Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/dV8gZyxeU_yhOfSJfQIuF3PwmEY.roa
File: dV8gZyxeU_yhOfSJfQIuF3PwmEY.roa (raw, json)
Hash identifier: vqe9uCz5msI5D17lB7JyswI6OhAAM17ZkLC6MbkaM2c=
Subject key identifier: 75:5F:20:67:2C:5E:53:FC:A1:39:F4:89:7D:02:2E:17:73:F0:98:46
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA2EA26DDC9A914EA470FF6CE9B0FD
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/dV8gZyxeU_yhOfSJfQIuF3PwmEY.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5483
IP address blocks: 86.104.9.0/24 maxlen: 24
93.114.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2e:a2:6d:dc:9a:91:4e:a4:70:ff:6c:e9:b0:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=755f20672c5e53fca139f4897d022e1773f09846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a3:d5:d4:d6:da:1f:47:43:b0:7a:a1:23:ed:
62:49:c6:ba:d4:99:50:5b:6e:66:27:dd:8c:f3:52:
cc:79:11:62:e5:60:4e:df:01:fc:31:b8:2a:9b:bc:
be:74:b6:0a:8e:41:77:6d:16:6b:49:02:1c:94:db:
63:c9:8d:8d:e6:75:67:84:60:89:db:3d:25:3f:88:
eb:5d:29:b7:f4:9b:5a:e5:6b:5f:d4:0a:99:35:4e:
77:6c:75:2e:44:ec:4a:78:0a:f3:aa:47:87:e5:a3:
03:93:8f:88:81:c2:59:41:d9:5f:40:e9:50:5f:ac:
03:07:99:aa:14:52:4e:0f:68:0c:0f:91:7d:0c:fa:
fa:38:26:a5:f3:69:f4:ce:2c:31:90:88:d3:6a:6a:
e4:76:5b:d5:5b:46:87:51:1c:78:77:9b:08:a0:58:
fe:4a:19:a1:ae:88:a8:41:a9:f8:d5:ab:0c:62:34:
e7:78:57:fd:10:76:c1:2b:60:b1:bb:4c:a2:a7:2c:
6a:0d:96:11:51:a5:d8:d9:1d:33:da:0e:b4:f8:81:
0f:1e:9c:0c:c1:57:51:27:dc:31:0f:e2:c3:0c:f8:
e5:60:ac:e5:76:a6:17:e0:2b:04:58:f3:e3:c7:a8:
53:99:5f:01:0d:fe:ed:9e:96:c4:b8:f4:29:a7:a8:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5F:20:67:2C:5E:53:FC:A1:39:F4:89:7D:02:2E:17:73:F0:98:46
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/dV8gZyxeU_yhOfSJfQIuF3PwmEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.9.0/24
93.114.97.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:c6:88:0e:e5:3f:c1:63:24:6a:d0:1e:d4:83:cc:ad:77:e8:
16:f8:67:cf:f5:44:7c:90:fd:73:bd:90:7f:cb:e7:0a:b4:92:
36:eb:9f:62:fa:f1:e5:f5:1c:b3:2f:ee:b2:e6:be:41:a8:a3:
f3:f4:ae:70:b1:48:7e:db:95:d8:50:be:b2:c5:51:99:73:b1:
4d:9a:11:01:c9:bb:ad:34:e5:d3:0d:c4:dc:eb:3a:4c:c5:51:
4b:ac:81:84:86:ae:b7:cb:14:10:e0:43:fb:4b:d3:0f:d3:3e:
7a:e6:48:49:af:32:30:08:5d:67:ca:7b:1a:74:c1:9f:45:71:
e5:dd:1e:6e:3f:1a:ff:09:3d:e6:fd:81:84:7a:8e:cb:fb:9f:
57:78:7d:44:43:da:75:59:7c:4e:c9:37:7b:57:44:2f:e7:2b:
c7:1e:3c:2f:21:08:59:ff:48:dc:a3:e0:05:4e:a2:f6:7d:c0:
45:76:fc:6e:81:df:cc:6c:30:76:0f:fd:7a:e0:2a:fb:fe:e5:
c2:f5:cc:d6:0f:e9:69:74:ac:8b:1c:05:23:78:85:81:14:3c:
35:10:cb:d1:b6:87:2e:58:c2:15:7e:83:f9:c0:5e:c5:3f:0f:
47:99:f2:aa:6e:bb:04:57:9c:7d:34:62:a5:b6:a6:00:11:b4:
b3:9b:5f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:33 2025 by rpki-client