Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/EN1Levip2YxWtU05lzM8Oxq_nLI.roa
File: EN1Levip2YxWtU05lzM8Oxq_nLI.roa (raw, json)
Hash identifier: puDE3/UvpEy/plTRQ66R42swdASFEazK0Kj21wbGDG0=
Subject key identifier: 10:DD:4B:7A:F8:A9:D9:8C:56:B5:4D:39:97:33:3C:3B:1A:BF:9C:B2
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0194228E384EE2F74B6CAFD2F2FA5A708ECF
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/EN1Levip2YxWtU05lzM8Oxq_nLI.roa
Signing time: Wed 01 Jan 2025 15:48:53 +0000
ROA not before: Wed 01 Jan 2025 15:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142146
IP address blocks: 194.247.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:38:4e:e2:f7:4b:6c:af:d2:f2:fa:5a:70:8e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10dd4b7af8a9d98c56b54d3997333c3b1abf9cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:10:43:fa:26:10:b9:d7:fb:3a:7e:c6:82:
79:16:47:8e:b6:40:96:8e:14:f8:5b:20:af:e1:f6:
2e:23:53:4a:94:67:47:6f:04:f1:68:e1:2a:22:db:
e8:e9:20:13:15:e8:a0:59:de:c0:e4:d9:62:b4:79:
2e:02:65:18:fb:79:44:4f:9a:e6:69:65:8e:9f:fe:
6d:b7:a3:bc:4a:8b:17:2e:87:e4:68:65:5e:c9:ed:
7a:55:a7:88:28:4a:60:e3:ba:de:c1:80:4a:17:90:
ac:ed:5b:25:00:1f:46:80:09:d6:89:96:48:99:ec:
62:e8:a9:b6:e0:d8:c8:5b:cd:25:21:1c:b1:7f:14:
3b:e1:ef:4a:82:d8:42:96:3d:b8:db:ae:40:8e:2d:
48:73:61:94:d4:59:4f:66:57:07:5f:74:a8:00:af:
4d:1c:91:54:1c:84:b7:a2:91:91:40:ed:01:d3:a6:
bd:98:e9:b7:bc:aa:e4:80:0a:51:00:42:fd:22:1b:
86:63:07:d6:cb:99:77:12:fa:86:79:7f:ea:82:51:
08:cb:9a:ae:42:1d:5b:15:48:71:44:2f:6d:f3:c6:
a5:39:a3:0e:5e:61:42:73:71:3f:d3:25:50:f5:ad:
b8:15:59:79:4d:30:e1:72:57:84:61:a1:18:cc:d0:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DD:4B:7A:F8:A9:D9:8C:56:B5:4D:39:97:33:3C:3B:1A:BF:9C:B2
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/EN1Levip2YxWtU05lzM8Oxq_nLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.44.0/24
Signature Algorithm: sha256WithRSAEncryption
11:73:8e:30:d9:7e:ce:ec:a4:ab:f4:d6:40:72:3d:5d:9a:5c:
8b:3c:66:e4:ec:f5:df:a6:b6:e5:a9:16:6b:1c:4e:82:35:7a:
b5:8b:c1:86:86:31:63:54:70:3b:ce:ca:0e:a3:b4:93:83:e9:
18:1f:a9:dc:21:42:8f:e1:c2:8e:05:41:1a:29:96:e3:b6:a7:
2c:a8:ef:cf:c8:cd:7f:13:6e:1d:cc:dd:09:70:58:15:07:b1:
75:56:50:8c:59:9d:5c:4a:81:a2:75:59:b0:7c:ec:e8:49:ba:
88:2d:aa:53:7a:32:a1:7c:12:8f:fd:63:5f:29:76:b5:38:5d:
46:a1:3c:27:b5:d4:43:1d:88:6f:73:1c:96:15:3a:6f:51:bb:
03:41:cd:cb:fa:d1:8f:04:ae:c1:e4:42:87:8a:1d:df:ca:bb:
82:5e:c9:c0:76:e7:7c:42:31:bf:7a:e0:7c:fd:5b:b6:27:42:
6b:c1:63:82:94:5e:ab:08:0b:51:f1:9f:08:dd:4a:f4:29:5b:
6f:b7:50:4c:f3:18:ab:a4:ce:62:ce:11:d9:95:dc:fb:32:83:
d8:62:e6:65:36:5c:d5:18:ef:a1:a6:3d:d0:6d:2d:79:f6:80:
ef:0c:ae:ea:94:60:34:c7:3b:2c:ac:d0:4b:f2:3d:4d:ff:47:
e8:35:13:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:08 2025 by rpki-client