Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/64rEanXhDA2OJWgNqMgPZ5FM7ec.roa
File: 64rEanXhDA2OJWgNqMgPZ5FM7ec.roa (raw, json)
Hash identifier: 8qJk7sdPmgd5qyBKhZltol3z/GSxNSlFaZ8AUoHL904=
Subject key identifier: EB:8A:C4:6A:75:E1:0C:0D:8E:25:68:0D:A8:C8:0F:67:91:4C:ED:E7
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 019421B1CCAD2BEE444A9508682386E25424
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/64rEanXhDA2OJWgNqMgPZ5FM7ec.roa
Signing time: Wed 01 Jan 2025 11:48:07 +0000
ROA not before: Wed 01 Jan 2025 11:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38930
IP address blocks: 94.75.196.0/24 maxlen: 24
2001:1af8:4410::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cc:ad:2b:ee:44:4a:95:08:68:23:86:e2:54:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb8ac46a75e10c0d8e25680da8c80f67914cede7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:a8:7b:3c:85:56:47:03:f4:dd:c1:69:c1:
45:d1:0a:48:f6:d5:29:36:2e:7a:7f:1c:c7:ce:7d:
b9:d7:20:a0:a0:2d:e7:36:93:ab:2c:33:38:6c:72:
b4:a1:a2:9a:dc:81:a2:20:a0:53:ce:1e:28:e4:46:
91:1e:af:23:ef:82:dd:e0:78:23:84:bd:91:94:92:
9a:5c:f3:21:4e:8c:b9:d8:6e:96:f1:20:05:3c:a5:
7d:c7:8c:06:35:94:45:4b:27:66:d7:ff:08:e3:e4:
8b:49:a7:d9:90:ad:2e:12:bd:fb:96:5c:ec:ae:6a:
4c:4f:aa:b3:75:fe:6e:af:df:68:da:7e:f3:b9:4d:
4d:de:40:fa:a3:a9:28:a6:83:57:b6:bc:ce:3f:e3:
4a:06:09:40:19:6c:24:c8:e4:a2:ac:66:97:41:8f:
73:ed:dc:dd:99:d6:1f:80:d9:ba:24:ac:76:b4:66:
79:a1:6a:f3:db:50:1d:b1:81:1b:4f:8e:2b:2c:04:
51:2a:a9:b5:fc:14:db:2a:48:ed:32:5a:8a:6a:d4:
de:c9:be:22:43:39:11:02:2a:80:8f:81:49:24:3b:
ec:7f:d6:aa:da:51:3d:42:9d:4e:ae:b2:38:28:fa:
bc:ee:11:18:e8:83:14:9d:1f:f8:5a:8b:14:37:1b:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:8A:C4:6A:75:E1:0C:0D:8E:25:68:0D:A8:C8:0F:67:91:4C:ED:E7
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/64rEanXhDA2OJWgNqMgPZ5FM7ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.75.196.0/24
IPv6:
2001:1af8:4410::/48
Signature Algorithm: sha256WithRSAEncryption
17:b8:28:13:a1:99:a7:c5:7b:f0:9d:b0:07:d2:d5:b0:3d:55:
9c:d2:8d:5d:a7:ee:18:cf:c6:10:29:c3:d8:f4:85:ef:3f:fc:
cb:6f:f7:53:b8:58:23:b2:97:f9:b9:30:c0:f9:41:8c:70:c8:
6e:08:6d:5c:c2:d7:25:b8:6e:52:65:db:ce:11:0b:d6:03:fb:
cb:b5:ce:3d:79:e4:98:30:bb:38:a9:26:b9:a1:09:e7:30:91:
12:42:f3:e5:24:75:b3:c6:fa:81:7f:f7:63:32:28:7a:09:d1:
13:84:1e:81:ca:b0:87:0d:1d:04:f4:29:71:d1:43:0a:b9:2e:
1f:69:90:db:76:6b:d4:d5:0f:58:31:e8:61:b3:36:78:64:2c:
e3:9c:9e:39:ed:70:9c:04:b8:dd:3b:63:a2:b7:a3:89:02:ad:
92:bd:7d:d6:b0:c1:ba:dc:bd:dc:af:c6:9d:6d:d9:77:7f:d6:
42:7a:23:b2:af:67:b3:0a:ae:4e:de:2d:9e:da:90:31:61:5b:
2d:c1:57:b7:3a:4b:b3:a6:82:69:a4:cb:ce:17:e2:b0:b1:6e:
cf:0c:69:85:99:4a:6a:16:3d:c9:b1:d5:34:c5:92:72:16:99:
8e:44:c6:b1:da:e6:63:19:d3:60:f2:19:7a:ee:1a:d5:aa:e9:
2d:d4:4c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 14:13:14 2025 by rpki-client