Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/tAP5YUU5DttldDjJZneQqbjMnns.roa
File: tAP5YUU5DttldDjJZneQqbjMnns.roa (raw, json)
Hash identifier: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=
Subject key identifier: B4:03:F9:61:45:39:0E:DB:65:74:38:C9:66:77:90:A9:B8:CC:9E:7B
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 01942827DFEB90953897958A000F829269DF
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/tAP5YUU5DttldDjJZneQqbjMnns.roa
Signing time: Thu 02 Jan 2025 17:54:49 +0000
ROA not before: Thu 02 Jan 2025 17:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41887
IP address blocks: 81.23.230.0/23 maxlen: 23
81.23.230.0/24 maxlen: 24
81.23.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:df:eb:90:95:38:97:95:8a:00:0f:82:92:69:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Jan 2 17:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b403f96145390edb657438c9667790a9b8cc9e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:bc:1d:3a:6e:d4:8b:7c:e4:53:1b:7f:91:
5b:71:70:c0:d3:c8:a2:ef:1b:d4:ad:a7:61:31:36:
98:16:17:f3:9a:76:38:5e:f2:3d:d4:ac:33:2e:13:
69:85:2c:ee:10:51:62:cb:00:d7:76:90:2d:35:63:
de:bd:6a:08:59:b6:b9:f0:76:cc:8d:95:50:b7:da:
cd:5b:86:1c:7d:76:49:7b:f2:90:21:50:58:a1:8a:
5e:49:b7:42:aa:a0:e0:ff:16:0c:d1:dd:55:13:c6:
19:2f:d0:25:d4:5f:96:ec:45:05:83:21:b6:1f:07:
52:d3:74:2e:45:f6:44:e0:05:4e:bc:2a:aa:56:1c:
1a:51:f9:23:47:26:b5:38:fb:be:58:5e:5b:ae:1c:
9e:8d:03:d2:b0:b4:9c:95:05:32:99:11:56:9d:6b:
d1:c2:ae:19:b2:ac:bb:57:42:f7:8f:27:bc:8c:42:
18:ac:31:2a:8e:15:0a:db:d6:88:87:b4:24:db:4e:
cf:47:69:f6:54:4f:38:a5:3e:75:92:40:52:15:11:
94:2c:a5:b6:e4:13:26:21:eb:1d:9c:6c:8e:26:20:
e2:c8:7b:fd:67:2e:d0:dd:5c:c6:af:42:35:6e:30:
d2:1a:70:04:08:f7:63:71:bb:a4:2e:fd:ff:d6:6b:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:03:F9:61:45:39:0E:DB:65:74:38:C9:66:77:90:A9:B8:CC:9E:7B
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/tAP5YUU5DttldDjJZneQqbjMnns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.23.230.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:2a:c6:64:6e:54:f6:a9:86:5e:23:89:ca:46:ee:8f:83:87:
f9:b4:77:fd:e5:e8:97:1d:4d:4d:c7:c1:62:5f:b5:1e:9d:4b:
23:ac:73:5a:98:b0:31:4f:e5:9f:c4:27:98:da:a4:d7:f6:e7:
5f:a8:24:1e:a9:65:80:04:97:d1:61:5e:6f:8d:9e:25:f3:0e:
43:e1:ef:99:58:69:68:c6:16:3c:43:e6:e9:dd:2b:ae:60:e1:
5d:60:1a:17:67:da:8e:69:3c:37:28:8b:b7:a2:fc:34:5e:7a:
03:8d:f4:16:81:c3:d2:b6:a0:fe:f7:80:fb:79:fe:33:a1:25:
db:19:7d:51:49:fd:74:45:1f:b9:c3:37:0e:3d:dc:87:31:e7:
30:23:78:83:0b:2c:02:41:f5:58:63:63:15:e1:db:b7:e7:d9:
48:8a:f2:fc:8f:7e:a9:d1:01:37:ba:53:b3:ff:ae:73:7d:59:
ab:36:8d:b5:32:66:75:7c:f8:ac:9c:93:b3:0a:c1:b5:15:c8:
32:39:fa:ec:b8:ae:b6:4a:bb:b9:87:99:cb:cc:b9:c5:0d:21:
d0:b5:97:17:1c:c3:61:6a:36:2d:9f:76:63:a2:35:fa:96:e6:
0e:5b:45:08:04:dd:c9:c0:6e:99:a9:96:00:77:d8:68:ee:52:
b9:5d:af:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:42:24 2025 by rpki-client