Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa
File: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (raw, json)
Hash identifier: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=
Subject key identifier: 03:0C:01:E4:8C:C4:88:6D:4B:97:1E:72:3E:76:AC:60:CF:0C:3B:66
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 01942143A9E699C2FEA2BEEE12AE1050236E
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 94.142.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a9:e6:99:c2:fe:a2:be:ee:12:ae:10:50:23:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=030c01e48cc4886d4b971e723e76ac60cf0c3b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:b0:a8:37:80:36:57:9a:bd:9f:bd:c0:f0:
0d:cd:d9:00:2d:a8:b1:9e:d4:73:7b:8d:7b:27:5b:
44:a7:c0:7e:83:91:3d:0c:41:53:09:3a:37:ea:e2:
66:4c:fb:88:58:66:93:5b:bc:d9:e6:e3:4f:b4:dd:
f8:e5:1b:ed:11:f2:c1:ff:8a:e3:38:1e:b4:0f:fd:
a0:0e:51:38:6e:a5:91:29:25:64:fa:4c:a5:b2:4a:
b0:7f:f2:5c:15:9b:0f:77:3e:a1:e6:fd:52:17:a3:
9d:9e:7c:ed:f6:51:59:5e:c9:ee:2c:bc:37:9d:84:
83:54:52:90:e2:6f:fd:2c:c3:b9:96:31:97:14:05:
19:43:f8:0c:07:cd:30:45:1a:c1:26:db:52:03:ad:
1f:8b:b2:0b:ca:58:b3:db:82:1b:b5:3f:61:5c:c7:
a0:29:54:06:97:27:d1:61:c0:80:e9:1d:17:6b:49:
d8:24:76:10:15:68:be:7e:48:72:b7:f8:d0:d4:94:
c6:f9:5f:d3:99:2b:0a:de:46:a0:d3:23:7c:76:fe:
33:50:44:ed:98:69:18:a9:05:98:81:ca:d9:b9:4c:
bb:3b:5e:89:55:7e:a0:aa:15:85:ab:df:03:f8:b4:
e2:f8:4d:fd:b0:07:59:c6:ca:21:64:08:ed:06:04:
8c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0C:01:E4:8C:C4:88:6D:4B:97:1E:72:3E:76:AC:60:CF:0C:3B:66
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.252.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0e:cf:e6:86:20:9d:5d:b5:c7:0f:bd:87:0c:f7:8b:62:de:
af:b3:3d:37:d4:63:93:34:8f:69:32:35:bd:de:02:9f:8e:71:
95:c6:2b:3d:bc:94:ea:bc:b8:5d:1c:77:69:9e:8f:56:c8:01:
0f:2c:58:93:4b:20:a3:d4:00:19:2b:3f:98:ae:7a:18:7b:9c:
c1:88:50:0b:95:59:f6:07:6a:7a:71:82:bd:d3:ce:93:89:cd:
78:9f:ff:e1:f5:96:43:75:ef:69:cd:e7:a9:4e:72:61:af:d8:
9c:9b:bd:14:0a:97:eb:60:0a:58:14:3d:22:e1:7a:64:c0:0e:
23:99:de:5b:4a:ab:ce:6e:a0:66:ba:f4:65:d4:0a:4a:a7:65:
83:fb:68:86:46:a3:c0:8c:1c:49:26:33:b2:19:41:20:f6:93:
21:74:42:64:e1:1c:a2:92:0e:e7:a0:78:a1:9c:6f:4c:78:7d:
c5:64:c1:1b:98:a5:ef:c5:b1:22:d2:3c:c2:de:7d:d6:85:ac:
be:19:a4:56:55:fb:57:6f:1d:df:68:06:5d:72:86:0a:82:c5:
ec:0a:da:b3:d1:90:96:77:b7:4c:e0:ad:87:22:8a:20:c4:53:
4c:8f:b0:f1:4f:0b:2a:dc:88:ca:3b:3b:94:2a:be:74:8a:51:
20:ab:f0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:58 2025 by rpki-client