Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa
File: DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa (raw, json)
Hash identifier: 00oXnXEmoCajVRqJ5SAY3Z4mponT7rL20+QYAvfx80c=
Subject key identifier: 0D:25:59:E4:B5:87:32:F5:44:8F:1D:8B:CB:C1:E8:82:F7:C6:6D:E8
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 019420683EE406774CE93EB9A6944572F69E
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61297
IP address blocks: 194.146.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3e:e4:06:77:4c:e9:3e:b9:a6:94:45:72:f6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2559e4b58732f5448f1d8bcbc1e882f7c66de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fb:77:30:01:16:0b:26:cb:9f:39:57:d8:43:
ec:ba:e6:4c:e2:f9:35:93:ab:e4:d3:3c:72:72:de:
fb:21:e8:b7:97:0f:96:dc:38:85:38:42:a4:35:f9:
ae:24:9c:b9:00:2a:5a:db:4d:d0:06:71:f9:de:76:
87:7e:4c:f2:bd:c7:cc:60:94:1e:20:5e:09:19:9a:
c2:9c:b5:ac:86:a8:4e:06:d7:30:80:91:50:c6:90:
3b:29:d7:17:05:80:eb:eb:74:30:e7:98:3a:d2:ed:
1b:70:a3:4d:df:f3:08:7d:76:18:82:60:ea:76:b3:
37:02:0a:3f:db:f1:8d:01:0b:73:6b:70:e6:dd:c3:
10:e5:30:0a:a4:0d:17:f7:d2:7a:04:af:9c:85:1f:
70:e1:da:76:67:38:11:76:79:65:c9:fc:38:c5:2c:
b2:a1:bf:55:e6:ae:dd:fd:b7:1d:3a:c4:ca:f9:e6:
f7:50:6b:2c:06:19:e8:17:2c:9c:22:a9:e2:60:b4:
7d:99:e5:95:4c:1a:73:8d:ff:be:f7:c9:bc:cc:de:
e0:35:25:d7:32:c8:e1:b1:3b:e3:5d:a0:11:1c:18:
a2:70:12:ef:60:5d:6e:c4:4f:46:59:e4:0a:f8:19:
0c:db:ec:5a:0d:2d:fa:32:58:55:9c:cb:32:72:cc:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:59:E4:B5:87:32:F5:44:8F:1D:8B:CB:C1:E8:82:F7:C6:6D:E8
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c1:99:6d:bc:e3:6e:ab:99:7e:7d:60:30:21:27:f6:00:1f:
72:3a:9e:9c:d8:9b:27:b9:a1:21:56:a4:0a:ee:0f:99:84:60:
c7:47:08:d5:41:2d:ae:14:f1:d7:8c:ba:39:2b:de:41:b1:f3:
9d:0b:2b:bf:8d:aa:9c:c9:c1:1f:fe:3d:de:57:e3:09:a3:ee:
0c:6d:69:86:49:d4:ea:db:24:ac:cf:e2:e1:a4:85:a8:d3:7d:
a8:7c:22:98:4d:e3:8a:62:1d:5d:a6:fa:bc:ef:4f:ca:0f:7f:
ce:be:77:e8:8b:4a:83:8c:a9:73:da:aa:69:0d:13:78:13:eb:
2f:3d:55:a3:9e:69:88:d5:2a:77:34:a5:46:35:1b:ac:eb:ea:
e3:40:3e:25:95:f5:77:5b:b7:1f:f8:0d:84:96:63:32:e6:70:
ce:8d:f5:f6:6d:be:64:95:22:b3:c1:3b:36:47:be:1d:8a:07:
c4:76:65:e5:07:20:f3:25:c6:32:1a:8f:0f:a9:95:20:2f:d0:
af:34:ad:f1:a9:f0:d9:1c:28:78:b3:03:0a:cb:87:fb:53:47:
67:63:c6:59:7f:07:3e:d0:62:fe:4a:35:3f:c6:1e:0d:14:78:
7b:8b:59:80:af:dd:fa:5e:12:d4:80:5e:3c:0a:e4:e3:0f:39:
3c:5a:0e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:46 2025 by rpki-client