a:87:14:80:cb:59:13:f0:51:ee:9e:ef:62:02:1e:42:
c6:18:fa:63:ef:c2:5c:92:a9:d0:16:0f:9c:db:81:d7:04:86:
58:04:0e:8e:e2:36:69:76:80:3c:2a:b1:e1:f0:44:73:dd:a5:
31:6b:b4:7b:a0:9a:70:62:93:c3:f3:3f:d4:f7:7d:42:ef:cd:
ab:c5:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:27 2025 by rpki-client