Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/ev3ATXcLdak2upi-q5CN2dVa8sw.roa
File: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (raw, json)
Hash identifier: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=
Subject key identifier: 7A:FD:C0:4D:77:0B:75:A9:36:BA:98:BE:AB:90:8D:D9:D5:5A:F2:CC
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 019421444ABDB1CD7B07F7D81B4F511970BC
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/ev3ATXcLdak2upi-q5CN2dVa8sw.roa
Signing time: Wed 01 Jan 2025 09:48:31 +0000
ROA not before: Wed 01 Jan 2025 09:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49964
IP address blocks: 91.216.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4a:bd:b1:cd:7b:07:f7:d8:1b:4f:51:19:70:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Jan 1 09:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7afdc04d770b75a936ba98beab908dd9d55af2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:82:b8:29:67:40:2b:4e:d3:7b:54:01:d0:
7a:b5:34:7a:fd:98:1d:70:57:c1:eb:3a:6d:bf:f8:
a9:22:bb:6c:dc:1b:d2:d5:26:17:5c:36:83:2d:01:
6b:72:f9:06:dd:80:eb:18:92:7c:97:3a:e4:21:a7:
a5:47:d4:f3:90:0e:a4:8a:bd:85:e9:f8:08:30:a0:
62:70:af:42:ec:af:2e:37:64:6c:85:73:85:7f:2a:
52:96:a1:19:a4:03:06:2c:09:52:d4:8a:a5:a4:9a:
3d:5c:41:96:f4:b8:9f:7e:26:b3:39:bf:1c:29:9e:
90:67:29:4e:87:75:0b:1a:63:e1:05:48:a8:49:25:
5e:76:0f:cf:cc:1f:d5:4f:34:66:13:34:30:6f:6e:
fd:ea:e9:a1:7e:b3:51:1a:88:05:b2:67:8b:7c:2b:
54:53:8e:12:36:17:4b:90:f3:86:01:3b:01:ae:85:
07:ba:61:a2:49:81:57:e5:8e:cd:47:a8:12:fa:9e:
18:c2:58:14:33:28:47:28:32:84:4f:4e:1f:1b:94:
12:c0:75:61:c2:65:21:a9:9b:b6:73:cd:ee:f5:fb:
5b:8b:4d:3b:b2:9b:b9:fa:6b:f4:89:7e:64:70:e0:
63:70:a6:9a:83:3d:16:0d:9f:c1:97:cf:37:18:4f:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FD:C0:4D:77:0B:75:A9:36:BA:98:BE:AB:90:8D:D9:D5:5A:F2:CC
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/ev3ATXcLdak2upi-q5CN2dVa8sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.145.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ce:a7:83:26:cc:7e:22:05:e5:be:b1:b7:c0:56:03:a9:44:
af:f5:d7:75:39:51:69:20:e6:ea:d7:16:e3:b0:24:5b:c9:62:
fe:33:45:dd:18:9c:ea:4e:84:db:7d:98:5b:03:1b:e9:66:2d:
65:a5:85:6d:4b:f4:2a:62:80:fb:dd:d3:a8:81:f9:49:3e:b0:
32:1e:8a:67:26:66:8b:8c:36:17:51:38:4f:6b:53:7a:70:ac:
d8:3f:d2:a6:40:bd:8a:ed:ea:48:e3:3c:68:76:34:a3:55:66:
ac:9e:b2:1a:de:e6:ae:c8:87:40:d4:7a:19:68:e4:14:c3:3e:
e1:39:e6:ed:64:0e:9d:80:89:83:21:b6:03:ac:7b:15:9b:d4:
d9:87:e8:da:ed:bf:3d:7f:b6:14:dc:f5:a3:e3:61:ab:78:a1:
bb:91:cf:cf:64:af:c7:56:1a:e0:cf:61:d4:22:5a:5a:54:8e:
49:38:70:ca:48:2b:63:08:5d:8a:4c:0a:0a:80:6c:c7:1b:6d:
16:17:af:5a:f4:c2:4f:91:21:ae:fb:e2:15:7e:79:c9:e7:6a:
3d:f4:0f:bd:8e:57:45:c8:20:30:9a:22:b9:83:ad:37:73:b9:
32:f0:89:9f:38:b5:08:63:6f:10:e6:44:46:64:ed:77:03:5f:
8a:36:b6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:22 2025 by rpki-client