Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/Ie5KawkP4b238jzWIkt7U1G1OH0.roa
File: Ie5KawkP4b238jzWIkt7U1G1OH0.roa (raw, json)
Hash identifier: b/NOk3BaQteK7RVlxUiaRcKQ/ZGCaP84MpBuSn/nXxo=
Subject key identifier: 21:EE:4A:6B:09:0F:E1:BD:B7:F2:3C:D6:22:4B:7B:53:51:B5:38:7D
Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial: 01942522179F8A8276BB46A911A016527B42
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/Ie5KawkP4b238jzWIkt7U1G1OH0.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31463
IP address blocks: 195.191.164.0/24 maxlen: 24
2a10:4a40:4ddc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:17:9f:8a:82:76:bb:46:a9:11:a0:16:52:7b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21ee4a6b090fe1bdb7f23cd6224b7b5351b5387d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ac:5e:86:92:2e:3f:ef:ff:45:a5:2f:78:93:
57:13:0a:5b:3f:66:bd:5e:27:7d:20:53:a7:d1:e4:
56:ba:54:82:c4:0a:5b:46:a7:34:e4:4e:4e:6d:ba:
31:67:04:5e:ed:01:61:1e:43:c3:95:1f:c1:a6:07:
ed:62:b3:c0:45:0b:59:2d:05:86:05:90:f3:98:2a:
e5:97:c0:5e:25:09:f4:49:0d:8d:58:36:a6:7d:a8:
e3:e4:a0:04:95:c8:cb:08:e5:be:f4:06:b1:37:c4:
22:c4:7b:a6:ab:cf:47:d1:86:98:6c:33:93:e0:e1:
3d:48:d5:c4:ac:f9:59:23:d8:b2:d4:ed:4d:37:bd:
ba:21:ba:c0:b7:e4:02:95:68:83:3b:b7:d9:36:c0:
f4:bf:09:2a:8e:11:2c:e5:f7:89:5c:74:54:ad:fc:
a3:4c:83:f2:39:61:93:73:43:25:2c:18:46:c2:32:
7a:8d:47:5e:55:9f:f2:0a:07:ec:32:5c:57:e4:2a:
15:fd:28:db:4a:cf:e3:b5:6f:36:15:1c:bd:31:88:
91:20:8d:90:df:e0:83:ab:f8:c8:70:8e:c6:6d:79:
d0:ce:fe:e3:65:c1:7c:6b:ce:a2:ac:07:0a:1f:39:
b8:4c:7e:60:06:4c:90:c1:82:2a:12:49:4a:05:96:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:4A:6B:09:0F:E1:BD:B7:F2:3C:D6:22:4B:7B:53:51:B5:38:7D
X509v3 Authority Key Identifier:
keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/Ie5KawkP4b238jzWIkt7U1G1OH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.164.0/24
IPv6:
2a10:4a40:4ddc::/48
Signature Algorithm: sha256WithRSAEncryption
6a:aa:83:ce:62:5b:f4:44:95:33:a8:4f:47:45:b2:e3:5c:5d:
45:09:c8:53:6f:23:79:7f:2d:1e:d7:22:de:c6:38:58:43:d2:
84:96:b9:19:25:c6:4e:cc:a7:26:5c:cc:f4:e6:51:4f:27:d3:
66:24:7a:3a:84:70:c3:f9:3a:59:95:9f:55:5a:d3:c3:83:51:
e6:41:10:ec:59:25:e4:68:42:59:a5:40:8e:1b:63:b7:85:e7:
84:ed:53:f5:fd:f4:c4:9b:bb:33:ce:ae:11:8d:10:c8:63:fa:
ee:57:30:a3:d0:d1:dd:9a:c2:13:6e:c7:ba:4d:bf:98:ac:8b:
5e:9b:c3:9d:bb:67:94:8a:fa:c5:de:08:c8:f4:ee:92:62:20:
09:b2:7b:fc:59:bc:5f:41:7a:5c:5e:6d:da:8e:7a:b8:75:4d:
99:af:ef:de:bf:3e:5d:5d:c0:c4:a3:76:2c:bf:81:62:f2:e6:
a7:89:cb:59:62:c3:b4:ca:de:46:c0:18:f7:84:a3:1e:3a:c7:
0a:6c:56:28:7c:18:d8:11:08:6b:17:8e:9e:87:75:d6:39:dd:
d9:9f:94:57:88:f3:70:0c:ae:8c:09:8f:43:39:a5:eb:eb:70:
44:83:3a:77:79:e4:0f:0d:31:f9:23:ef:94:86:f9:e5:60:70:
25:db:63:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:36 2025 by rpki-client