Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/OIDmEPbDXYESb6L8W110fitW4aA.roa
File: OIDmEPbDXYESb6L8W110fitW4aA.roa (raw, json)
Hash identifier: AIH3VvHzWUC8AtgPyCBt/ld6YdiGtY4TDL+tLd/3C+w=
Subject key identifier: 38:80:E6:10:F6:C3:5D:81:12:6F:A2:FC:5B:5D:74:7E:2B:56:E1:A0
Certificate issuer: /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial: 019428235ED3AA36D37FF32C82B422EBDB1C
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/OIDmEPbDXYESb6L8W110fitW4aA.roa
Signing time: Thu 02 Jan 2025 17:49:54 +0000
ROA not before: Thu 02 Jan 2025 17:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.147.164.0/24 maxlen: 24
45.147.165.0/24 maxlen: 24
45.147.166.0/24 maxlen: 24
45.147.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:5e:d3:aa:36:d3:7f:f3:2c:82:b4:22:eb:db:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Validity
Not Before: Jan 2 17:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3880e610f6c35d81126fa2fc5b5d747e2b56e1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:f0:34:0b:f7:ef:af:e1:b1:da:c4:8f:a9:
da:72:2e:c5:13:6f:c7:a7:9d:1f:d6:7b:f9:79:27:
eb:64:cd:3f:50:18:10:18:c3:5e:c5:f4:67:bf:3d:
fa:ae:83:23:4d:25:63:2e:da:fa:c9:01:53:3f:3c:
dc:12:4c:9f:84:17:ea:8e:e9:3f:d2:11:32:1b:7b:
d7:e7:91:2f:3c:e0:90:e7:9e:e6:c7:48:83:ae:9d:
ea:ee:4a:5c:2d:31:aa:17:ac:0d:70:51:5b:7b:1d:
85:c2:53:f1:fc:70:30:76:a9:b5:a6:4b:1c:85:de:
1c:b2:94:c2:66:0d:4d:66:b9:e0:4b:49:52:0f:8b:
5f:6c:d0:91:71:a3:ae:66:98:80:9c:73:93:68:dc:
4f:b8:8a:e8:60:b3:5a:70:06:6c:e3:18:f7:64:3a:
f2:3e:6e:85:ee:e5:26:e1:b1:5c:3a:89:73:7b:66:
c4:49:0b:b7:3b:f9:c3:65:a1:88:4a:f7:76:0c:b4:
89:13:4a:a4:be:7f:66:01:e4:8a:5a:47:f4:34:28:
4c:94:66:56:7e:fa:cf:46:58:88:49:b0:37:ff:ad:
f5:ab:e8:0c:04:b1:68:a1:d8:87:02:74:46:13:a2:
fe:4e:4d:0f:21:57:b2:58:e0:b3:21:af:46:a4:c5:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:80:E6:10:F6:C3:5D:81:12:6F:A2:FC:5B:5D:74:7E:2B:56:E1:A0
X509v3 Authority Key Identifier:
keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/OIDmEPbDXYESb6L8W110fitW4aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.164.0/22
Signature Algorithm: sha256WithRSAEncryption
06:f9:47:d1:09:c4:b4:e2:91:00:e4:c2:43:5b:0b:aa:83:80:
82:39:ba:63:b2:b5:30:c1:d9:5e:0e:a5:6a:60:6c:2a:65:80:
8e:ec:19:b5:4f:9f:57:f5:70:b3:36:e7:da:59:21:6f:cd:d5:
a1:07:12:41:b8:6b:80:29:14:41:23:3c:14:e4:96:40:a0:25:
a2:ab:fd:ce:00:c6:dc:b9:cb:a3:19:31:e4:b8:32:24:78:92:
e7:60:13:b6:56:2f:49:40:27:c9:85:8d:b4:25:63:8f:f7:4a:
8b:dc:ed:1d:13:3e:e4:bc:20:33:de:0f:86:4d:ab:10:98:f1:
0c:98:4c:d0:6d:d9:3f:5c:28:b3:6b:99:f3:5f:3e:78:a4:84:
8e:12:c8:64:95:13:c9:af:13:24:bf:c8:37:91:8d:62:85:f0:
10:fd:8e:1f:be:4e:bf:0b:08:87:bc:b5:d7:51:47:5e:9d:2e:
49:f4:8d:b4:36:68:e5:f8:2e:a7:3d:a5:e4:3e:71:72:96:aa:
7e:a5:52:03:47:ee:7a:f3:56:ca:2b:bf:16:7d:c8:8e:5d:74:
e8:95:76:ce:bf:e3:7e:c4:13:c3:97:3e:e0:64:f7:dc:04:e0:
db:48:05:4a:d3:9a:6f:f8:77:aa:21:17:df:62:5f:d2:37:6e:
01:f4:a5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:38:46 2025 by rpki-client