Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-f1DPth15bXdpAVrY6TMOvO_sLk.roa
File: 1-f1DPth15bXdpAVrY6TMOvO_sLk.roa (raw, json)
Hash identifier: y3GRL7UQtNlsj18c09SNIsqOZhNBLJRX2hoNU0/m5Jc=
Subject key identifier: F9:FD:43:3E:D8:75:E5:B5:DD:A4:05:6B:63:A4:CC:3A:F3:BF:B0:B9
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01944A6595CE84FDDFFEE5D60A189CAE3C83
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-f1DPth15bXdpAVrY6TMOvO_sLk.roa
Signing time: Thu 09 Jan 2025 09:29:19 +0000
ROA not before: Thu 09 Jan 2025 09:29:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62240
IP address blocks: 79.124.1.0/24 maxlen: 24
130.185.249.0/24 maxlen: 24
130.185.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4a:65:95:ce:84:fd:df:fe:e5:d6:0a:18:9c:ae:3c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 9 09:29:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9fd433ed875e5b5dda4056b63a4cc3af3bfb0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:68:28:91:45:e5:c3:15:3d:a4:9c:92:59:ec:
08:94:62:11:b3:87:c9:65:3b:29:b5:a8:6d:ea:61:
34:0d:bb:e6:d1:48:51:6e:71:f7:08:d5:9f:2d:95:
2a:9d:ed:ef:0d:42:d1:39:28:4a:58:c7:f9:55:c3:
cc:a5:e2:9a:49:f0:30:b7:f8:4e:e8:5b:9f:52:b8:
c5:f7:b5:e0:3b:14:2e:d4:03:c2:00:61:22:45:89:
02:67:49:7f:eb:d3:c8:a6:a0:9f:fb:e4:ab:6d:83:
c8:69:02:b0:bc:8d:05:00:df:49:5b:a3:b9:88:e0:
4b:6c:7e:0a:2d:01:a4:c0:69:59:a8:31:b8:ba:0b:
dd:64:83:d6:97:37:f8:ca:75:73:70:f1:a4:db:c0:
91:7f:32:af:2a:6c:fe:65:7d:00:cb:3e:3a:73:d0:
a2:30:c1:63:6f:0e:e4:c0:cb:e5:96:e7:f9:80:ce:
eb:78:ad:56:00:ba:ce:ef:63:68:fe:1c:00:76:20:
c5:06:ed:c5:d7:f9:29:98:eb:02:0f:0e:6f:a2:4d:
34:19:fe:de:64:37:da:d9:44:7a:1d:36:60:f1:04:
93:d5:70:11:c9:62:d8:eb:27:6d:fe:23:0d:02:25:
23:99:0c:a4:35:93:98:30:f9:9d:10:bb:6f:52:7f:
b6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FD:43:3E:D8:75:E5:B5:DD:A4:05:6B:63:A4:CC:3A:F3:BF:B0:B9
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1-f1DPth15bXdpAVrY6TMOvO_sLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.124.1.0/24
130.185.249.0/24
130.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:bc:9a:ea:48:c5:00:5f:6d:07:e9:a7:73:66:08:bc:34:7d:
54:f0:f3:9f:a8:ab:e5:5b:32:9a:43:03:10:d3:28:ee:3f:de:
99:74:be:2a:a8:38:ef:13:51:38:65:3e:c7:36:c7:e8:2c:3f:
f0:8d:50:11:1a:38:d5:61:c8:e6:55:1e:81:b1:81:a6:d6:b3:
51:f6:77:39:c5:97:d8:5f:3f:0f:3b:1c:ba:92:26:1b:85:6f:
5c:10:5c:94:b8:1b:e8:a0:2c:81:a3:dd:05:e0:6a:c6:05:e0:
24:be:ce:a2:2a:82:fa:54:09:31:56:99:be:4d:d7:ee:19:49:
a8:15:9c:89:5e:93:4c:a4:00:5c:84:70:7f:f0:6e:4e:54:a0:
0d:d2:a5:cf:15:e8:27:bf:e4:75:72:82:41:d5:50:e9:87:df:
8b:25:c1:a6:e3:0a:20:e1:02:ff:ad:c7:e8:9d:86:e1:9c:5e:
d6:e0:0e:11:83:e9:86:94:b8:c8:7c:e9:2f:a0:62:84:19:d3:
64:ae:4e:5c:71:ac:83:7d:66:82:a6:40:ad:f5:5c:99:52:a0:
d3:cb:85:6f:9a:3a:fe:3a:e2:53:6c:27:8e:ac:b6:8a:c0:17:
1a:4b:2b:7c:3c:0b:61:4c:74:db:73:02:bf:70:7d:7e:6f:fb:
4a:23:80:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:25:28 2025 by rpki-client