Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/pEq_9GNHyjlivZeD-baP0qm26qc.roa
File: pEq_9GNHyjlivZeD-baP0qm26qc.roa (raw, json)
Hash identifier: 9HW2pgKUS/HjiTOdvRQJWkPpcQXgVwsPhReH6Hvz2Ew=
Subject key identifier: A4:4A:BF:F4:63:47:CA:39:62:BD:97:83:F9:B6:8F:D2:A9:B6:EA:A7
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019666B4B8081482FA02354AEE7A9F63857F
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/pEq_9GNHyjlivZeD-baP0qm26qc.roa
Signing time: Thu 24 Apr 2025 07:30:41 +0000
ROA not before: Thu 24 Apr 2025 07:30:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 95.164.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:b4:b8:08:14:82:fa:02:35:4a:ee:7a:9f:63:85:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Apr 24 07:30:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a44abff46347ca3962bd9783f9b68fd2a9b6eaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:ee:06:b8:6b:db:cd:d2:90:27:d7:6a:27:
f1:69:b5:ff:6c:e5:e3:7a:f6:c9:a3:67:30:48:95:
21:51:fa:e9:5d:b4:65:28:ac:93:39:b6:ce:78:39:
b6:c2:fe:47:3e:17:5a:e5:9b:5a:d1:80:71:44:5b:
1b:74:a5:57:af:a4:d1:d3:db:62:57:15:ac:df:d9:
da:4d:0e:f4:b9:38:18:f5:e1:9d:dc:46:9f:34:54:
1b:60:e4:cd:22:83:d8:03:2c:95:a5:f5:46:39:c7:
a6:ab:f0:34:2d:96:fa:87:a4:bf:8e:5a:ca:6e:2e:
fd:29:a6:d5:56:3e:d8:bc:5c:e6:73:fb:24:a1:5d:
59:8f:98:86:29:f3:cd:c8:31:42:2a:90:d1:53:99:
84:97:c4:da:e0:13:0f:8a:ca:c8:d5:31:27:d6:db:
16:b0:db:b0:14:00:76:4e:54:bb:24:a3:37:81:13:
6b:a4:8f:62:be:c0:d9:b0:10:ba:6e:c2:0d:3e:17:
f0:cf:22:09:87:bb:b1:53:0b:c3:15:ad:bf:4e:62:
36:ec:8c:62:b5:d4:2b:96:aa:eb:fb:99:31:82:07:
51:1f:fe:34:48:9c:4c:12:fb:ec:1c:5a:0f:fc:5a:
5d:5b:84:3c:69:01:45:b6:e2:c8:9e:83:73:02:4b:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:4A:BF:F4:63:47:CA:39:62:BD:97:83:F9:B6:8F:D2:A9:B6:EA:A7
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/pEq_9GNHyjlivZeD-baP0qm26qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.16.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ea:03:e0:4c:17:cf:d6:b7:77:9c:90:ab:de:68:f5:93:14:
e7:13:74:65:eb:46:57:c8:b9:76:4a:14:8b:b8:7d:b6:8a:52:
e4:9e:d5:d5:b1:8c:82:a2:a7:35:aa:a9:55:1c:75:c9:f8:44:
02:fb:fd:07:c3:eb:6f:37:fc:0d:03:ad:4f:7d:38:49:fa:40:
54:9e:c9:6b:9b:de:41:9d:07:b4:e3:5c:cf:5a:03:22:8a:1f:
f1:51:f7:57:59:04:b0:e5:21:0a:19:1b:c8:77:8c:46:f5:18:
c3:47:b5:30:bd:10:64:10:ae:95:50:e2:fc:32:3e:e6:8d:01:
19:dc:1c:40:b8:72:66:ae:25:6b:4e:7d:ea:6a:63:36:63:97:
a7:15:cf:06:1d:b4:e0:b3:d4:49:b9:e8:43:89:82:ca:6e:b5:
47:79:f8:3c:df:9e:1b:91:de:a4:c5:7b:9c:94:63:43:13:b0:
04:cd:90:99:29:d0:83:e5:49:c9:95:2d:17:22:a3:93:e5:73:
0c:a5:5d:5b:30:41:7c:26:0f:39:86:86:42:61:09:5d:84:1b:
99:b6:3c:47:49:5f:62:f8:ea:7d:35:bb:20:d1:01:14:ef:78:
7d:5b:19:c2:fa:77:f9:e9:60:fc:94:61:83:41:d9:68:9e:1a:
2b:ab:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:39:39 2025 by rpki-client