Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/TlLzQFaA8VlRrAgPC7RAijqNra0.roa
File: TlLzQFaA8VlRrAgPC7RAijqNra0.roa (raw, json)
Hash identifier: SoMB+UVUymjveuF3MvkPc6BzZ0mDzrz28rZ+mOfkhhw=
Subject key identifier: 4E:52:F3:40:56:80:F1:59:51:AC:08:0F:0B:B4:40:8A:3A:8D:AD:AD
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 019427477E746EAB15BD094D18DED2C8102A
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/TlLzQFaA8VlRrAgPC7RAijqNra0.roa
Signing time: Thu 02 Jan 2025 13:49:44 +0000
ROA not before: Thu 02 Jan 2025 13:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49127
IP address blocks: 83.98.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7e:74:6e:ab:15:bd:09:4d:18:de:d2:c8:10:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 2 13:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e52f3405680f15951ac080f0bb4408a3a8dadad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:78:21:af:a7:9b:2e:2a:0b:b4:18:da:6e:
08:2e:c1:42:5d:69:60:29:c4:3f:2d:b3:7e:ef:63:
cc:05:6d:20:ef:a9:ea:c1:17:91:94:5e:3a:d8:c9:
c0:24:3b:ab:25:be:9d:40:65:09:5b:a9:9b:ee:b5:
e1:7d:ad:2e:c1:2a:5d:eb:be:55:2a:74:61:21:5c:
f2:16:9b:16:b9:12:07:1d:3f:5a:a4:10:0c:f5:2f:
3c:91:10:7e:98:8f:3e:56:60:bb:72:c6:eb:41:8a:
33:14:a0:da:38:02:27:d4:f5:11:23:7b:0d:99:a3:
88:44:8c:e8:29:ef:76:16:81:a3:c1:b5:64:76:fc:
30:59:77:bd:c3:20:40:b2:cf:11:60:09:f7:af:5a:
a0:0f:71:6e:cb:82:4e:32:7d:a0:06:d2:c1:25:2e:
bd:3a:8c:5f:a8:2a:a6:6f:57:29:e9:37:d0:4c:78:
d4:8a:be:83:65:4e:32:90:02:52:87:df:3f:74:8c:
ee:c7:1a:06:e5:09:2e:de:f5:d0:7b:58:7a:29:0d:
97:0d:07:29:9a:9c:5d:cf:c7:e4:2b:4e:4b:98:b5:
5e:76:45:14:d7:e2:60:8d:a2:d1:a8:5d:94:cf:89:
52:ba:3c:d9:2a:2b:04:7d:0c:d0:fb:0a:c3:f7:21:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:52:F3:40:56:80:F1:59:51:AC:08:0F:0B:B4:40:8A:3A:8D:AD:AD
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/TlLzQFaA8VlRrAgPC7RAijqNra0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:66:80:38:42:0d:7f:a8:87:26:ca:ae:0b:c5:75:4d:b1:47:
79:74:db:db:cb:d9:b7:78:f3:5a:9b:d5:f1:a7:a2:79:95:f5:
3b:8b:c7:87:5f:5d:af:10:9a:7a:fc:5d:f3:3e:e3:82:3a:2e:
c8:7b:2d:c4:53:54:fb:31:51:cf:09:d1:92:0a:9d:eb:a7:ac:
c4:17:fc:39:03:a4:35:3b:ff:56:04:a7:93:de:73:e4:22:27:
42:45:82:51:7d:3b:a6:3d:6a:ed:95:05:09:4c:61:1b:52:63:
ca:af:7b:dc:a4:cb:dd:4f:30:7e:da:f8:1b:7b:7f:16:4c:d2:
28:f4:4c:67:4e:62:1f:30:36:1c:de:2f:f8:e9:08:58:50:b8:
f1:3a:36:6e:9d:b0:27:48:cc:94:ad:e4:4a:dd:a4:c8:dc:3d:
cf:0c:76:a0:79:85:8f:e4:73:50:d4:fe:63:f9:f5:a7:75:ab:
f8:3d:ff:a6:24:f6:7f:1e:95:c8:4f:88:b4:7f:0f:80:c4:d0:
35:4c:f5:d9:22:fd:7e:cd:3d:d1:b6:76:e4:b1:7a:08:cf:34:
1b:2a:f5:e8:30:c5:b7:22:72:1b:6b:fe:17:1a:83:6e:2a:38:
ab:c6:0b:c2:b7:f8:ef:72:c2:54:fe:9d:8f:0b:d1:4d:86:44:
95:76:bc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:14:42 2025 by rpki-client