Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/onaCDvRX81R2vNATJMRrb7DJqkY.roa
File: onaCDvRX81R2vNATJMRrb7DJqkY.roa (raw, json)
Hash identifier: hIck6LPYONGb+68pl8cjQgSPu5aSY1sJ2O4G+GtLiOg=
Subject key identifier: A2:76:82:0E:F4:57:F3:54:76:BC:D0:13:24:C4:6B:6F:B0:C9:AA:46
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01953D87AF2D5F9072A332F47F24B47796DB
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/onaCDvRX81R2vNATJMRrb7DJqkY.roa
Signing time: Tue 25 Feb 2025 14:34:17 +0000
ROA not before: Tue 25 Feb 2025 14:34:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212701
IP address blocks: 147.45.198.0/24 maxlen: 24
147.45.199.0/24 maxlen: 24
147.45.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:87:af:2d:5f:90:72:a3:32:f4:7f:24:b4:77:96:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 25 14:34:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a276820ef457f35476bcd01324c46b6fb0c9aa46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:9b:2b:65:38:b5:18:d1:c3:94:67:3a:49:
fb:b7:d1:10:48:3e:13:d9:e8:a0:21:34:b2:6f:81:
e1:e6:40:6b:bd:e0:b0:4b:a1:a8:cf:20:17:d5:fa:
f5:5a:e3:88:40:de:a8:f0:58:95:41:8b:f9:9b:50:
c0:36:14:84:5f:8d:a3:93:44:03:76:a0:da:a1:4a:
03:63:11:16:cc:93:f0:12:db:f1:62:70:a8:dc:a1:
fc:d1:fb:bb:2c:1e:47:33:99:ee:65:c0:ce:d9:ad:
65:a6:16:5f:1b:44:54:23:20:63:af:4d:72:5b:e3:
b1:07:df:85:cc:d0:18:63:4f:a3:10:77:22:c7:cf:
17:fe:96:e2:4c:82:8f:1f:55:c4:d2:d4:87:a3:af:
77:9e:80:2e:d9:c6:d0:a2:b6:ad:a2:02:04:27:8a:
76:30:67:da:96:04:5d:b8:d8:c2:69:9a:f2:81:66:
7c:a9:22:c6:4e:44:12:1a:f6:0f:81:5a:87:b3:5c:
2b:5a:0f:d6:ae:12:14:8e:fc:c3:ba:24:c5:7f:5f:
13:e0:74:bc:e5:73:e0:de:6e:0a:7f:65:de:d9:35:
ed:dd:45:1b:36:06:58:46:1c:d1:40:40:b1:70:05:
c4:b7:e7:3a:f0:b1:b0:29:65:74:9d:56:ef:55:ff:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:76:82:0E:F4:57:F3:54:76:BC:D0:13:24:C4:6B:6F:B0:C9:AA:46
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/onaCDvRX81R2vNATJMRrb7DJqkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.198.0/23
147.45.218.0/24
Signature Algorithm: sha256WithRSAEncryption
58:18:49:81:af:59:5a:bf:08:6d:7d:6a:5a:3c:5f:85:40:01:
6b:c0:3b:5c:7a:3c:ed:d9:a8:e0:32:ca:d4:9e:e1:61:cf:ad:
42:79:dd:1f:6a:db:00:89:0f:25:c4:1a:e9:8f:ba:a3:53:b7:
6d:2b:08:f7:00:4d:32:ac:64:da:b4:17:6b:d2:c1:f3:8d:47:
11:24:77:52:4f:34:f9:e2:22:e7:d7:9f:85:e5:0f:a5:8a:d1:
5a:c0:51:2e:62:f5:71:b5:04:89:ed:24:1e:6a:6e:a5:a4:48:
94:8a:14:c5:b7:ef:41:63:2d:ae:eb:2c:51:89:8c:97:61:d5:
dd:27:fe:92:3a:9a:c6:c7:83:9b:fc:cd:50:26:ae:72:75:08:
a7:ee:8f:45:63:87:dc:89:e1:a1:24:dd:03:14:21:6b:e9:7f:
e0:d2:ca:ff:e2:1d:2c:03:31:00:37:be:ec:93:16:c9:6d:71:
31:32:62:0a:5c:93:28:be:80:ab:4f:4c:ed:2f:3c:7f:77:f2:
2e:81:07:38:b8:c3:38:9e:2d:eb:de:20:cd:f0:aa:93:ec:3c:
cb:1a:23:71:da:1b:ba:40:2a:cc:e4:9e:1a:0f:60:b1:52:b2:
df:16:6b:e9:58:94:34:80:d5:02:92:7b:0e:dc:de:45:f9:93:
23:4e:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:10 2025 by rpki-client