Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa
File: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (raw, json)
Hash identifier: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=
Subject key identifier: 3A:B3:14:01:95:9E:39:83:9C:2C:F7:77:83:92:F0:6E:43:14:5E:4F
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 0194266C0745ADDEB2142211D61D07BBC63E
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 79.143.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:07:45:ad:de:b2:14:22:11:d6:1d:07:bb:c6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ab31401959e39839c2cf7778392f06e43145e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:3c:27:2d:5a:06:58:58:a8:c1:98:4f:a6:
15:02:b5:e8:8e:d6:cf:b7:a2:fd:7d:0e:a0:63:ae:
9a:56:91:65:42:a4:16:13:a2:f0:4a:82:4c:55:bc:
a9:e5:5b:10:3f:56:a1:e6:74:eb:fd:79:63:f2:8b:
5f:4b:2a:87:a1:d6:a0:c6:03:d7:87:41:6c:2a:42:
9c:5a:74:d6:ed:5b:46:9d:55:be:1f:98:1d:62:ea:
48:f7:78:16:ec:78:b7:3c:7b:45:58:0c:33:85:f4:
1a:b9:2f:59:d1:43:e6:69:0e:bf:bb:11:6f:c9:13:
a6:ee:20:55:c0:e5:53:19:8b:a1:43:6f:60:82:70:
a4:e3:3f:7a:06:b9:5f:f7:88:3e:10:5a:32:25:6e:
f5:7b:e3:1d:fc:64:1c:0f:d2:34:7f:3a:3c:b4:30:
61:97:fe:a7:cd:d2:5f:d0:1b:0d:c1:5e:7d:f6:e7:
fc:0e:d9:27:04:8a:5a:40:f8:a9:80:e5:5a:8f:89:
1f:42:dd:3a:2b:59:05:10:eb:38:d3:5e:1b:cd:ef:
ae:ff:3c:15:38:06:21:82:37:ea:f7:a1:bf:7e:e7:
f8:a9:6f:66:9d:7c:e0:4f:4a:61:7e:bb:13:32:97:
b0:be:28:d1:65:34:53:3d:c8:fc:96:40:29:bf:ed:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B3:14:01:95:9E:39:83:9C:2C:F7:77:83:92:F0:6E:43:14:5E:4F
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.143.156.0/24
Signature Algorithm: sha256WithRSAEncryption
89:04:e1:fe:0e:d3:bd:99:b8:4f:c9:c0:ac:f3:34:a7:cc:39:
f2:7d:95:2b:80:19:ac:fa:02:db:4c:f9:25:15:fa:47:ea:f1:
55:7e:a0:ee:88:f4:d0:4b:30:05:0e:df:a0:4a:4b:2f:8a:18:
95:ed:9c:e4:fe:ef:7c:0e:ee:73:0e:c3:80:63:28:5a:6b:e6:
2c:6f:99:08:5b:b2:5c:d9:c0:47:24:fc:dc:55:41:9c:7a:8e:
b0:66:0e:a7:58:11:cc:a5:dc:d1:0f:8d:7c:45:af:96:52:7f:
e5:b3:18:74:3b:fb:00:db:0d:3c:b8:cd:d1:b3:67:9b:21:b2:
14:24:a1:ef:60:57:5a:65:8d:1a:6f:c0:5d:7c:e9:f3:23:d0:
83:2d:19:14:71:1f:1c:a6:66:19:e5:b1:a0:c2:8f:c2:a3:6e:
9c:f2:65:d3:39:4d:81:c1:06:22:28:5a:96:fa:ed:80:e4:aa:
be:b3:d2:5c:f5:35:b8:8a:38:7a:28:d9:9e:7b:a0:e7:6c:64:
d7:a2:2b:cc:67:0b:f6:6e:a5:06:84:13:98:49:80:70:5b:3d:
fe:c8:fc:2b:a3:53:99:e0:8f:22:d3:08:fd:30:03:07:f4:77:
f8:52:62:74:98:1d:38:38:4a:cc:4a:b5:7d:2f:2a:b1:ef:eb:
17:66:20:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:10 2025 by rpki-client