Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cD2zSoneV5bKUBbxDZa5_MpzOwU.roa
File: cD2zSoneV5bKUBbxDZa5_MpzOwU.roa (raw, json)
Hash identifier: 7HvVSo3NpW93F/+Bzxf2QReKx/o3GIFmQRZzdeAyqh0=
Subject key identifier: 70:3D:B3:4A:89:DE:57:96:CA:50:16:F1:0D:96:B9:FC:CA:73:3B:05
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427489DFA185026EB055001DC950F2A25
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cD2zSoneV5bKUBbxDZa5_MpzOwU.roa
Signing time: Thu 02 Jan 2025 13:50:57 +0000
ROA not before: Thu 02 Jan 2025 13:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212508
IP address blocks: 152.89.254.0/24 maxlen: 24
152.89.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 19:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:9d:fa:18:50:26:eb:05:50:01:dc:95:0f:2a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=703db34a89de5796ca5016f10d96b9fcca733b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:ac:f7:31:26:6c:d9:1d:c2:62:2f:b6:76:
6c:13:f8:a7:e8:7b:26:92:70:20:03:30:49:67:20:
0e:4d:41:2c:45:32:9f:f0:99:ec:30:f7:d6:86:fb:
59:5f:dc:c3:da:e2:3d:f4:06:d9:da:60:f4:9e:7f:
f3:b7:f0:58:f4:1d:49:03:69:e9:33:03:30:90:a9:
5b:b0:62:f4:d2:4f:ba:b6:d3:2d:62:92:67:90:87:
21:bc:55:f8:3f:ea:da:34:46:6e:76:b5:e6:95:68:
4e:93:e2:e9:88:32:5b:72:e3:9c:dd:75:53:19:4b:
44:fe:0f:f0:a3:40:7b:82:cc:a3:aa:a9:7f:33:66:
d7:13:62:e2:f7:38:f2:64:5d:b1:0f:28:8a:06:17:
6f:75:ff:25:69:99:8e:91:71:80:0b:44:0e:59:0e:
cb:79:87:c4:5b:1c:ee:23:1c:28:a4:e1:52:f7:1a:
51:64:bf:9a:58:ce:5c:75:47:bc:40:5e:ea:09:97:
df:36:d1:0a:10:b6:fd:55:bf:30:74:f0:f7:06:46:
81:68:1d:76:6b:48:4c:d3:ea:1f:1e:c8:b1:a6:d4:
4c:87:ff:e5:fe:e7:ba:a5:d6:97:6f:cf:95:a9:5e:
0c:51:67:79:91:91:39:63:9c:47:69:bf:67:84:88:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3D:B3:4A:89:DE:57:96:CA:50:16:F1:0D:96:B9:FC:CA:73:3B:05
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cD2zSoneV5bKUBbxDZa5_MpzOwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.254.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:af:34:df:3e:2d:16:71:86:c8:e9:a8:82:7f:f1:f5:c8:a7:
01:4c:6a:3b:8a:62:10:84:03:26:d6:4a:92:91:53:09:c0:eb:
19:af:40:8a:e9:60:da:62:51:74:ce:9d:dc:ca:c1:be:fe:85:
26:9c:ef:da:26:00:f2:18:05:e6:af:16:b8:86:91:8a:8e:fa:
c2:65:b6:e8:79:e6:7e:fc:fa:b6:bb:02:dd:b7:0f:de:ed:85:
f3:08:94:25:84:95:5d:91:0d:92:72:01:fe:dd:3e:af:99:1f:
c3:33:b3:eb:28:09:97:e7:e9:9b:7d:ba:59:79:61:18:aa:76:
16:34:27:81:74:14:22:87:25:fa:2d:30:69:7b:f6:bf:04:14:
d3:fe:16:82:46:c2:61:21:ae:21:f5:a7:89:23:56:6f:49:5e:
b0:5a:04:ad:be:2f:49:12:76:3c:a3:2d:6f:d1:50:f5:cc:3e:
24:34:c0:4e:42:4c:52:68:7e:17:c2:0d:05:03:f5:3e:1a:17:
b1:17:29:89:3e:fb:e6:06:8a:bf:43:91:6c:20:a5:a1:2a:b3:
a3:cf:f5:1a:57:f3:24:c9:94:cc:53:ca:69:57:94:70:d9:29:
c0:bb:ff:93:22:14:23:d5:e3:68:3f:5e:79:bd:c2:7f:c6:b5:
5f:dc:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 05:42:03 2025 by rpki-client