Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/862AzXPpO4q0TZw2prtOswI6C3U.roa
File: 862AzXPpO4q0TZw2prtOswI6C3U.roa (raw, json)
Hash identifier: UvMXTudocwR1LdtSYifhkjBcDLnzk1IebtQXMqpmBY0=
Subject key identifier: F3:AD:80:CD:73:E9:3B:8A:B4:4D:9C:36:A6:BB:4E:B3:02:3A:0B:75
Certificate issuer: /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Certificate serial: 01942C2F6BAB1813738B00835350BD5B433F
Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/862AzXPpO4q0TZw2prtOswI6C3U.roa
Signing time: Fri 03 Jan 2025 12:41:32 +0000
ROA not before: Fri 03 Jan 2025 12:41:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 194.146.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:2f:6b:ab:18:13:73:8b:00:83:53:50:bd:5b:43:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f
Validity
Not Before: Jan 3 12:41:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3ad80cd73e93b8ab44d9c36a6bb4eb3023a0b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:b0:8a:fe:b3:6b:44:07:f7:a3:c7:2f:0a:
6f:f6:8f:57:9b:19:bf:eb:d5:1a:b9:25:b8:88:0e:
b4:ef:c3:fd:2f:90:90:bd:e4:a2:32:d8:35:29:c4:
8a:c2:f3:52:15:ec:7a:81:ae:e3:e5:c6:42:77:95:
ea:1f:0e:c4:4f:8d:54:71:7b:69:12:5c:59:c3:2d:
b3:3c:71:30:60:46:87:ee:ed:de:cc:3b:89:9c:31:
ba:c1:4a:0a:3a:9e:6d:b2:9e:04:3c:9c:0f:63:4f:
98:5b:15:33:8f:61:44:a2:a1:bf:b6:43:80:45:8d:
c2:b0:0e:1a:dc:b1:e2:32:bc:f8:d7:1a:c2:3c:5e:
07:e9:b5:a0:67:25:d1:f6:64:c9:a0:15:4b:10:6e:
0c:ae:ee:41:4f:6b:87:ee:72:df:08:fd:62:ce:c9:
73:80:3a:95:51:32:6d:2f:d9:1f:8c:06:53:af:0f:
b9:c5:da:13:28:db:35:f1:fb:fc:f6:10:fa:5e:6c:
73:f1:04:1e:13:b1:b9:c5:2d:6e:9f:8c:a5:ec:27:
4e:0a:2d:e1:a4:4d:70:d7:67:24:7b:dc:ef:12:06:
83:2d:81:66:e1:93:eb:b5:e8:24:f4:d0:0c:de:72:
46:76:49:0f:88:aa:6d:8a:3d:84:2b:44:17:35:52:
a7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:80:CD:73:E9:3B:8A:B4:4D:9C:36:A6:BB:4E:B3:02:3A:0B:75
X509v3 Authority Key Identifier:
keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/862AzXPpO4q0TZw2prtOswI6C3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c8:a6:3a:99:e6:34:21:38:dc:2b:8d:3f:e1:db:f1:52:00:
89:66:bb:a9:6a:dd:26:6c:23:c5:8b:79:75:4f:2f:05:6c:64:
3d:c7:f3:ae:3f:f0:07:bd:ca:be:ef:54:ab:44:51:e5:29:98:
83:da:ba:36:82:64:b1:2c:54:c1:1e:88:ea:cc:bf:3a:94:70:
e2:e9:61:18:28:ef:71:db:3b:92:2f:62:af:9a:84:40:04:78:
e1:75:69:06:a2:c5:f3:fb:0c:6a:e8:45:b9:f6:85:e8:21:52:
67:2d:60:d4:ba:01:fd:57:b7:57:4b:82:0d:06:2d:63:90:65:
b6:16:31:8b:9e:e9:20:f3:3d:9a:fd:f4:37:37:ae:26:fd:f8:
0e:7a:2d:ab:98:21:b8:66:33:1b:ee:b2:58:6c:87:9b:ab:42:
80:e8:cc:e3:36:2a:14:cc:ad:c7:7b:a5:c9:fa:52:6d:95:bc:
9a:44:8f:6b:e5:4f:82:7c:1e:b5:ea:78:5f:64:b8:1c:1d:9c:
4b:1d:61:fa:6f:3a:fc:c8:27:8b:82:ec:d7:a7:2e:55:10:f2:
b1:35:ce:e2:c8:37:00:67:20:7e:12:7b:39:00:b4:8d:63:ac:
ec:99:fd:d9:41:08:18:5b:1b:bc:bd:46:ef:ad:30:54:7c:6d:
3c:0a:09:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:02:50 2025 by rpki-client