Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/diYtHkbWhD5oCZMkqf9gfGkO_S0.roa
File: diYtHkbWhD5oCZMkqf9gfGkO_S0.roa (raw, json)
Hash identifier: mAM70Fu/V+UYJ6UW5MauFuojQwzYrrWiK8CdKSQ5gBA=
Subject key identifier: 76:26:2D:1E:46:D6:84:3E:68:09:93:24:A9:FF:60:7C:69:0E:FD:2D
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 019423D7483E89E3E9D6F823B85D8162A8E8
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/diYtHkbWhD5oCZMkqf9gfGkO_S0.roa
Signing time: Wed 01 Jan 2025 21:48:18 +0000
ROA not before: Wed 01 Jan 2025 21:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44703
IP address blocks: 195.229.12.240/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 10:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:48:3e:89:e3:e9:d6:f8:23:b8:5d:81:62:a8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Jan 1 21:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76262d1e46d6843e68099324a9ff607c690efd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:8a:1c:9a:02:6b:0a:ce:97:c5:c8:60:3e:
ec:77:7b:e6:42:69:58:99:13:d8:83:f2:cb:1b:6c:
3a:d9:25:47:b6:e6:80:35:23:11:d4:c2:da:4f:5e:
9f:5f:c3:d4:56:c2:35:22:e9:2c:94:ef:9f:54:17:
f5:de:21:8e:b7:25:a7:b4:23:d0:53:a4:78:26:1c:
15:2f:f3:26:68:e2:10:46:cd:b3:e0:73:2c:f6:de:
4f:c6:bb:0b:14:78:3c:ff:ff:7d:99:59:36:74:37:
60:4b:9c:c3:68:8c:44:33:b1:b4:86:c6:94:e9:28:
72:05:7a:08:f7:6e:4e:6f:99:01:7b:3c:53:51:2b:
95:2f:90:9f:f1:c2:4c:65:5c:5d:a2:9d:bb:6b:82:
31:98:15:d6:2e:34:b3:6e:e1:57:dc:9c:05:8b:fc:
ca:0a:ef:0f:35:30:16:61:60:e5:73:d9:80:eb:b9:
a1:41:8e:7c:21:f1:f0:aa:72:dc:b6:3e:5c:f5:97:
1e:53:15:28:ae:4f:d9:7a:aa:12:97:ff:91:83:2b:
8f:c6:50:3d:bf:15:fc:1f:8d:f6:03:54:29:03:0a:
4f:8f:5f:1e:96:97:59:f6:2a:f3:cb:30:2c:1e:c1:
5e:b1:a3:5d:2f:11:b5:68:46:3d:8b:15:22:73:f3:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:26:2D:1E:46:D6:84:3E:68:09:93:24:A9:FF:60:7C:69:0E:FD:2D
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/diYtHkbWhD5oCZMkqf9gfGkO_S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.229.12.240/29
Signature Algorithm: sha256WithRSAEncryption
a3:c8:58:75:2e:20:3e:b8:9e:67:45:d3:69:c0:9a:a3:f0:5d:
27:c7:dd:8c:7e:61:65:60:30:65:1d:28:37:c1:cf:e2:d2:75:
77:0d:9b:51:4d:4d:b6:a3:14:1d:58:28:3a:8f:34:97:ba:8b:
30:80:8b:1d:c6:98:c7:46:d0:42:4f:44:b1:2e:eb:e6:2c:84:
87:b4:3e:e1:03:92:cc:67:1c:36:16:14:76:7a:7c:22:51:5f:
8d:56:22:0f:1d:bf:57:98:89:06:12:9f:ec:96:90:df:05:c6:
b7:06:05:08:df:d2:c0:fe:2e:39:86:61:7f:59:d0:06:43:5a:
f7:c0:91:66:d9:a7:ee:85:a6:d6:ef:25:b2:c1:78:49:e5:33:
a2:41:ae:60:29:f4:aa:ed:f8:dc:a5:51:a4:fa:bb:f8:f1:a4:
3c:78:dc:75:6d:a9:31:61:e2:42:be:a6:4c:39:94:00:b2:72:
6d:0d:85:51:60:6d:2f:0e:5c:fb:ff:fd:c7:d3:15:83:56:07:
7d:38:3e:4a:8c:7f:0a:6d:6f:90:1a:8d:8b:03:f0:16:fc:26:
39:b1:fe:80:cd:c8:c2:b4:02:ac:c4:b4:92:da:0b:3d:27:5a:
c1:36:87:ef:15:33:30:eb:b7:f3:e9:34:f8:2e:11:27:79:5b:
e3:26:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:41:39 2025 by rpki-client