Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/OFaNACp1IWknaNQsvLRLXXXO_lg.roa
File: OFaNACp1IWknaNQsvLRLXXXO_lg.roa (raw, json)
Hash identifier: ItMuBib+bKE+rwEQI/M4y7+dv6WGn0qrSR+gF36A7QA=
Subject key identifier: 38:56:8D:00:2A:75:21:69:27:68:D4:2C:BC:B4:4B:5D:75:CE:FE:58
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B9290CEF628D8B5454DCA5E5EED6A
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/OFaNACp1IWknaNQsvLRLXXXO_lg.roa
Signing time: Thu 02 Jan 2025 09:49:31 +0000
ROA not before: Thu 02 Jan 2025 09:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60508
IP address blocks: 84.236.183.0/24 maxlen: 24
84.236.207.0/24 maxlen: 24
88.148.102.0/24 maxlen: 24
89.45.242.0/24 maxlen: 24
176.227.153.0/24 maxlen: 24
178.156.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:92:90:ce:f6:28:d8:b5:45:4d:ca:5e:5e:ed:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38568d002a7521692768d42cbcb44b5d75cefe58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:39:8f:a3:ae:85:1c:65:66:2b:ab:3b:7a:6f:
54:11:a8:ea:58:12:c5:d0:4f:ad:67:60:5f:72:77:
a0:da:34:33:f3:b2:9c:2a:42:7b:69:5a:06:22:a2:
0c:69:5b:97:da:60:f3:56:29:f9:34:78:3c:06:8f:
28:46:ec:51:53:90:e1:7e:23:db:eb:b2:d3:a5:c8:
43:9c:c5:fc:c9:74:e0:22:24:01:58:29:45:48:51:
9c:5c:36:49:36:56:89:f7:d2:73:b6:1d:45:38:d7:
78:db:f8:82:42:36:08:91:5a:b5:ad:81:fd:7f:6a:
f7:85:ab:24:21:0d:19:ed:5b:b1:a3:36:39:48:d1:
57:69:4f:f9:41:21:9a:8c:db:8a:0f:f5:c3:45:d8:
f9:37:55:8e:5d:b2:84:8f:1b:cd:3f:03:47:10:6e:
a6:49:11:1e:b7:ad:95:de:ee:ce:52:61:09:62:2f:
26:68:d5:7b:22:24:88:22:83:2c:6a:a4:4e:1c:66:
28:b5:d6:10:97:92:50:90:50:4a:b1:59:66:04:64:
c4:ab:2a:af:e3:1c:58:60:2b:9f:1a:4d:0e:d5:14:
8a:17:84:04:59:df:0a:f5:9d:cc:68:f0:f4:b1:c6:
79:9e:20:07:4f:69:83:88:db:1c:0b:46:21:d0:41:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:56:8D:00:2A:75:21:69:27:68:D4:2C:BC:B4:4B:5D:75:CE:FE:58
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/OFaNACp1IWknaNQsvLRLXXXO_lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.183.0/24
84.236.207.0/24
88.148.102.0/24
89.45.242.0/24
176.227.153.0/24
178.156.25.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:52:15:96:84:54:62:69:14:a1:24:97:63:67:e8:52:e6:31:
12:39:4f:b5:4a:76:c3:16:42:6f:e4:0a:fc:2e:91:de:9e:83:
c7:bd:cb:1d:db:19:af:04:75:8e:b4:5d:dd:34:a8:6c:35:a4:
40:e0:ed:f8:8e:30:69:64:2f:4c:58:ff:a1:f9:30:6e:22:42:
ea:33:d7:8a:4d:87:74:33:09:3b:0a:5f:f0:0f:ac:a1:3f:e9:
78:72:a6:cd:ba:6e:22:1c:51:b1:83:87:9f:41:b9:53:e9:f1:
39:38:66:75:9c:83:c9:07:91:e3:a9:e0:80:d1:d5:82:ee:37:
f2:94:92:af:15:56:5d:00:76:03:07:45:66:c8:38:5f:02:29:
0d:73:6c:5e:2a:31:27:7c:a5:64:41:81:48:ab:be:85:64:eb:
63:ef:63:62:75:21:07:81:7b:c4:53:08:c6:b7:83:81:a9:e9:
f3:e6:3f:87:45:4d:df:5b:dc:f6:d8:c0:01:b0:e5:49:e4:0e:
ab:f2:59:30:bd:2c:80:60:75:32:e8:cb:e6:82:8f:b1:9d:0c:
df:95:eb:49:23:5d:70:00:4e:ba:24:38:9f:60:5d:31:ba:6f:
35:e6:cb:20:dd:a5:82:7d:0a:f1:06:b6:b6:50:26:e7:d5:1c:
6a:e5:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 20:52:17 2025 by rpki-client