Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/D6_4qEi07gtXF5ITukzXeqcyPaY.roa
File: D6_4qEi07gtXF5ITukzXeqcyPaY.roa (raw, json)
Hash identifier: BB8G1BDTfHCkkOszf3uysnvPnN4MWEDmW1B2B7aR3bY=
Subject key identifier: 0F:AF:F8:A8:48:B4:EE:0B:57:17:92:13:BA:4C:D7:7A:A7:32:3D:A6
Certificate issuer: /CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Certificate serial: 019424457048AE47540C5223DE24A6214AD2
Authority key identifier: 8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/D6_4qEi07gtXF5ITukzXeqcyPaY.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12337
IP address blocks: 209.16.144.0/24 maxlen: 24
209.16.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:70:48:ae:47:54:0c:52:23:de:24:a6:21:4a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3f9d85bcb3a4136362c5773e9d14e39e529453
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0faff8a848b4ee0b57179213ba4cd77aa7323da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:16:78:c0:32:c0:ed:44:ac:79:d1:9d:1c:
1a:ba:ba:84:f4:3b:bf:6e:3d:1d:34:1b:ed:2b:a1:
a4:14:d0:26:3f:67:27:78:fb:f6:cc:c9:13:77:46:
ed:03:81:e2:8f:1d:7b:90:c7:44:dc:4a:f6:ca:00:
8d:71:0a:c3:83:0a:f2:84:7f:c3:9d:0e:5c:96:8a:
c5:93:42:93:68:63:b1:55:32:77:8b:2f:c2:b7:5e:
69:4e:59:25:20:f4:18:57:1b:5b:83:d2:7e:34:10:
93:1c:cc:71:1c:14:88:25:a7:0a:6c:3c:f8:d8:74:
57:72:e1:dc:69:54:4d:96:83:b6:4d:38:d9:c4:dc:
50:b5:63:09:2e:f4:d4:c6:aa:6d:2b:91:9f:3f:f9:
6c:e7:a7:df:b7:5d:ff:d5:2b:0b:13:44:20:05:ec:
86:88:de:63:ef:56:6a:dc:a6:7d:4e:03:8d:8a:b4:
7e:85:39:da:22:a6:90:64:d2:71:59:fd:41:d5:2f:
f7:5b:f8:43:cd:cf:23:1a:c4:c9:72:e4:bd:63:09:
34:ee:6e:40:fe:84:13:00:2c:3a:f9:24:91:38:9f:
e3:ea:94:71:ca:aa:5b:07:fc:a5:68:1d:01:41:0a:
08:0a:b0:fb:d2:9e:9d:71:99:b4:44:ee:94:32:fb:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AF:F8:A8:48:B4:EE:0B:57:17:92:13:BA:4C:D7:7A:A7:32:3D:A6
X509v3 Authority Key Identifier:
keyid:8F:3F:9D:85:BC:B3:A4:13:63:62:C5:77:3E:9D:14:E3:9E:52:94:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jz-dhbyzpBNjYsV3Pp0U455SlFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/D6_4qEi07gtXF5ITukzXeqcyPaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/jz-dhbyzpBNjYsV3Pp0U455SlFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.16.144.0/23
Signature Algorithm: sha256WithRSAEncryption
63:fe:88:cd:83:fc:ae:c0:90:71:62:d9:d6:df:77:93:c2:3e:
0b:79:61:9a:cb:6b:88:03:ea:ad:8c:b3:b1:8c:b0:3e:2c:57:
33:0c:61:af:9f:da:a2:be:bd:1a:a3:1c:00:e2:56:5c:c8:5c:
d6:5a:e4:42:6d:56:a4:0d:fe:3c:e8:36:0e:fa:aa:c6:67:cc:
fc:b4:a5:a9:bc:32:82:15:02:01:cf:81:3f:89:ca:3a:4d:46:
09:c1:34:63:44:b6:0d:33:85:da:fe:8d:5c:df:11:e1:7e:07:
1b:52:df:45:fa:08:b3:d0:ca:15:54:c7:cf:00:01:ea:23:56:
25:e7:9c:c6:e5:54:be:00:1e:3c:3f:35:e5:bc:73:a8:0a:28:
b5:ed:5d:22:66:9f:48:3f:23:9d:e7:a3:53:5e:8a:d3:95:ca:
fd:d5:00:9e:df:b5:01:71:ba:44:48:ba:bb:79:75:52:c1:4a:
40:6e:40:4d:b6:58:b1:50:ef:d5:92:2a:53:02:97:35:a9:83:
0d:1f:1a:d2:b5:18:cc:26:4d:09:9b:e6:94:d3:6d:85:f1:09:
7d:81:fc:a7:29:f0:94:46:61:01:51:8d:80:9e:5c:19:9e:bd:
b9:d4:d3:ed:52:88:f4:6f:31:be:d6:53:a4:48:25:ae:08:15:
6b:07:0d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:03:48 2025 by rpki-client