Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/_oI5hyBnCt55tCVsP54xRvG07cg.roa
File: _oI5hyBnCt55tCVsP54xRvG07cg.roa (raw, json)
Hash identifier: siBfTW9OHIW7tDQ3Efjyi7KuTusgOUvikxuMwP5Dkrs=
Subject key identifier: FE:82:39:87:20:67:0A:DE:79:B4:25:6C:3F:9E:31:46:F1:B4:ED:C8
Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial: 0194282599F4BA13F44A4AD02D1509582D4F
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/_oI5hyBnCt55tCVsP54xRvG07cg.roa
Signing time: Thu 02 Jan 2025 17:52:20 +0000
ROA not before: Thu 02 Jan 2025 17:52:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213220
IP address blocks: 94.199.4.0/24 maxlen: 24
2a13:3d80::/29 maxlen: 29
2a13:3d80::/48 maxlen: 48
2a13:3d80:8000::/33 maxlen: 33
2a13:3d82::/32 maxlen: 32
2a13:3d83::/32 maxlen: 32
2a13:3d84::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:99:f4:ba:13:f4:4a:4a:d0:2d:15:09:58:2d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
Validity
Not Before: Jan 2 17:52:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe82398720670ade79b4256c3f9e3146f1b4edc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:64:cc:07:34:81:f5:5c:33:47:e7:09:0f:ee:
e1:5f:15:9a:f5:5d:43:1b:e7:2f:51:d8:79:48:5f:
79:79:3f:14:96:0a:6a:bd:66:78:76:ac:8d:9f:35:
5a:80:5f:1e:e4:77:dd:ea:49:01:91:f8:67:b8:a6:
7d:92:4f:1c:c5:91:12:c5:97:18:79:6b:21:58:68:
bb:e7:0d:aa:d3:39:f8:64:62:95:b7:0c:48:39:29:
26:0d:41:38:31:96:ab:d7:7e:de:6f:0f:0e:16:b6:
78:b2:18:5d:45:02:54:a2:b5:b5:71:bf:d4:d3:cd:
78:31:3d:88:e0:31:7e:79:f7:e6:c5:9d:5b:71:c0:
fe:1d:80:05:d2:8f:e2:97:37:bb:2e:95:dc:94:b2:
24:62:98:ef:bc:08:71:92:e0:19:86:b1:e8:c3:23:
f2:02:12:84:75:2e:8f:bd:25:64:3e:af:a3:cd:b9:
8f:c7:44:33:3a:74:fb:26:65:a5:ce:39:d7:0a:05:
e7:7d:30:3f:6c:53:9c:6a:8d:a9:d0:7b:ed:39:cc:
62:87:20:2f:94:49:ac:66:7a:b5:23:99:20:1f:e7:
f7:2e:cf:de:12:a2:7c:92:9c:ec:70:90:46:00:79:
b6:97:b3:c7:b2:1c:0c:3e:af:a5:a8:10:5e:e4:ed:
62:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:82:39:87:20:67:0A:DE:79:B4:25:6C:3F:9E:31:46:F1:B4:ED:C8
X509v3 Authority Key Identifier:
keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/_oI5hyBnCt55tCVsP54xRvG07cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.4.0/24
IPv6:
2a13:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
37:9e:d6:03:eb:e3:da:98:3f:f1:76:3f:c3:64:ca:8c:ba:74:
95:3c:56:82:5a:f5:0f:14:0e:88:68:65:d6:95:0a:28:3a:b2:
7c:e3:95:a7:f5:19:a4:86:59:20:31:4c:80:94:c5:9e:5a:f7:
af:a6:e6:30:31:12:99:8d:55:4a:89:b0:c3:c7:72:73:6f:9b:
4b:e8:45:53:5a:2f:2a:43:00:58:a8:6c:dd:9d:d3:3d:f0:4c:
a5:26:5a:7b:46:a3:2c:37:be:c2:17:b2:3e:46:40:30:9a:47:
10:8d:39:75:7a:25:a1:ba:d3:91:66:74:7e:8b:30:9f:80:64:
6f:5b:12:64:97:01:cf:0d:c9:b3:9a:ed:b6:87:a0:63:36:18:
09:21:1d:1c:0a:f9:e4:96:c0:2b:21:4e:04:78:45:03:2d:50:
72:48:bf:56:8d:fc:83:27:e5:c2:47:83:be:b0:90:87:c6:b9:
31:a1:e3:ca:fa:ac:0f:f9:b9:ea:a9:7b:f8:a3:00:01:45:77:
50:d6:68:95:db:36:d6:4a:e3:71:53:a4:86:87:b0:4d:3d:2d:
a3:25:e4:7b:23:74:c5:fd:f0:7d:86:89:9a:0a:62:6f:ae:6c:
3f:5f:33:51:32:58:81:b8:61:4f:bd:ab:95:48:09:56:c2:55:
b3:7b:8f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:28:14 2025 by rpki-client