Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/AAZYcUjhuGAJA3sXjywaEslf598.roa
File: AAZYcUjhuGAJA3sXjywaEslf598.roa (raw, json)
Hash identifier: RBp9easJVYqUVgaIiMMNSM2ioBAAirvckRHOuxL4X0g=
Subject key identifier: 00:06:58:71:48:E1:B8:60:09:03:7B:17:8F:2C:1A:12:C9:5F:E7:DF
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 019426D979E6E5A5A49E15CF172D13561E5E
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/AAZYcUjhuGAJA3sXjywaEslf598.roa
Signing time: Thu 02 Jan 2025 11:49:34 +0000
ROA not before: Thu 02 Jan 2025 11:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205305
IP address blocks: 95.181.196.0/24 maxlen: 24
95.181.197.0/24 maxlen: 24
2a01:ba80:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:79:e6:e5:a5:a4:9e:15:cf:17:2d:13:56:1e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0006587148e1b86009037b178f2c1a12c95fe7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:47:03:d3:d4:55:d1:59:fe:a3:fe:b3:7e:ef:
c6:e5:5f:18:85:b9:a0:5e:77:a4:75:4a:58:a4:96:
2c:c4:34:e1:c9:18:c9:98:8a:ad:ea:11:0d:15:fe:
44:d8:b9:a1:d7:61:e4:2d:ba:44:bb:68:60:ab:c4:
ec:88:36:12:88:2a:2c:bb:03:e2:e9:3b:c2:95:35:
bd:63:c3:67:d3:85:ca:f8:a8:cf:0b:fd:fb:60:e4:
7d:78:a8:25:16:3e:5f:1c:57:7d:9b:d4:78:8c:8f:
1c:c8:53:db:62:23:b1:89:3a:24:e3:0a:90:90:8d:
1a:37:b0:84:73:d6:49:15:85:32:cd:ac:b7:be:ce:
25:78:d7:cd:12:50:ce:4e:48:53:78:37:86:da:73:
cb:b6:6e:f8:41:f2:fe:33:35:6a:0d:c8:21:14:23:
c1:cc:7a:b6:51:b8:ef:64:e8:21:58:21:1a:21:e7:
72:81:dd:ec:e6:f8:56:60:c6:d6:cf:41:81:cd:16:
e9:80:b9:43:04:87:b8:fb:af:c0:cf:87:ce:d1:9d:
01:77:c2:67:fb:84:64:69:e0:29:57:19:d6:f4:0a:
51:5d:99:c4:49:bd:40:24:5b:7c:9b:56:8b:13:7c:
d4:1b:bb:77:6f:24:d8:cb:a2:ca:a7:92:b2:4b:66:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:06:58:71:48:E1:B8:60:09:03:7B:17:8F:2C:1A:12:C9:5F:E7:DF
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/AAZYcUjhuGAJA3sXjywaEslf598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.196.0/23
IPv6:
2a01:ba80:f::/48
Signature Algorithm: sha256WithRSAEncryption
59:69:f2:21:9e:74:9c:8c:0d:13:b4:78:f1:b2:83:0e:bf:7a:
1b:eb:3b:c3:c2:9c:a4:87:21:d9:df:f1:e0:33:c1:f0:ba:c3:
97:78:01:9f:53:c8:58:7f:cc:fb:b6:41:ab:bf:74:75:4c:48:
2f:7a:8a:ed:8f:d8:25:fa:a4:05:a9:f9:4f:29:1a:6b:df:24:
2b:67:ab:f7:9d:0f:d1:ef:79:7e:27:2e:16:0a:30:85:75:a7:
f6:33:1c:3f:1e:c2:65:24:d8:44:b4:5d:2c:90:4a:ae:76:f1:
a2:0e:99:35:46:6b:b4:d0:de:72:ee:26:80:be:b0:1b:8d:28:
fc:d1:87:58:77:a0:98:db:d7:80:04:2b:6a:b8:0b:a9:1e:e5:
d0:f5:e2:39:13:5e:0b:3a:c0:0b:26:96:09:47:26:db:c1:99:
76:6f:ec:39:e1:1c:0f:ed:fc:a5:a6:ac:48:1b:5e:94:c3:e9:
01:e3:0f:fa:5d:fe:9d:e4:5b:b7:1e:3b:a8:cb:60:a9:40:c4:
8a:bf:15:f0:64:f2:94:93:16:40:72:dc:e9:bb:fd:a7:32:69:
1f:11:59:2b:ee:ce:6c:3d:c4:e5:24:9e:0e:d1:67:82:c3:f0:
be:29:62:29:02:cc:59:62:3c:b6:77:1d:06:25:25:2d:30:e3:
13:cf:06:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:51 2025 by rpki-client