Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ikmhDi1DmQM3_1bCpTY3wbiEa8s.roa
File: ikmhDi1DmQM3_1bCpTY3wbiEa8s.roa (raw, json)
Hash identifier: LhKM7Lhf5CS8jikT2qyHB8zN1pv3MnpfhTKiEgi6DH0=
Subject key identifier: 8A:49:A1:0E:2D:43:99:03:37:FF:56:C2:A5:36:37:C1:B8:84:6B:CB
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F25882A12D798F007E94DD5ADFD0
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ikmhDi1DmQM3_1bCpTY3wbiEa8s.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50431
IP address blocks: 95.43.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f2:58:82:a1:2d:79:8f:00:7e:94:dd:5a:df:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a49a10e2d43990337ff56c2a53637c1b8846bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:62:ef:c8:0a:29:09:7f:1a:d9:cb:b6:e2:
c3:97:eb:ff:9d:8a:97:16:77:d3:e7:f1:1b:8e:a3:
9c:69:a9:82:64:97:09:f7:c7:2a:08:5d:74:2f:5a:
22:bb:c8:11:95:1b:71:ee:26:5b:d6:35:82:4e:bc:
c3:ef:4d:cb:84:eb:11:d9:9d:58:93:28:63:58:37:
c5:af:8d:49:17:88:85:25:35:19:73:3c:ab:13:46:
af:09:c1:20:cf:64:08:8c:6d:a0:db:09:95:f9:af:
0f:e5:b7:3f:5c:07:72:00:8a:fd:69:5b:c2:81:1f:
ba:fd:3a:53:43:f4:21:36:e5:15:79:9a:00:2a:ec:
b0:10:c5:bb:24:8f:a5:62:99:e7:65:2e:6d:63:88:
f6:6d:80:6a:f0:25:a1:fa:11:e2:61:a2:4c:e9:e7:
f1:79:b3:07:a5:62:4e:45:10:10:f5:9d:00:72:db:
1a:d0:0e:88:c5:40:d7:40:c5:de:4a:b8:0d:19:20:
60:cf:6b:4d:8c:80:96:22:e7:6a:93:5a:d0:ac:fd:
12:be:5a:db:ce:16:3b:f5:44:ee:fa:80:80:e9:e2:
87:e4:49:3d:a9:43:be:9b:e2:24:aa:e9:9e:7c:df:
c8:26:45:ca:7b:a2:e4:1d:14:cf:cb:5c:f8:ac:cf:
58:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:49:A1:0E:2D:43:99:03:37:FF:56:C2:A5:36:37:C1:B8:84:6B:CB
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ikmhDi1DmQM3_1bCpTY3wbiEa8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.43.213.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f5:7c:7b:1c:ab:eb:8c:9a:07:14:1f:9c:a5:f3:bc:2c:e1:
2c:6f:31:b4:05:d2:dd:1d:e8:56:eb:c3:50:14:e3:a2:cc:0c:
99:d8:cc:1a:d5:df:44:d5:97:9d:b1:67:c9:93:09:a6:a7:e5:
5c:a7:c4:b7:d5:c3:39:ea:c3:eb:c3:71:1c:13:ea:d2:8d:c0:
f6:b4:98:59:3e:66:71:ad:5d:bd:48:42:64:1e:88:83:f1:74:
01:23:2e:ef:21:d7:22:b3:8c:94:6e:4d:88:19:69:81:a6:65:
db:84:bd:a1:51:27:a2:31:24:56:3f:67:42:42:15:4e:be:6b:
b8:7f:47:30:34:bf:6a:77:53:f2:3d:b6:99:6c:63:3a:0c:b2:
7c:e0:a2:c3:7d:a3:fc:58:4e:99:2e:8b:4a:43:3c:9f:48:f1:
f1:a0:2d:8e:c7:f8:54:c0:0d:a8:91:1e:11:0b:1a:6c:10:5f:
7b:39:bb:d9:73:92:00:37:d1:07:ef:30:9f:1f:78:83:81:06:
20:8f:65:e7:ad:b3:e8:8a:e9:ad:c9:65:f8:83:67:cc:d0:a8:
bf:b2:24:57:d7:60:58:96:48:27:53:f7:8f:d6:54:6a:fc:c2:
51:ca:84:7e:c5:82:a2:c8:59:c4:e7:39:c5:cd:fb:d9:89:f8:
6e:f9:7d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:08:50 2025 by rpki-client