Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/djea3wowsH9-GL3nIoFch0gf_Ow.roa
File: djea3wowsH9-GL3nIoFch0gf_Ow.roa (raw, json)
Hash identifier: t6fqkUvoXSupS3l5uRjJ3VosWSd+9PoyLIE+ML64T24=
Subject key identifier: 76:37:9A:DF:0A:30:B0:7F:7E:18:BD:E7:22:81:5C:87:48:1F:FC:EC
Certificate issuer: /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial: 01942143D6D3458B67D83E66B77A089CB3E8
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/djea3wowsH9-GL3nIoFch0gf_Ow.roa
Signing time: Wed 01 Jan 2025 09:48:01 +0000
ROA not before: Wed 01 Jan 2025 09:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204457
IP address blocks: 213.134.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d6:d3:45:8b:67:d8:3e:66:b7:7a:08:9c:b3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Validity
Not Before: Jan 1 09:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76379adf0a30b07f7e18bde722815c87481ffcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:72:56:b9:99:91:93:7d:8b:9e:26:34:b1:
b1:a8:e7:b7:ad:35:3a:1b:d9:76:ce:28:69:7a:57:
23:7a:9b:cb:70:69:a9:5a:7d:99:0b:bc:34:c0:b4:
62:b0:30:1f:ce:83:55:85:f7:c7:9b:88:23:10:ac:
f6:72:ae:23:e8:01:4f:f8:b9:01:67:b5:42:5e:91:
6e:53:73:c7:58:7b:d4:8f:87:bf:c7:d8:ea:de:6d:
7d:2f:62:18:b9:9f:92:0e:43:1b:1a:ab:65:02:f5:
6c:36:bf:3d:88:ac:a7:0d:37:8e:cf:ab:16:6a:a0:
19:51:37:b8:88:fc:a0:9a:47:a0:97:10:45:68:a6:
46:43:b3:a9:66:0b:ff:03:17:2f:e4:20:c2:c4:d6:
cd:4e:15:c6:b6:3f:a7:38:6e:bf:98:22:36:88:ab:
0d:aa:4c:86:00:36:3a:99:e5:3e:b2:9b:dc:c9:1d:
2f:30:83:e9:88:5e:64:22:c7:b1:97:3c:70:f8:cf:
a3:da:c2:26:25:22:0c:8a:95:4e:f9:fc:12:bc:21:
00:27:52:4e:37:21:96:07:9b:66:3d:19:78:67:a0:
fd:fa:99:e5:a0:d3:1c:1b:ce:2a:1a:e9:e9:ce:cb:
54:ba:cc:9a:dd:f2:4f:d7:5b:67:14:98:f1:5f:fe:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:37:9A:DF:0A:30:B0:7F:7E:18:BD:E7:22:81:5C:87:48:1F:FC:EC
X509v3 Authority Key Identifier:
keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/djea3wowsH9-GL3nIoFch0gf_Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.12.0/24
Signature Algorithm: sha256WithRSAEncryption
53:88:ad:c0:cb:d4:56:a9:8c:ce:d2:82:ce:4b:09:9c:63:9b:
7f:9d:41:96:2f:f7:98:d7:9b:18:d3:61:4b:a4:88:89:05:b4:
b5:2d:27:ce:9b:ff:75:ae:d6:6e:d1:0d:03:d7:20:ea:be:92:
bc:c7:3a:d3:9f:c0:1e:15:26:df:2a:43:a4:c7:06:54:2b:60:
81:70:59:0a:ab:bc:9a:36:43:ad:a4:d3:ee:dd:24:ac:9b:45:
8d:9d:4b:4f:1e:98:63:29:ce:6c:fe:fb:4a:48:1a:52:44:ba:
43:d7:67:68:9d:a7:13:5f:c2:bb:b4:f7:7d:69:df:f5:67:0f:
42:bb:d7:5e:b2:2f:5b:75:ae:e8:29:b2:45:e9:9c:df:53:33:
dc:15:e4:9f:b9:d8:67:31:23:1b:22:8a:e4:35:64:b1:d4:a1:
bf:de:92:02:b1:7b:29:5c:a7:db:de:1d:6a:14:2d:b1:cf:61:
13:cd:ee:71:30:77:6e:8a:d2:f1:7b:15:7d:c9:26:73:6e:b4:
99:9f:6e:c5:a9:da:cb:40:bb:df:1b:3f:2c:8b:8a:38:90:18:
2e:74:e3:30:c4:98:29:30:d7:f1:94:32:0f:cb:a9:36:9d:4b:
51:2b:45:18:ef:12:83:67:eb:b0:be:0b:cc:f9:1c:87:e4:ee:
81:31:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:33 2025 by rpki-client