Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/0jsEpgPjnRorcdqt6c4SOI8vcXg.roa
File: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (raw, json)
Hash identifier: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=
Subject key identifier: D2:3B:04:A6:03:E3:9D:1A:2B:71:DA:AD:E9:CE:12:38:8F:2F:71:78
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 0194228D0A13302548F16588B0C0F8FCAD18
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/0jsEpgPjnRorcdqt6c4SOI8vcXg.roa
Signing time: Wed 01 Jan 2025 15:47:36 +0000
ROA not before: Wed 01 Jan 2025 15:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60724
IP address blocks: 185.7.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:0a:13:30:25:48:f1:65:88:b0:c0:f8:fc:ad:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Jan 1 15:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d23b04a603e39d1a2b71daade9ce12388f2f7178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:eb:96:21:8e:98:49:93:b3:c0:87:15:9f:d8:
80:79:c0:c9:cb:df:05:43:4c:a6:1a:2d:7b:63:f2:
2c:fc:0d:73:ae:41:2c:0f:f6:b8:fe:65:49:e5:13:
74:e9:03:28:cd:0d:08:60:1f:76:bd:b6:0a:c1:5f:
69:ab:68:d2:30:7f:36:b1:6f:e5:d6:e2:cd:d5:32:
52:ed:50:93:58:99:9e:64:2e:c1:bd:dc:df:c8:eb:
1f:ae:7a:45:57:0b:a7:84:91:9f:1a:db:a3:16:a6:
38:ce:eb:26:9e:dc:c4:4d:af:bc:b8:5d:44:07:7a:
da:b5:8c:6b:39:f5:55:1f:6a:65:63:60:cd:27:55:
e3:74:36:a1:50:c1:0e:7f:bd:58:5b:ce:cf:1d:53:
e2:1f:d8:d7:11:d6:41:ab:d4:39:f2:be:09:ae:8e:
46:8c:f4:a9:09:88:70:22:98:b3:fb:93:c6:55:c1:
db:28:a6:56:a3:62:b9:88:c0:5d:fb:f5:3b:ec:7b:
e1:d3:8e:1e:97:43:b3:c4:57:37:69:a7:d6:63:0a:
d9:1d:2d:e9:41:54:0e:23:8c:44:d1:a9:2f:2e:40:
aa:9b:f5:e0:5a:fc:2a:ec:28:32:b7:bc:cb:20:90:
d1:66:7d:86:6c:ed:ed:ac:b8:bb:86:28:73:48:03:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3B:04:A6:03:E3:9D:1A:2B:71:DA:AD:E9:CE:12:38:8F:2F:71:78
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/0jsEpgPjnRorcdqt6c4SOI8vcXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.44.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3f:cd:04:ee:df:ee:ce:29:48:28:46:16:89:e1:a3:07:63:
cf:45:db:e5:22:86:a7:d2:ef:dc:9c:31:84:e0:f4:e2:55:41:
fb:02:00:4c:ec:dd:df:ac:2c:bd:e9:c4:1e:9e:2c:3b:01:e4:
d7:26:39:cc:cd:93:14:6a:68:76:19:f5:6f:42:73:64:2f:c7:
6f:f0:63:7e:2b:14:56:48:66:5c:71:78:37:96:8a:9a:3f:3b:
5d:5d:d1:40:73:96:b4:14:9f:e9:85:72:4b:5b:11:2c:fd:b1:
f2:4e:e5:40:d3:31:f0:ad:06:83:b3:63:c1:71:b4:0e:13:e4:
8d:e0:8a:58:95:dd:4a:1c:94:a6:21:b8:5f:32:35:dd:13:48:
33:b7:fd:86:0d:f3:85:bd:eb:ea:67:af:f0:24:a5:aa:6d:f7:
cb:16:e9:c5:d5:fc:0b:42:67:e1:4c:6b:7d:c9:e5:13:c7:b6:
02:19:e4:99:d4:f4:62:bc:e9:0a:80:6e:f5:97:8e:7a:a1:84:
39:b7:59:1f:07:71:1b:26:c7:8d:d8:d1:b9:9e:a8:d6:b1:e3:
32:16:36:1e:8c:e5:d3:07:2f:8d:75:a8:fd:2b:c6:a1:83:07:
9a:74:72:88:75:e5:b8:bd:77:1a:fb:c4:cd:d8:4d:54:1b:dd:
45:6a:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:50 2025 by rpki-client