Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/m43cWo3KgEuK9Hc3g86LdUpWJLc.roa
File: m43cWo3KgEuK9Hc3g86LdUpWJLc.roa (raw, json)
Hash identifier: xJI2lb3t7JjEal+fMcBS4JFRrMKS832WVOggygXFByA=
Subject key identifier: 9B:8D:DC:5A:8D:CA:80:4B:8A:F4:77:37:83:CE:8B:75:4A:56:24:B7
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 01942826F232F046CA2871B8A0E5783273B2
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/m43cWo3KgEuK9Hc3g86LdUpWJLc.roa
Signing time: Thu 02 Jan 2025 17:53:48 +0000
ROA not before: Thu 02 Jan 2025 17:53:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29107
IP address blocks: 141.98.109.0/24 maxlen: 24
2a07:76c0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:f2:32:f0:46:ca:28:71:b8:a0:e5:78:32:73:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Jan 2 17:53:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b8ddc5a8dca804b8af4773783ce8b754a5624b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:ec:03:4e:33:b0:ab:20:d9:c4:e5:28:91:
4e:b1:6f:41:76:19:13:b9:9b:03:7d:10:0e:a3:66:
3f:58:d0:95:03:37:65:ca:d3:64:d2:76:37:2a:d9:
8f:db:5d:5c:a3:9c:30:bb:11:7f:c0:a5:44:c0:32:
00:ee:a0:f0:70:ad:a4:49:b5:d7:46:9d:7f:23:ed:
8a:73:21:6e:14:d7:3d:8c:87:ec:65:70:5e:54:44:
ac:8a:ad:4b:0c:83:bf:e8:58:b2:3f:b2:a3:00:38:
4b:97:bd:f5:b6:4a:85:e2:67:e2:5e:79:db:f8:1c:
de:b8:ff:dd:40:45:81:9e:59:65:ef:6b:c8:be:bd:
ac:19:38:76:79:9d:e9:8e:0f:53:b5:f8:3b:4b:72:
eb:48:3c:ed:1d:be:56:0b:94:44:3f:cc:eb:eb:a8:
9c:6c:93:ec:5c:aa:b9:72:35:42:7f:70:b2:e2:c3:
da:c5:f3:95:2a:d4:ad:c1:12:e1:8a:f5:9b:e5:6e:
d0:80:87:a5:e4:fc:8f:09:3c:f9:12:af:33:bd:bb:
c4:ba:1e:a4:fc:9e:bf:7e:d2:4d:2b:43:f2:b8:e2:
9e:c8:36:68:b6:06:54:5f:53:f6:48:8c:69:f5:5f:
71:05:6b:b4:19:7a:50:11:9d:93:10:82:b0:8c:e9:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8D:DC:5A:8D:CA:80:4B:8A:F4:77:37:83:CE:8B:75:4A:56:24:B7
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/m43cWo3KgEuK9Hc3g86LdUpWJLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.109.0/24
IPv6:
2a07:76c0:2::/48
Signature Algorithm: sha256WithRSAEncryption
59:92:29:43:1e:33:96:2e:ea:e8:fc:6b:cc:ca:4d:e3:48:6e:
e6:4d:d4:2f:16:1f:ce:64:06:1f:dd:29:3c:dd:f9:0d:01:4b:
27:db:1f:ae:47:23:09:90:f4:d1:92:1e:ca:0d:2b:45:af:ab:
af:fb:da:b1:7d:ff:70:8a:35:af:6a:1a:fc:ab:35:9e:06:53:
ad:55:5e:c6:b4:a2:a8:42:40:8d:b5:0b:9e:e7:74:be:16:59:
15:fb:52:91:f1:bf:9b:68:7c:55:0d:f1:6e:a5:f9:fc:16:6f:
9d:db:ee:b7:eb:60:3f:69:93:dc:a4:0b:23:f2:3f:c8:58:f9:
24:43:52:6b:85:28:cd:7d:9d:8a:f4:f9:80:11:3e:59:7b:99:
27:3b:7d:52:8c:72:fa:e6:12:fb:37:bb:35:40:c0:ad:13:80:
7b:8c:d4:fb:a6:08:d9:42:9b:9b:24:c6:6a:d1:46:66:1e:e3:
a7:ae:9d:12:2e:c0:d3:5b:7b:77:88:c3:3b:8f:ea:67:61:4d:
de:26:8e:9a:c5:38:74:78:30:f2:99:32:84:ab:9e:bc:8e:9c:
ed:15:49:51:d8:eb:a6:17:34:47:29:bc:86:03:42:3d:0e:4f:
88:1b:7d:07:49:7f:dd:b8:90:89:78:4d:e5:fe:43:f3:f3:35:
dc:25:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:03:49 2025 by rpki-client