Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/o9FehwTiBMPE9yCCuB0IqHRlIFc.roa
File: o9FehwTiBMPE9yCCuB0IqHRlIFc.roa (raw, json)
Hash identifier: SabGSNZQ6FTjmNb2cwUUBz59QnrdeX8R8DVaKauL3fg=
Subject key identifier: A3:D1:5E:87:04:E2:04:C3:C4:F7:20:82:B8:1D:08:A8:74:65:20:57
Certificate issuer: /CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Certificate serial: 0194228D1CED9103B8D25BCE4F67C093C491
Authority key identifier: 1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/o9FehwTiBMPE9yCCuB0IqHRlIFc.roa
Signing time: Wed 01 Jan 2025 15:47:40 +0000
ROA not before: Wed 01 Jan 2025 15:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52106
IP address blocks: 45.148.40.0/22 maxlen: 22
194.60.202.0/24 maxlen: 24
194.60.205.0/24 maxlen: 24
194.61.56.0/24 maxlen: 24
194.61.159.0/24 maxlen: 24
194.180.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:1c:ed:91:03:b8:d2:5b:ce:4f:67:c0:93:c4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a885c37e747bce23ee9097e5ff7e983bcba0db4
Validity
Not Before: Jan 1 15:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3d15e8704e204c3c4f72082b81d08a874652057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2d:37:1c:6b:2e:dd:bc:2d:d4:2a:eb:b9:3e:
c1:f5:f0:ae:68:6d:80:41:13:a6:d5:03:c6:ac:21:
8f:12:27:85:8e:e9:7e:c4:6c:80:21:c7:27:e9:2a:
87:66:43:57:8f:c7:a0:d4:33:b0:3d:2c:c0:d2:ce:
09:1e:57:75:ec:36:18:52:a9:e1:ba:c5:78:f5:48:
0e:11:95:3b:e4:a1:71:52:31:0d:3a:23:79:0e:42:
08:ad:bc:68:fd:a0:47:6e:92:48:ff:f2:61:8b:4c:
58:a0:0b:82:71:7e:42:85:8c:5e:43:2a:25:eb:04:
65:09:63:aa:12:a6:b7:6a:15:25:d6:20:d4:ef:bd:
d5:fc:4c:70:3e:79:c5:cf:c4:33:06:4f:e5:9b:cf:
79:0d:22:de:5f:c3:d8:a8:99:34:8b:33:73:5b:8c:
76:0c:cd:25:96:96:7e:60:b9:16:4a:5b:1b:3e:0e:
b5:92:a2:71:dc:84:f3:f8:ae:31:6a:7d:15:91:df:
a0:78:19:ce:11:83:62:0f:01:64:80:24:05:5a:c8:
a1:e0:0f:70:1f:1e:41:60:66:32:78:a3:4d:fa:a6:
66:6e:7b:ed:4a:39:97:85:96:b0:37:5f:d3:ef:b1:
13:63:92:72:a3:d7:37:04:69:75:7d:96:aa:1b:e8:
ac:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D1:5E:87:04:E2:04:C3:C4:F7:20:82:B8:1D:08:A8:74:65:20:57
X509v3 Authority Key Identifier:
keyid:1A:88:5C:37:E7:47:BC:E2:3E:E9:09:7E:5F:F7:E9:83:BC:BA:0D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/o9FehwTiBMPE9yCCuB0IqHRlIFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c54214-52d5-46dc-9939-c1402d261432/1/GohcN-dHvOI-6Ql-X_fpg7y6DbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.40.0/22
194.60.202.0/24
194.60.205.0/24
194.61.56.0/24
194.61.159.0/24
194.180.44.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:07:20:6b:b7:ed:cd:de:97:c7:f9:ae:7e:4d:3d:ed:66:6f:
1f:5a:f8:0a:2a:69:0c:ec:b9:bb:d5:d2:9f:f6:b8:d5:1a:3b:
d6:30:1a:f6:60:ae:36:78:41:a3:fc:fc:41:f6:8e:c0:17:fc:
44:72:d9:78:2b:16:69:31:1f:3b:a1:65:bd:e8:25:0e:54:99:
cf:09:89:18:39:c4:2f:7c:e9:17:21:fc:35:d1:70:e2:79:7e:
62:ab:6f:13:29:de:e5:85:a5:25:c7:d9:15:f4:e1:16:aa:a4:
3e:33:18:18:e2:22:75:5d:ec:c2:29:5f:c3:c5:52:c5:95:84:
cd:68:07:5d:12:59:db:c0:7e:97:17:84:57:34:bc:69:9f:82:
b1:1f:10:76:83:b2:b3:39:5c:1c:bb:aa:ba:26:1b:ff:ee:93:
a1:3f:13:c5:b7:eb:e5:6b:4c:cf:f2:85:35:36:99:cd:a1:1f:
d2:d0:56:f5:41:7e:78:1c:b1:88:2b:5b:2d:f0:04:54:01:e1:
45:2f:7c:5c:fc:60:aa:40:b4:d5:99:64:e4:ed:3e:60:60:bc:
27:53:65:bb:35:b3:c0:d3:55:04:4e:2b:d8:80:df:64:28:15:
9e:15:d8:72:50:05:b8:79:cd:f8:f7:63:da:10:ef:6e:9d:09:
39:e2:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:01 2025 by rpki-client