Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/30JPkxPIzm_OMTaydoXnQRFB7vY.roa
File: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (raw, json)
Hash identifier: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=
Subject key identifier: DF:42:4F:93:13:C8:CE:6F:CE:31:36:B2:76:85:E7:41:11:41:EE:F6
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 0195A91B3EB3FF00886F12AA00605B0BD804
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/30JPkxPIzm_OMTaydoXnQRFB7vY.roa
Signing time: Tue 18 Mar 2025 11:54:49 +0000
ROA not before: Tue 18 Mar 2025 11:54:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33869
IP address blocks: 194.150.206.0/23 maxlen: 23
217.113.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:1b:3e:b3:ff:00:88:6f:12:aa:00:60:5b:0b:d8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Mar 18 11:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df424f9313c8ce6fce3136b27685e7411141eef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:3e:23:6b:19:7d:bd:46:8c:77:f2:3a:f2:
c2:fc:63:17:9b:52:63:f2:0c:2d:a4:eb:bd:e7:26:
d2:93:21:05:e1:94:98:6a:aa:53:e5:bb:6e:c9:19:
63:cc:67:07:94:6d:f1:02:51:7d:a1:d8:65:ae:7b:
13:78:79:b6:84:f7:f2:27:88:28:f1:32:8b:94:8e:
9b:9c:2c:79:56:b6:62:84:df:76:c2:dd:9b:f3:2d:
2f:90:1c:df:dc:b1:ce:41:9b:48:9e:62:00:e6:d6:
e3:bd:e7:37:8f:56:36:15:4d:8d:d2:a5:40:f2:d2:
ad:9f:64:a2:f3:10:a8:0a:1b:3f:30:e9:cd:76:ea:
43:c6:2a:7d:53:2d:77:f3:24:d0:79:9b:33:73:e8:
b7:55:15:b6:dc:5b:5f:42:77:9d:b2:e6:9c:83:ae:
92:07:7e:49:5f:33:02:ea:e8:5a:f4:75:85:9a:e6:
c6:66:0c:d4:e5:3b:85:8c:3c:15:d4:d5:a3:2f:40:
f7:79:0b:ca:ec:94:51:05:7f:9b:04:3c:94:e0:8e:
ad:2a:2f:9f:8c:a0:ee:c6:6e:14:7b:8b:3e:4a:9f:
c2:4c:ba:e4:97:d4:fc:29:43:2d:ab:73:72:93:a4:
1b:81:42:ab:90:5c:a7:c4:1d:59:f7:3a:82:0f:e0:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:42:4F:93:13:C8:CE:6F:CE:31:36:B2:76:85:E7:41:11:41:EE:F6
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/30JPkxPIzm_OMTaydoXnQRFB7vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.206.0/23
217.113.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:6a:e5:72:bf:8c:cf:39:44:aa:da:0f:f2:33:16:cc:16:0d:
ee:89:cc:08:75:75:d6:a9:d5:80:9e:bd:e0:23:6c:25:54:3a:
22:75:d9:96:51:fc:2d:ac:d1:49:ad:60:a5:55:0b:28:7e:af:
27:6c:b3:08:26:f5:b0:55:27:5f:8e:d8:07:53:4b:02:2f:ec:
a6:fb:6c:67:43:ab:b9:85:9d:c1:97:bb:44:54:27:ef:cb:66:
0c:35:4b:cd:c1:e6:fd:47:21:78:7b:7b:56:04:2a:90:e9:4a:
66:a5:5d:35:6b:44:4c:77:be:8d:c9:83:4a:fe:39:e2:da:f2:
2b:70:6f:d7:57:87:ea:25:c9:96:3d:9b:48:b4:f0:d3:fd:41:
73:af:c1:1d:65:a2:b2:95:a3:05:74:e5:f4:10:88:6f:ac:4c:
49:f3:bd:03:83:5f:b4:e0:56:34:59:57:be:ea:48:70:37:44:
94:cb:b3:0c:06:f8:bf:a5:57:2a:7e:06:cd:bf:0b:c6:b9:0a:
34:04:5c:4e:72:5b:56:f8:94:04:94:f2:28:ed:98:70:88:0a:
7b:73:a4:4a:62:43:f0:59:ff:db:1a:04:9f:26:f3:20:15:fc:
4c:ed:be:24:db:86:d7:8c:b7:46:23:34:77:41:24:6a:08:8a:
9c:01:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:13:28 2025 by rpki-client