Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/ldAiZGhEA6PQQSWSUu13vFbKCqU.roa
File: ldAiZGhEA6PQQSWSUu13vFbKCqU.roa (raw, json)
Hash identifier: sA9s3rJXQHu5BKgisYTJyKuldiob4VBrcuXc+pLot6Y=
Subject key identifier: 95:D0:22:64:68:44:03:A3:D0:41:25:92:52:ED:77:BC:56:CA:0A:A5
Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Certificate serial: 019421438DD62A15365F93442348BD3AA66F
Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/ldAiZGhEA6PQQSWSUu13vFbKCqU.roa
Signing time: Wed 01 Jan 2025 09:47:42 +0000
ROA not before: Wed 01 Jan 2025 09:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198127
IP address blocks: 193.150.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:8d:d6:2a:15:36:5f:93:44:23:48:bd:3a:a6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b
Validity
Not Before: Jan 1 09:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95d02264684403a3d041259252ed77bc56ca0aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:85:e7:c9:d2:aa:73:85:84:8d:c3:75:be:
fa:e7:ed:32:03:4c:56:5c:d2:54:2a:0a:c4:b4:81:
41:b7:4e:24:24:e1:e3:39:b1:e7:cf:12:82:43:21:
0b:b4:36:54:fb:d2:19:c3:48:b8:58:da:58:c4:25:
8b:00:32:f7:5c:68:b5:ca:6d:2c:40:12:48:6d:3b:
e6:4e:7b:24:35:ea:9a:79:d0:9b:32:b0:fc:6c:ee:
07:ab:c9:48:7b:23:38:45:7d:57:b2:78:1e:9d:89:
82:66:5f:b9:ce:a8:14:6e:27:5c:c1:3b:36:b2:9f:
0c:fd:17:5b:a3:0e:ad:74:7d:2d:cc:f0:3f:b3:8d:
0d:af:8e:f6:12:0b:ca:64:56:5f:fb:d3:dc:61:16:
10:9d:06:9b:8d:62:4d:84:c6:45:f1:ba:cb:61:96:
f8:ac:57:29:75:79:cc:f6:a4:e2:56:a0:59:34:3b:
71:6c:32:7e:90:fa:82:43:64:b5:07:32:1b:db:16:
f9:79:1f:a1:fa:31:ba:5c:a0:bc:b1:bf:55:80:9f:
3f:61:72:c4:2c:58:ae:31:ff:83:67:2b:ac:d6:f2:
83:40:b1:50:43:95:c8:3e:2b:ff:19:0b:ce:06:e2:
31:c4:38:64:51:52:8b:58:60:c6:ce:ff:89:08:ca:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D0:22:64:68:44:03:A3:D0:41:25:92:52:ED:77:BC:56:CA:0A:A5
X509v3 Authority Key Identifier:
keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/ldAiZGhEA6PQQSWSUu13vFbKCqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.67.0/24
Signature Algorithm: sha256WithRSAEncryption
86:cf:6a:f1:ce:a8:7a:6a:47:40:f7:8e:8a:a0:b0:28:2c:e9:
d9:c4:00:9d:bd:b1:cf:3a:fc:3e:64:96:77:b3:8a:c5:d1:57:
06:6d:ab:a3:aa:2e:2a:92:f4:af:03:3e:1c:f2:45:ad:89:68:
75:1f:3e:83:3e:3e:80:82:e4:1d:25:86:52:12:c8:ee:52:bb:
f7:cb:61:9e:9b:54:a5:58:e0:5b:d5:ed:e6:c6:ca:93:52:7d:
b6:44:13:da:d9:db:f5:c2:da:1a:af:2c:e0:d8:6e:e9:73:45:
a8:36:6c:e4:da:38:b1:7c:4f:08:2d:3d:e6:eb:bb:d9:e9:49:
e3:8d:53:34:d6:91:74:cd:6b:c8:65:66:e0:6e:58:e4:3a:00:
29:16:d1:eb:0a:0c:74:36:a1:a3:d7:3e:8d:31:ad:e9:19:84:
cc:9b:de:6f:18:d8:5e:15:f7:ee:ae:d8:63:01:d3:9a:e7:3c:
33:d9:97:ab:71:3c:ab:57:04:5e:3f:fb:8d:a6:e5:68:f3:b1:
b7:33:14:62:f1:a6:3b:76:ef:0d:1e:f8:0a:7d:d3:bf:11:06:
d9:49:56:32:f4:1c:2e:34:d6:b3:e4:2f:52:0c:07:1b:de:09:
61:06:65:47:01:71:32:65:1b:9e:36:03:0c:43:a6:fd:05:cf:
78:61:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:43:59 2025 by rpki-client