Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/OrR8ArTb8w0zfL8vZIwz8tbKQ2c.roa
File: OrR8ArTb8w0zfL8vZIwz8tbKQ2c.roa (raw, json)
Hash identifier: DXI54xHOK1LCP4IfsOxKtDE/CK97CgmE5qjdIRspp1k=
Subject key identifier: 3A:B4:7C:02:B4:DB:F3:0D:33:7C:BF:2F:64:8C:33:F2:D6:CA:43:67
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 0194228D906244A2C2A9AE5F5B297FBC00EF
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/OrR8ArTb8w0zfL8vZIwz8tbKQ2c.roa
Signing time: Wed 01 Jan 2025 15:48:10 +0000
ROA not before: Wed 01 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33821
IP address blocks: 195.28.176.0/24 maxlen: 24
195.28.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:90:62:44:a2:c2:a9:ae:5f:5b:29:7f:bc:00:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ab47c02b4dbf30d337cbf2f648c33f2d6ca4367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:09:a8:93:e0:69:8f:6a:23:7e:79:35:78:
85:f3:f3:bf:e1:ef:31:16:0f:fb:f0:03:f5:8a:f9:
27:3f:7b:86:65:39:94:2e:d1:d8:33:f7:6f:b3:3d:
ef:19:91:82:c1:ee:69:3e:5e:38:63:b6:68:1c:f8:
2e:d1:e6:9d:96:dd:e0:42:69:5d:39:72:f6:72:1b:
97:53:87:47:fa:03:d3:c6:e0:cf:d8:f6:c3:d2:ac:
87:3a:1c:d8:5e:a0:96:5c:f8:f0:c7:d3:94:07:a8:
7e:3f:74:e3:ce:c6:62:dd:60:47:76:3b:57:46:09:
95:c9:82:e6:e9:f9:98:a9:54:8d:8e:42:36:dc:bd:
0f:81:81:ed:77:14:0c:c4:8c:c2:1e:e4:11:f2:02:
79:07:85:d4:dc:69:03:e0:07:d7:97:ad:18:b6:76:
d3:0a:89:cf:3f:ab:b8:6e:7a:15:57:55:a8:98:c9:
c2:b3:cf:22:ce:a1:20:f6:4d:cd:e3:c3:a2:49:5c:
87:99:83:7f:f2:7d:e1:5f:38:21:d7:bb:be:04:88:
f5:33:58:18:33:ea:c0:29:07:e5:fe:85:ad:51:2b:
10:0f:08:97:e8:99:73:b7:a4:22:02:c6:f0:5f:8e:
d9:4c:bb:3b:dd:2b:75:53:fa:6e:46:c5:60:d5:94:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B4:7C:02:B4:DB:F3:0D:33:7C:BF:2F:64:8C:33:F2:D6:CA:43:67
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/OrR8ArTb8w0zfL8vZIwz8tbKQ2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.176.0/23
Signature Algorithm: sha256WithRSAEncryption
54:9a:de:55:14:cf:ac:af:84:32:f0:db:8f:0b:95:20:26:5c:
c6:15:37:f3:10:25:b9:ae:7a:ce:6b:3e:a3:8e:7c:64:78:6f:
67:2b:db:c6:5a:75:2f:f0:aa:53:7e:e2:a0:d1:a3:ba:85:62:
82:bf:dd:0a:53:d4:97:89:02:70:46:4d:3d:5b:82:a1:44:ad:
bf:91:67:15:0d:e4:4c:2e:d0:ab:d3:7d:92:e6:2b:6d:b5:d0:
b7:e6:7b:ff:4d:de:70:2f:4d:cf:0e:1f:7e:13:98:48:12:59:
5d:1b:74:b7:23:22:c2:9f:7d:f7:47:40:4c:ef:01:7b:3b:77:
01:c1:94:a8:ba:75:97:99:32:5d:d3:78:29:76:70:80:aa:46:
a2:24:00:ee:59:99:ef:66:f9:38:e5:98:22:e8:8c:ca:ea:73:
e8:39:f9:9d:9f:29:d8:db:d4:5c:5b:66:8a:73:5c:d9:f8:3f:
5c:d1:34:3a:a9:86:c9:a0:e9:81:92:c3:0c:e4:a5:ea:e7:78:
53:c9:79:51:54:d3:f9:ca:20:16:e3:97:e7:3e:38:8d:63:36:
bb:c8:a6:27:5b:f8:9f:a7:8e:3e:c1:4b:f9:03:af:d4:e1:ad:
69:96:02:67:26:7b:89:02:03:94:d7:c8:56:fb:d6:e8:85:90:
f0:e3:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:12 2025 by rpki-client