Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/102Rcb8KW1Pgg5SOwqYp5kasBLk.roa
File: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (raw, json)
Hash identifier: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=
Subject key identifier: D7:4D:91:71:BF:0A:5B:53:E0:83:94:8E:C2:A6:29:E6:46:AC:04:B9
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 019423D772B7D00406B6E8F8E3C4B551A9CC
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/102Rcb8KW1Pgg5SOwqYp5kasBLk.roa
Signing time: Wed 01 Jan 2025 21:48:29 +0000
ROA not before: Wed 01 Jan 2025 21:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209117
IP address blocks: 46.172.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:72:b7:d0:04:06:b6:e8:f8:e3:c4:b5:51:a9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d74d9171bf0a5b53e083948ec2a629e646ac04b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:56:d8:ae:19:e1:2b:6e:e3:50:61:0f:98:
08:9a:09:f6:a4:43:b7:e3:52:d1:84:a2:f2:38:90:
04:de:38:02:3a:d0:f3:6a:b9:42:00:e5:0f:79:e8:
89:2f:1b:af:c3:dd:fb:6f:ff:cb:9e:92:ce:e6:6c:
89:31:9e:86:6e:78:53:8f:b7:d7:fe:e5:f4:88:d5:
3d:ab:78:d3:c2:85:85:5b:75:4b:09:c0:89:be:f8:
64:15:e0:8c:ec:06:23:1a:8f:ef:a8:ef:bb:f6:41:
dd:e2:00:cd:d2:3f:6e:68:99:0e:92:78:04:67:a1:
41:3d:53:5a:04:46:10:cd:86:c6:fc:6f:31:fb:7f:
ac:f3:d8:ba:0c:21:27:0e:5c:3d:16:a8:06:19:c0:
03:dc:79:22:d4:5a:0e:ee:5b:4f:14:78:34:57:29:
19:73:d5:01:f9:95:2d:cd:91:13:35:76:32:3a:05:
57:51:0c:63:cf:b3:dd:64:a8:af:0c:26:c8:5e:2e:
08:7f:37:98:0a:5e:20:5f:09:b7:3c:a0:a1:1b:ff:
e1:99:3a:2b:1f:f2:b6:f9:a0:df:2d:d5:f8:e6:57:
19:b0:01:f2:8c:72:54:e1:22:48:4b:78:f9:21:8b:
44:5a:a0:4a:aa:f5:f1:a6:f0:c2:8c:a1:65:02:a5:
d5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4D:91:71:BF:0A:5B:53:E0:83:94:8E:C2:A6:29:E6:46:AC:04:B9
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/102Rcb8KW1Pgg5SOwqYp5kasBLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.78.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4f:0c:27:f6:86:f6:08:d8:32:a2:b5:a7:fa:11:d0:cc:36:
cb:95:1c:f0:26:50:71:91:7a:90:1c:d9:63:8e:5f:f0:b3:c6:
05:b7:80:2c:6d:56:4a:89:e6:26:02:cd:c5:73:5a:ec:e1:b4:
72:44:56:bd:19:cd:7b:aa:ca:1c:46:65:dd:1c:52:9d:ee:ca:
b9:20:10:f4:b8:cb:49:38:7c:42:d9:60:b0:4d:99:63:d7:90:
cd:80:6e:28:8f:7c:75:65:0b:e1:e9:b0:fc:4e:a4:97:57:23:
ae:82:fc:ea:48:4f:b5:bb:51:4c:84:6a:d9:cc:73:b0:a2:e2:
b0:4c:39:db:79:3f:5f:e3:39:00:49:33:54:07:2d:b3:3d:d9:
97:69:d3:f3:54:a4:91:5b:f2:ab:c3:d8:79:fb:7d:d7:a8:de:
0e:a8:02:98:ba:c6:fa:21:ee:0f:aa:0e:ea:21:4e:37:74:6f:
c4:19:7b:19:b3:5d:6f:06:81:e5:b4:c8:ff:85:c9:e5:6b:17:
cd:e1:a0:ce:d1:ec:7b:04:4d:f8:53:77:7e:40:7b:e9:71:00:
6f:7d:1c:10:bf:d8:5c:75:bc:1f:4b:08:62:16:2b:16:88:37:
1e:12:93:65:bc:9f:2b:79:12:23:be:61:97:d1:e0:a8:2e:8a:
eb:88:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:59 2025 by rpki-client