Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/5OwJ7Nx9zd66LR5phaxL178se74.roa
File: 5OwJ7Nx9zd66LR5phaxL178se74.roa (raw, json)
Hash identifier: M1DO1OvN9ivfay+ywMfPxNgMiiNX3g+6vZbPpBB/BE8=
Subject key identifier: E4:EC:09:EC:DC:7D:CD:DE:BA:2D:1E:69:85:AC:4B:D7:BF:2C:7B:BE
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 01948EB13815D4C6B0F57F9FF88EB199AB48
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/5OwJ7Nx9zd66LR5phaxL178se74.roa
Signing time: Wed 22 Jan 2025 15:46:06 +0000
ROA not before: Wed 22 Jan 2025 15:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213537
IP address blocks: 185.160.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:b1:38:15:d4:c6:b0:f5:7f:9f:f8:8e:b1:99:ab:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Jan 22 15:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4ec09ecdc7dcddeba2d1e6985ac4bd7bf2c7bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7b:6f:35:3b:8d:56:29:02:46:09:48:00:7d:
5d:80:ec:05:b1:b6:c1:aa:55:43:31:34:65:eb:aa:
ea:fb:58:36:32:2a:9c:08:d5:f6:f4:4f:c1:3d:6b:
3f:0b:b0:6d:12:59:de:3e:9d:91:34:b5:a8:29:d4:
ab:73:58:de:66:1f:84:95:61:2a:60:25:0e:a6:da:
89:07:fb:6b:4a:de:d9:c2:31:58:5e:25:1d:71:1b:
be:0c:75:cc:de:00:be:67:7e:77:b5:5d:d5:6f:1f:
a2:16:d6:ba:cc:c9:d4:13:21:a0:cc:22:ae:ec:fe:
64:f0:64:0e:43:91:52:78:b5:06:fa:5d:75:6a:33:
f6:4d:58:74:23:08:f6:a7:3f:d0:45:b5:b1:b3:31:
13:44:7d:61:a4:55:ee:1f:37:4e:f2:ee:71:5e:72:
89:b2:c4:81:61:e3:13:68:05:08:f8:45:c7:14:8f:
d8:5f:6e:dd:e3:ab:f7:e6:a8:e5:6a:0f:31:26:55:
c5:3d:54:fa:7c:74:c2:be:f6:e3:9f:e0:91:0d:13:
d3:f5:99:33:81:f4:08:e7:13:a7:c7:9f:0d:8d:03:
81:b4:fd:ba:7a:ec:ce:33:62:4c:d5:0d:d3:cc:11:
0e:3c:61:d5:3e:d7:33:07:84:7c:ae:8b:4b:26:56:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EC:09:EC:DC:7D:CD:DE:BA:2D:1E:69:85:AC:4B:D7:BF:2C:7B:BE
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/5OwJ7Nx9zd66LR5phaxL178se74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9b:c3:11:bd:94:92:2e:72:10:a2:1b:01:72:32:79:39:e0:
6e:da:13:8e:d6:20:5f:81:e8:6d:db:e4:c8:b2:ed:0f:79:89:
46:c5:e8:8a:f5:d5:58:83:a3:e6:fa:1b:a2:79:ff:ff:e4:ef:
f9:e8:18:d2:56:88:b4:8b:fb:a9:a5:6c:2c:3d:77:aa:40:ab:
1c:1b:95:2d:ee:2c:85:a6:b5:96:aa:ba:a7:48:83:9c:68:bf:
10:de:6c:be:c2:de:0e:a8:48:4d:9d:f9:64:a2:28:c8:6e:da:
1e:91:02:e6:a8:31:bb:c1:7d:a4:06:53:1c:63:62:24:dc:9a:
c0:65:78:5a:ae:fd:1a:d8:27:9d:2f:fa:6d:42:75:9c:8d:51:
ce:71:09:f4:0f:3f:d3:e3:f2:84:de:f5:6b:fa:58:fc:ae:ce:
7d:36:a5:9b:e4:81:e3:a9:b3:17:6f:69:74:57:e4:8b:73:b9:
f1:ab:93:f4:08:b1:f5:ee:b8:dd:f8:42:d7:f4:11:b0:6b:7d:
e5:f8:4d:23:ac:45:7e:38:21:7e:42:b0:95:be:f3:fc:34:68:
e3:f5:b9:ac:14:bc:29:41:3a:ba:74:dd:a9:5f:36:31:22:25:
df:06:a4:35:ce:ba:eb:87:e3:bb:75:73:cd:3b:23:a7:14:09:
e0:d7:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:44:53 2025 by rpki-client