Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/d4RsxxDF2qky1rlWD_iJofCuhN0.roa
File: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (raw, json)
Hash identifier: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=
Subject key identifier: 77:84:6C:C7:10:C5:DA:A9:32:D6:B9:56:0F:F8:89:A1:F0:AE:84:DD
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 019425FD6B3B9415F5ED703C50B5F09869CE
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/d4RsxxDF2qky1rlWD_iJofCuhN0.roa
Signing time: Thu 02 Jan 2025 07:49:12 +0000
ROA not before: Thu 02 Jan 2025 07:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197669
IP address blocks: 91.228.242.0/24 maxlen: 24
185.28.212.0/22 maxlen: 24
2a04:3fc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:6b:3b:94:15:f5:ed:70:3c:50:b5:f0:98:69:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77846cc710c5daa932d6b9560ff889a1f0ae84dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:92:95:fa:d1:30:6e:6b:bf:e1:d3:59:df:f9:
ef:53:df:63:92:cb:f1:b9:24:64:d2:ce:9d:a3:b3:
61:05:0b:22:2e:d4:b7:ce:b6:63:69:b0:8b:ec:c1:
31:95:87:b5:9d:e1:59:c9:b8:62:7f:a9:f1:3d:2b:
88:84:b8:8a:8e:42:3a:7c:72:40:33:6a:b5:ec:60:
48:c9:0d:5c:9e:ca:8a:93:f0:0c:9f:62:ac:0f:13:
5a:03:85:be:df:de:1b:24:d2:c6:e9:18:84:40:1e:
74:15:ad:44:0e:9f:8e:2f:c7:ce:73:02:b8:89:f2:
84:ab:ba:38:00:0a:6d:7b:5f:4d:73:ef:39:49:e1:
c3:f4:82:27:1d:3d:3d:68:8e:b3:f7:3e:9e:74:24:
df:dd:db:eb:c4:77:62:6f:86:73:bb:a5:f8:b1:d5:
5c:0d:48:55:44:33:b0:95:6d:41:4a:4e:8b:63:86:
19:3c:35:82:0b:95:7d:49:96:6c:c8:fc:55:ce:40:
7e:d3:ae:6f:e6:54:54:f1:02:ec:e6:6d:17:47:7a:
d8:44:d1:a1:25:bd:27:54:2a:35:af:e2:63:f7:e4:
4f:e6:2a:fb:90:43:4d:5a:07:a9:63:79:e2:f7:77:
c2:a8:ea:23:9c:f8:73:76:66:37:a1:20:e4:db:3e:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:84:6C:C7:10:C5:DA:A9:32:D6:B9:56:0F:F8:89:A1:F0:AE:84:DD
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/d4RsxxDF2qky1rlWD_iJofCuhN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.242.0/24
185.28.212.0/22
IPv6:
2a04:3fc0::/29
Signature Algorithm: sha256WithRSAEncryption
a5:f5:86:53:71:da:16:b0:b2:b6:53:4b:00:2d:60:e1:9b:ea:
2d:5d:4c:99:0e:c2:0a:94:12:eb:a6:dd:1b:da:d3:2b:7b:e6:
6c:3d:17:dd:6b:13:fb:1e:dd:d5:95:55:62:a1:26:64:d7:a5:
20:8d:63:e5:76:ce:1e:fd:63:70:3f:a2:9c:3e:3d:bb:0a:ad:
1d:a9:18:96:48:8c:b8:e3:36:15:70:41:0a:6f:6e:7f:52:c3:
0f:3b:a0:2a:fb:79:db:be:9c:1f:17:e6:23:b4:fe:21:1e:af:
e5:2f:25:e4:47:62:87:80:47:67:39:ea:a0:52:42:f9:af:3b:
07:18:17:2a:a4:ce:d1:f4:db:65:64:bf:b5:fa:e6:38:2b:18:
eb:a0:11:5b:fd:55:65:0b:33:13:fb:d2:8e:bf:e9:02:fa:0a:
ed:57:3a:66:21:98:1c:74:f1:ff:e6:24:d1:a8:3c:cc:d1:a9:
6e:d8:7d:0a:05:a8:5f:18:2b:6e:ca:2b:2f:bb:a1:37:22:aa:
04:2a:05:0f:4c:ea:7d:2c:71:18:43:90:8d:90:71:3a:ac:4d:
71:80:8a:80:61:26:15:bd:82:50:1e:2f:5e:00:4d:34:74:73:
bb:81:c1:8b:4a:27:f8:fc:33:ed:59:ee:88:3b:da:c8:13:2d:
58:85:ef:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 10 00:49:20 2025 by rpki-client