Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/M3ChRRCC95VWNUgT2kzwMTdPSS4.roa
File: M3ChRRCC95VWNUgT2kzwMTdPSS4.roa (raw, json)
Hash identifier: E6eER/DfbXmaLYyM9UUARrZCyqn2G0qstMCDWv5urp8=
Subject key identifier: 33:70:A1:45:10:82:F7:95:56:35:48:13:DA:4C:F0:31:37:4F:49:2E
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 019427B644FA76D0DEC483CE84ED030D1ED5
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/M3ChRRCC95VWNUgT2kzwMTdPSS4.roa
Signing time: Thu 02 Jan 2025 15:50:44 +0000
ROA not before: Thu 02 Jan 2025 15:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 146.255.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:44:fa:76:d0:de:c4:83:ce:84:ed:03:0d:1e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 15:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3370a1451082f79556354813da4cf031374f492e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:df:07:8d:93:b5:2f:27:69:2f:c3:ed:ba:
11:62:2b:5e:d3:47:fc:af:3f:6e:50:34:e6:a9:af:
34:a3:89:45:5a:3c:10:bc:bd:20:9e:cb:bf:bf:ad:
d4:35:a0:f5:00:54:6b:4c:ef:49:67:0e:51:0c:24:
8d:64:ae:8d:b4:fc:4a:c6:1f:34:a3:48:27:f1:8c:
86:d3:98:3f:ff:d8:ee:72:57:7e:49:27:3a:85:d8:
52:c2:3c:81:fd:66:f0:70:57:ca:11:ef:83:bb:d3:
5c:8b:dd:d9:3e:67:5f:aa:1b:23:8d:f8:d4:7f:a2:
32:c7:8e:66:4c:14:0d:c8:87:d7:11:d4:61:19:28:
7a:e3:1d:5e:18:9d:e1:9a:0f:fa:50:b6:ae:fb:11:
66:21:ee:70:96:8e:e3:61:67:4e:f2:54:31:db:26:
d3:06:2f:e2:ab:1d:34:49:f7:54:f1:f5:85:81:cc:
5c:a2:d6:eb:ea:06:76:4f:f1:f2:9d:1d:b8:0e:9b:
02:55:1d:18:80:f1:3d:07:5d:f1:12:31:db:92:ec:
4a:1c:04:f5:fc:53:39:60:3d:00:ad:d9:9c:59:d6:
a8:f9:57:41:cb:c9:f4:0d:90:bb:95:e0:39:08:39:
47:d7:08:7c:18:20:68:ab:bb:d6:6d:2b:6a:d4:fe:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:70:A1:45:10:82:F7:95:56:35:48:13:DA:4C:F0:31:37:4F:49:2E
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/M3ChRRCC95VWNUgT2kzwMTdPSS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.32.0/22
Signature Algorithm: sha256WithRSAEncryption
96:ce:40:fc:c0:cb:38:98:5c:0d:f5:66:00:93:27:63:3d:20:
c7:32:5a:f7:43:3c:3b:63:4f:59:ee:b5:f6:ba:99:ce:43:fe:
8e:ee:d3:da:8a:f4:74:75:e5:b3:52:23:4a:5b:c6:35:7b:af:
0a:a6:25:87:8e:00:1f:c9:4b:77:c5:7d:8c:85:96:17:6d:cc:
8e:d1:8b:d9:56:f1:34:0b:f0:ee:05:4d:fa:af:94:19:b9:9e:
4d:f5:4c:5a:a6:38:78:91:74:66:d7:06:cc:b8:cf:50:d7:8e:
2b:df:2b:c7:74:69:ba:b3:4b:d5:95:dd:a6:59:53:d0:aa:79:
89:15:86:17:ec:f4:59:6f:26:4f:e7:38:77:86:a2:b9:4b:f2:
f5:63:6c:0b:6c:2f:9f:40:16:0a:cb:a3:eb:ed:35:fc:59:49:
2f:97:da:5d:fa:0d:88:7f:fc:c1:2a:8a:c3:b7:4b:25:01:7c:
2f:cc:cc:03:50:37:44:e5:77:bd:6d:9a:c0:52:0e:dd:12:dc:
56:f1:90:a9:ce:e4:91:2c:28:c7:de:e9:0f:d0:35:5e:76:9e:
82:c3:79:90:83:94:64:a6:8d:f6:fc:78:c5:db:ba:7a:cc:80:
d9:f1:5e:6c:a5:9a:4a:e1:a7:f8:fa:28:69:29:96:ed:fe:e7:
d9:b6:c9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:38 2025 by rpki-client