Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/iUi7thjoE_NSerMmdG4mBc-A3aQ.roa
File: iUi7thjoE_NSerMmdG4mBc-A3aQ.roa (raw, json)
Hash identifier: XBvqQypf6zmJJtMlo2u++NDcjCA5xpacY+hSBCY97kY=
Subject key identifier: 89:48:BB:B6:18:E8:13:F3:52:7A:B3:26:74:6E:26:05:CF:80:DD:A4
Certificate issuer: /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial: 01942068605A0D31D879F54916AFD95A2319
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/iUi7thjoE_NSerMmdG4mBc-A3aQ.roa
Signing time: Wed 01 Jan 2025 05:48:18 +0000
ROA not before: Wed 01 Jan 2025 05:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 93.95.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 17:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:60:5a:0d:31:d8:79:f5:49:16:af:d9:5a:23:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Validity
Not Before: Jan 1 05:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8948bbb618e813f3527ab326746e2605cf80dda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:2a:4d:b7:22:7c:00:b2:30:88:1e:d8:28:
d8:a0:78:9f:f3:8f:31:06:d8:10:fa:b6:bc:7e:67:
3f:1b:33:0b:29:26:82:e2:75:a1:ea:95:fb:74:24:
76:b9:1f:19:a7:a7:b8:f3:6e:1e:87:a1:04:2e:ce:
f2:3d:d7:89:1b:59:66:c6:5b:29:b9:46:f5:55:77:
68:0d:e6:84:d3:e9:86:a1:7c:a3:6d:32:28:28:b9:
94:5b:82:ec:6d:25:16:6e:fe:e3:89:c6:91:84:e6:
74:60:6e:11:9d:54:18:cd:6b:f7:ce:1c:05:5d:11:
ee:28:a9:63:4f:6e:b7:43:98:08:0c:98:b3:49:14:
53:0c:74:af:57:69:da:6e:4b:a7:92:5b:23:83:dd:
a1:a0:95:22:53:10:b7:0b:82:82:50:71:e8:0c:86:
e6:7e:4d:f6:97:26:f4:14:9c:cd:34:67:81:c0:0f:
66:bd:4d:58:01:46:fa:3c:02:99:50:f7:40:db:ac:
0b:49:90:a4:88:db:d3:99:7d:31:9e:ef:3a:cd:11:
3c:ba:57:1a:c2:23:c2:9d:1c:b4:fc:cb:f5:ea:c6:
99:79:45:84:4a:e0:99:6e:c2:12:7e:2f:89:3b:66:
4a:78:93:df:33:24:21:1b:ce:80:87:95:1a:10:93:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:48:BB:B6:18:E8:13:F3:52:7A:B3:26:74:6E:26:05:CF:80:DD:A4
X509v3 Authority Key Identifier:
keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/iUi7thjoE_NSerMmdG4mBc-A3aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.48.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:6e:52:5d:78:21:98:90:ea:9b:2b:08:2f:6d:87:ee:2b:43:
14:1f:d2:f6:db:96:61:1b:06:d5:57:3a:b9:c8:5a:93:9e:28:
f8:bd:e9:48:73:fa:f8:04:1b:a0:18:a0:1f:d6:67:ef:0e:e7:
51:33:5f:ec:58:39:cf:65:68:09:ca:75:af:21:ae:90:37:15:
d3:8c:8f:b0:a1:b2:3f:57:f4:32:9a:84:68:0a:6a:46:20:7a:
66:29:10:58:15:cf:ad:82:50:45:5f:19:63:4b:77:68:46:a5:
11:cf:72:5f:ef:f0:94:dc:54:68:74:9a:dd:8a:c8:25:23:25:
a4:91:ae:f4:e5:d1:da:78:df:bd:11:63:7a:0d:76:f4:13:5e:
0a:eb:fe:2c:1c:15:49:90:04:db:dd:9e:af:f0:0e:62:cc:72:
40:7f:76:e9:19:05:63:f9:4e:d2:17:0a:5f:7a:5c:a4:0a:c2:
66:6f:3f:33:c7:c7:a2:fe:43:13:95:5f:d7:f3:c2:96:bb:01:
71:85:51:a3:35:6a:4d:2a:48:73:85:d1:5b:76:c3:05:bc:e9:
32:a7:a7:8a:63:64:bb:19:ed:fb:1c:5e:40:1a:c3:e8:50:2c:
5f:32:93:48:aa:f4:2a:95:1e:26:f7:fd:82:24:b4:8a:3b:dd:
a8:ad:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:28:07 2025 by rpki-client