Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa
File: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (raw, json)
Hash identifier: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=
Subject key identifier: D5:9F:26:C4:12:7E:E6:61:74:7B:94:04:3C:01:B2:66:90:8A:17:15
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 019428280462A037ED23301E612265FFD20F
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa
Signing time: Thu 02 Jan 2025 17:54:58 +0000
ROA not before: Thu 02 Jan 2025 17:54:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50738
IP address blocks: 95.140.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:04:62:a0:37:ed:23:30:1e:61:22:65:ff:d2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 2 17:54:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d59f26c4127ee661747b94043c01b266908a1715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:b3:30:97:5e:10:77:94:c4:ed:35:ca:ee:
87:c8:14:08:76:6a:de:38:97:83:b0:ef:c7:47:02:
4a:6c:72:bc:3e:4e:34:65:3c:ec:3f:b1:e7:1d:2a:
0d:6f:6c:05:14:ef:0a:04:f8:e8:02:22:06:ea:53:
64:fa:bb:2d:3f:22:f2:e1:6b:8a:c1:44:47:ab:5d:
8b:e1:a5:bb:2d:bc:d4:d5:09:0b:5d:49:f5:21:b2:
b9:67:3f:bc:0f:cf:22:7e:06:0f:86:0f:9b:ad:8c:
f3:75:c2:de:69:6f:8b:7b:e3:53:54:d2:27:bf:b5:
9e:0b:b8:c0:c2:ae:60:84:f7:f7:d2:76:89:2f:42:
87:e0:ac:16:25:0a:58:a8:50:d4:8e:ee:2f:55:53:
ad:05:2a:4a:84:ed:07:2d:22:1d:18:61:50:b6:2d:
a4:6c:70:be:df:18:bb:70:06:04:17:08:90:17:99:
58:1a:81:67:d0:e9:66:16:7c:ca:18:31:65:5e:ff:
13:f7:1f:f9:d8:28:84:97:e1:15:3b:ca:87:0f:63:
c7:09:4b:a8:70:32:d5:9f:e6:ef:09:44:a2:33:cf:
cb:55:58:6d:89:ff:09:22:29:49:67:92:cf:75:d2:
7f:9a:54:b1:f6:4d:ce:20:72:e5:55:ab:8b:24:2b:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:26:C4:12:7E:E6:61:74:7B:94:04:3C:01:B2:66:90:8A:17:15
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.148.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:c6:90:24:5b:16:69:58:3b:3f:68:bb:fe:a2:6e:d9:be:02:
60:7d:af:62:ac:cd:58:b0:d0:1a:af:7c:e5:7c:9b:65:70:e0:
73:37:0a:99:86:da:82:71:d2:21:a6:db:09:db:74:d9:b8:10:
d3:57:b6:12:5c:c7:34:68:e5:50:5f:f5:ff:00:2a:61:83:a9:
59:4a:44:18:8f:a9:f2:20:e6:50:66:c0:20:f6:60:80:35:11:
d2:f3:6e:90:4c:27:6a:1a:70:a9:10:ed:09:a7:21:86:3f:c7:
1e:fb:4d:8e:ef:e4:69:43:45:dc:52:01:30:b7:78:e9:01:78:
e7:f1:38:aa:79:64:e9:55:c5:82:96:57:99:63:44:45:af:74:
a2:dd:bc:1a:b0:61:a8:40:17:8a:86:28:0d:22:3f:13:69:f3:
89:cc:53:b4:4e:a7:3f:37:fd:31:e3:8c:5f:79:04:53:1b:d5:
83:32:43:80:b8:ae:f4:db:13:16:4d:93:45:80:50:e3:3f:b3:
51:7d:f3:ca:e9:e4:43:50:0e:7b:d4:3a:68:4e:2c:d6:bf:7b:
4e:fa:47:b4:71:a7:61:04:5d:fd:01:4e:b7:b0:ac:ed:ab:2d:
1e:d8:11:ae:ab:d8:56:25:b5:7b:e6:ba:a6:ed:07:18:4e:b6:
c4:49:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:14 2025 by rpki-client