Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/o24RSXriLAReI_2fGCloRnrM-3M.roa
File: o24RSXriLAReI_2fGCloRnrM-3M.roa (raw, json)
Hash identifier: hKV7bSg08DCB1C/5s0Z0dvwE++jg27oT2PwK4UhEZVo=
Subject key identifier: A3:6E:11:49:7A:E2:2C:04:5E:23:FD:9F:18:29:68:46:7A:CC:FB:73
Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Certificate serial: 019425FDCC7DA581F117948211E13FF514B0
Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/o24RSXriLAReI_2fGCloRnrM-3M.roa
Signing time: Thu 02 Jan 2025 07:49:37 +0000
ROA not before: Thu 02 Jan 2025 07:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 147.122.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cc:7d:a5:81:f1:17:94:82:11:e1:3f:f5:14:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e
Validity
Not Before: Jan 2 07:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a36e11497ae22c045e23fd9f182968467accfb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a8:f8:0b:3b:18:76:b8:ac:fb:c3:44:fe:20:
0b:bd:55:0d:2d:ae:28:8a:50:fc:a3:91:7e:0d:24:
f1:92:81:29:d5:50:50:8d:d1:0a:82:ae:96:aa:4f:
d1:32:6d:4f:eb:68:62:63:59:f9:bf:0f:db:9f:05:
e9:8e:a0:ad:53:b1:47:4a:a8:e8:bd:cc:e0:79:46:
3b:68:66:03:6a:f3:79:12:69:9f:85:90:ab:a6:3b:
b6:ab:86:86:9e:25:90:30:2c:2e:84:1e:be:6a:b0:
e8:4f:bd:84:8a:a5:40:dd:e0:ca:f3:83:b3:5a:4a:
21:de:58:6f:3d:7a:83:ed:9c:ad:91:a1:56:9f:c2:
3f:68:f4:07:c9:e4:1e:78:4c:5a:44:e4:92:51:40:
c1:89:1d:d3:d1:7c:bc:57:6a:98:78:9b:23:63:c0:
e4:06:4e:a1:9f:0f:58:ce:4e:34:d4:aa:2e:1a:f1:
e6:21:06:98:82:d7:5c:a7:50:3c:d5:da:25:d4:ba:
35:0e:7a:93:43:26:0c:c4:99:08:8a:85:30:04:84:
af:27:11:d4:b2:78:6e:f1:c8:cf:06:63:a0:90:f1:
fa:2c:59:92:f0:1f:d3:27:65:1d:9d:62:6a:b5:23:
fa:8c:0e:f2:da:f3:1b:1d:2e:2d:97:1b:2c:08:cc:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6E:11:49:7A:E2:2C:04:5E:23:FD:9F:18:29:68:46:7A:CC:FB:73
X509v3 Authority Key Identifier:
keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/o24RSXriLAReI_2fGCloRnrM-3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.122.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:9c:dd:1b:97:f1:eb:31:aa:1c:48:56:44:17:75:0f:76:6e:
cb:cb:b8:97:df:48:85:4f:fe:60:cb:b7:86:20:12:eb:74:08:
46:ae:f8:68:22:ea:e6:33:58:27:22:2f:7f:68:7a:c0:47:73:
97:61:58:ab:6e:ea:f0:55:ca:9d:e8:d7:97:61:25:c4:55:b0:
28:a8:da:b2:ae:9e:d7:5c:fe:b6:30:8c:75:e7:73:79:ca:c6:
40:4a:94:e0:92:b8:1f:51:c5:7f:e4:ce:7e:f2:7a:0a:e6:e9:
80:ee:90:71:03:4b:52:9b:c3:03:60:80:98:45:99:0d:6d:91:
59:5a:9c:72:9c:92:ca:79:12:12:a0:f8:0d:51:94:ba:7d:5b:
81:64:34:8f:cc:f2:ef:f4:20:75:3c:9d:2e:d5:87:fd:b4:91:
69:26:75:50:be:a5:41:51:d4:fc:70:ac:09:26:7f:43:ed:b8:
7c:33:37:10:cc:90:30:4f:71:17:3b:c3:bb:bb:41:c6:14:90:
ed:63:70:56:15:d6:d5:6f:08:bf:e4:b3:5a:f4:20:43:8d:3e:
12:e4:17:48:75:58:98:d5:9b:ad:24:5a:66:ff:ec:94:0a:4f:
11:ac:ae:ef:12:2f:7b:52:2b:1d:ec:ae:2f:85:19:46:77:0e:
12:1f:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:47 2025 by rpki-client