Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/_UE4NiO0pfWfFFAbb7iwrwRdv6s.roa
File: _UE4NiO0pfWfFFAbb7iwrwRdv6s.roa (raw, json)
Hash identifier: Nt6mUmB/b8Tz/UtmdUFBFCY+JhXJPjG/PVld3xk2bu0=
Subject key identifier: FD:41:38:36:23:B4:A5:F5:9F:14:50:1B:6F:B8:B0:AF:04:5D:BF:AB
Certificate issuer: /CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Certificate serial: 01942444B700C844D06FBE3DD7372FF7FFD5
Authority key identifier: E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/_UE4NiO0pfWfFFAbb7iwrwRdv6s.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197965
IP address blocks: 194.180.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b7:00:c8:44:d0:6f:be:3d:d7:37:2f:f7:ff:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11aa92850ebfe648ad3d89add8e736ec3675a11
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd41383623b4a5f59f14501b6fb8b0af045dbfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8c:c4:d2:a3:d4:29:b8:3e:26:22:0d:35:b1:
d8:5f:cb:19:1b:dd:a7:25:cc:4b:7e:be:a3:5b:74:
9e:12:5d:9c:97:09:48:ec:66:75:fe:a9:c7:a9:f9:
e9:84:0b:6a:7b:e4:26:e5:57:c1:32:bf:39:4f:ce:
42:e0:5f:38:31:2d:7e:8c:79:71:23:bd:c7:ea:3d:
0b:4f:75:50:91:c8:95:25:ad:7e:a2:53:9e:68:4a:
ca:95:56:65:7c:df:c1:e5:bb:d3:3c:90:ca:f7:67:
f8:24:e4:34:c6:2a:3f:60:8e:5a:e1:37:e9:32:26:
f4:8b:1d:0d:b6:e6:dd:48:a1:f3:fc:94:13:c5:bb:
92:08:20:34:2e:f3:54:e2:11:5e:cf:88:7c:67:9a:
c1:04:47:94:71:c6:01:05:c1:08:6b:5d:1c:77:84:
ce:2b:a2:fb:67:54:ca:e1:8d:2b:69:16:a1:41:ec:
8e:7a:ad:f8:57:ee:cb:be:4c:2d:b3:cd:3b:55:bf:
9b:71:2e:4b:68:e0:c5:a2:37:2e:6e:47:e1:b4:c6:
ed:0f:d3:bd:ee:34:07:d0:d0:24:de:1e:fc:51:97:
ee:a4:11:4a:c7:6d:10:8c:79:6d:e2:8c:11:95:5c:
98:a8:fe:c7:84:e8:b3:21:65:7c:4d:76:d4:0f:73:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:38:36:23:B4:A5:F5:9F:14:50:1B:6F:B8:B0:AF:04:5D:BF:AB
X509v3 Authority Key Identifier:
keyid:E1:1A:A9:28:50:EB:FE:64:8A:D3:D8:9A:DD:8E:73:6E:C3:67:5A:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RqpKFDr_mSK09ia3Y5zbsNnWhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/_UE4NiO0pfWfFFAbb7iwrwRdv6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/2ebba5-7a0d-4333-b911-0f88d16e1afe/1/4RqpKFDr_mSK09ia3Y5zbsNnWhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.136.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b1:0e:21:47:de:9e:fc:47:82:a6:f9:26:f8:09:e9:af:a1:
23:77:ad:be:b3:97:f5:91:f6:8b:2b:c8:c1:76:5a:d5:b9:ae:
9d:26:e4:f6:87:75:cc:6f:b5:d1:7d:88:27:a5:a6:66:9d:5c:
30:40:71:cd:16:f5:38:38:83:af:05:05:45:95:00:fb:70:2f:
7a:da:b3:94:83:8f:a1:81:5c:fd:c7:8d:54:77:4c:e2:b6:1c:
f8:bf:c8:96:53:16:92:c8:9e:b7:e0:0a:1f:85:ce:61:6b:0b:
a5:0f:11:17:11:19:9e:1e:19:c4:c2:48:fc:c6:03:02:c0:3d:
41:4e:5a:7e:0a:71:ad:e1:0e:04:f9:62:87:a9:9b:ba:7b:ad:
73:a9:82:80:08:fe:e4:d4:19:03:c3:90:78:4c:6b:f9:77:ea:
72:97:48:1c:a9:b3:78:63:04:36:83:bc:28:be:9f:36:a5:4c:
bd:6b:6a:d6:1b:aa:52:37:11:a7:5f:d3:96:ba:51:be:60:c0:
9d:5a:92:88:8e:25:da:3d:37:ee:4b:62:9b:ae:9a:a1:55:7e:
f6:c0:70:e7:fc:d9:fb:cd:20:4f:33:36:05:c2:8d:eb:0e:06:
cb:cf:b2:86:4a:5b:ed:71:ee:d8:ee:6c:af:5f:f7:ab:e4:cf:
70:b9:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 20:50:21 2025 by rpki-client