Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/aJg9uZF_pYvyDjg7NkMHuBy8mQg.roa
File: aJg9uZF_pYvyDjg7NkMHuBy8mQg.roa (raw, json)
Hash identifier: nOjVmTP/ntXHBg8WPUwVP4vVX4u8uKJlXjrJ78bZWxQ=
Subject key identifier: 68:98:3D:B9:91:7F:A5:8B:F2:0E:38:3B:36:43:07:B8:1C:BC:99:08
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2F18162FDDA650E73CF23B3A05878
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/aJg9uZF_pYvyDjg7NkMHuBy8mQg.roa
Signing time: Thu 02 Jan 2025 01:48:14 +0000
ROA not before: Thu 02 Jan 2025 01:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51894
IP address blocks: 159.148.147.0/24 maxlen: 24
159.148.172.0/24 maxlen: 24
2a02:610:7501::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:f1:81:62:fd:da:65:0e:73:cf:23:b3:a0:58:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68983db9917fa58bf20e383b364307b81cbc9908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:61:94:87:70:72:42:69:b0:71:09:c5:eb:
99:b3:b3:d3:8c:36:ee:00:a5:4e:bf:88:8d:06:5a:
25:aa:3d:69:f2:3a:cc:00:c7:21:89:6e:8f:ae:70:
6a:93:54:a4:08:b5:c5:cc:4b:71:2b:6c:e9:ab:69:
2b:54:8b:cf:c1:bf:1a:4a:42:fc:44:18:68:9a:c8:
bd:5f:5c:28:26:af:59:7d:49:a7:6f:f6:6d:34:16:
6c:fe:63:6d:e9:07:a7:bc:a9:ef:05:2d:a4:80:8e:
2f:a1:58:c5:45:17:0d:3c:97:ad:11:ff:24:77:09:
3f:e9:bd:2e:8a:94:27:aa:83:71:dd:a9:ce:2a:73:
9a:b7:f2:9f:7d:1a:5a:4a:64:89:b4:1c:ba:43:48:
48:43:e7:70:e6:17:95:91:eb:41:80:be:26:88:c9:
28:74:03:3e:1c:1e:da:b9:6a:32:09:47:e7:19:54:
20:dc:fc:4b:42:f9:d3:4c:07:39:04:26:9a:01:7b:
4f:4e:3d:43:6a:33:fc:e2:28:f9:2e:58:3b:a2:0e:
c9:a7:44:86:f2:b8:43:e1:73:56:56:c3:03:83:1b:
ea:68:c5:4a:32:5b:30:72:14:d6:07:5d:9d:b4:d6:
4c:03:fb:18:c0:fb:a6:90:81:0c:32:a3:4d:6c:56:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:3D:B9:91:7F:A5:8B:F2:0E:38:3B:36:43:07:B8:1C:BC:99:08
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/aJg9uZF_pYvyDjg7NkMHuBy8mQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.147.0/24
159.148.172.0/24
IPv6:
2a02:610:7501::/48
Signature Algorithm: sha256WithRSAEncryption
5a:fe:05:d9:47:fa:b7:43:3c:16:25:13:25:a4:1c:ba:0a:11:
d1:53:24:ad:d3:7a:d8:4a:98:36:c0:d1:f2:d0:3b:f4:70:b1:
81:e4:d9:b2:9e:e9:22:a7:85:fb:58:d2:07:09:a2:34:7d:64:
85:cb:e0:fd:e9:20:b5:e3:74:8e:99:f7:ad:e8:bc:d4:2a:04:
a5:8f:a4:63:a4:ef:3a:8f:a3:ae:5b:08:e8:23:f3:88:ce:cf:
5f:d7:89:9d:44:50:aa:d7:d2:e2:1c:53:ca:b4:0b:09:7b:2d:
37:91:95:f9:1a:a7:5a:b3:91:9c:69:19:72:55:40:9c:9b:88:
25:a8:1e:66:a0:58:6c:85:2d:fb:6f:46:eb:69:ec:5d:84:16:
4f:e4:f2:7c:1c:a2:ee:19:b4:58:18:a2:3f:c6:a6:52:28:81:
be:21:8a:78:82:1a:ff:f9:44:7e:60:cd:95:90:85:b2:36:a8:
ba:ec:69:20:84:f3:b9:76:d4:98:37:d8:f2:e0:2c:0d:83:8d:
5a:5b:4b:38:94:5a:3c:c7:dd:ea:d2:40:c4:20:f9:04:2a:4e:
bd:69:56:7e:68:ec:45:f3:f8:08:52:ae:1c:21:50:89:37:c4:
33:c2:a4:6a:d1:d8:59:f4:cd:8b:f6:7c:4b:6a:fc:7e:59:32:
2a:89:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:08 2025 by rpki-client