Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa
File: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (raw, json)
Hash identifier: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=
Subject key identifier: D0:24:3C:EE:0B:43:92:64:3E:61:D8:A8:36:5E:D2:0A:62:36:FC:98
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 01951ACBDD74AA0BF0DA1E3B269B1828D6E9
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa
Signing time: Tue 18 Feb 2025 20:42:02 +0000
ROA not before: Tue 18 Feb 2025 20:42:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.98.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:cb:dd:74:aa:0b:f0:da:1e:3b:26:9b:18:28:d6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Feb 18 20:42:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0243cee0b4392643e61d8a8365ed20a6236fc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:8c:b7:f4:bc:dc:9e:d8:32:6c:22:d3:8e:
25:c1:f3:a1:f7:25:0f:a7:39:c2:b7:91:48:a9:00:
a6:08:8a:ed:02:51:c7:1f:6f:2e:ed:81:16:9f:39:
62:ad:e0:59:88:bb:f1:29:b8:50:7b:51:21:13:8a:
6d:5a:2f:a9:d0:cb:b8:bc:c3:24:b2:fb:1b:9e:22:
cf:40:fc:86:fe:80:2e:78:83:6b:ea:bd:b1:fc:0c:
d9:3e:1b:c5:cc:c3:ff:83:db:e5:ae:48:d3:08:23:
05:17:f4:ee:01:e8:99:15:d5:3e:1e:1b:6f:46:4b:
36:59:39:4d:eb:45:c0:9a:82:44:5b:09:8d:1f:ee:
ae:3a:d5:f1:51:cb:f2:f8:92:a7:f3:f6:e3:38:9b:
3e:5f:17:04:69:88:5f:f5:09:49:78:fe:3b:f4:89:
14:dd:c3:ed:e1:af:97:e6:18:69:3e:54:77:7f:59:
26:5d:ea:9b:3f:f4:e0:95:92:da:6c:ee:9e:f7:e6:
90:11:97:53:fd:13:57:2a:ef:eb:16:ae:a0:d0:5f:
b2:2f:f3:3d:55:0c:0f:fb:63:1e:e4:3b:af:7d:95:
00:cb:9f:9a:b4:9d:a8:f0:d3:75:2b:c8:d0:67:e6:
90:ff:32:1d:60:e7:2f:be:0a:4a:e9:35:68:4e:1a:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:24:3C:EE:0B:43:92:64:3E:61:D8:A8:36:5E:D2:0A:62:36:FC:98
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.98.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:20:f9:78:aa:49:81:64:e4:38:a6:e4:f6:ca:ac:7a:58:11:
16:e2:2a:93:25:f1:81:33:10:97:f1:d6:36:52:ac:09:8a:5d:
b7:ea:39:8b:b3:62:bb:22:51:cb:bb:c3:e0:32:72:c1:3e:eb:
3e:ff:04:ff:61:86:c1:40:35:f5:19:b3:0a:62:27:6e:2f:4d:
f5:8e:34:24:73:fc:4e:ad:fd:db:e0:7b:20:be:52:e9:9e:73:
05:9f:17:9d:7d:4b:5b:b0:69:eb:f2:94:e0:6d:af:cf:0c:fc:
b0:2a:af:f9:fe:06:34:b0:48:e6:d9:c9:ab:85:0f:af:b6:62:
92:59:57:84:0a:65:b5:80:31:e2:22:61:1d:80:dc:d2:c6:4f:
8c:9e:c1:c3:04:5e:00:07:78:14:7f:b5:da:7e:91:2a:97:85:
34:d5:c8:ba:69:6d:74:a3:2f:2d:55:8a:99:46:98:96:f5:17:
b3:8b:4d:2e:91:30:82:09:51:af:2b:e2:2e:cc:51:13:b2:42:
8c:96:ac:6b:a4:9a:4c:18:e6:cc:2e:bb:38:10:0e:83:be:43:
c9:18:66:51:31:46:67:0a:a5:e8:b0:73:a7:e9:de:31:e9:71:
a8:51:c8:e9:59:6e:8f:df:e3:87:96:d1:fc:08:ee:15:80:b0:
2e:d8:1d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:42 2025 by rpki-client