Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/o1MTa_u6ng7YChqgqqMpF_EDHDo.roa
File: o1MTa_u6ng7YChqgqqMpF_EDHDo.roa (raw, json)
Hash identifier: medB94fc43SFhZiIXkS8L2CLIYdmUFnxbXmgm5u0RKM=
Subject key identifier: A3:53:13:6B:FB:BA:9E:0E:D8:0A:1A:A0:AA:A3:29:17:F1:03:1C:3A
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 019422FC43D44EC56D2C208E2D53F2E6C2FA
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/o1MTa_u6ng7YChqgqqMpF_EDHDo.roa
Signing time: Wed 01 Jan 2025 17:49:05 +0000
ROA not before: Wed 01 Jan 2025 17:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213055
IP address blocks: 94.188.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:43:d4:4e:c5:6d:2c:20:8e:2d:53:f2:e6:c2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 1 17:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a353136bfbba9e0ed80a1aa0aaa32917f1031c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:ca:05:5f:55:e9:12:c8:4b:87:63:67:4c:
a1:13:e3:ea:9f:8b:35:24:24:9e:e7:a5:65:50:79:
da:8c:40:f8:59:56:96:70:b4:bd:42:71:df:f1:19:
56:c4:79:e2:37:97:6d:8e:7a:40:cd:cc:1e:0f:22:
c8:c6:a5:4b:4a:3a:4b:51:e2:3b:06:b0:01:34:1c:
1e:b0:67:32:6e:ac:af:79:48:58:39:60:42:9e:74:
8c:fb:1e:fb:de:e2:02:93:8d:4a:dc:5e:c4:0f:f9:
a0:83:d5:d0:86:2a:9e:dd:37:46:e0:e5:c2:79:c4:
84:35:77:ce:d1:17:b6:8c:f4:d5:ed:ef:f7:9b:c9:
9f:1b:05:47:d9:3f:25:47:ff:59:37:bc:57:9a:f2:
45:e4:ae:0b:de:c2:db:14:75:9c:8c:04:88:8e:c4:
a2:71:03:e8:89:bd:cc:07:03:5e:f7:c5:11:bc:f5:
32:9c:06:72:44:57:b0:70:11:eb:f0:fc:9c:8a:af:
82:c4:ba:d6:ee:d1:f4:43:91:bf:31:09:d3:a4:41:
9e:90:53:74:79:8f:76:e3:7f:ac:7d:e3:bf:92:83:
89:24:21:9a:52:eb:88:c2:86:a9:9f:63:a1:1b:ed:
19:49:0b:d0:0f:bb:2b:6f:07:21:76:73:34:82:99:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:53:13:6B:FB:BA:9E:0E:D8:0A:1A:A0:AA:A3:29:17:F1:03:1C:3A
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/o1MTa_u6ng7YChqgqqMpF_EDHDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.238.0/24
Signature Algorithm: sha256WithRSAEncryption
49:bb:e8:9c:bb:49:2d:ca:4e:00:8f:cd:9a:31:56:6b:bd:9d:
b0:5c:fc:14:ff:87:58:98:77:0e:56:c7:ba:e6:13:ae:d5:94:
01:70:30:e1:97:fd:c4:09:c0:1a:8b:7e:7e:87:59:e3:cf:b1:
28:dc:f3:26:82:6f:08:7d:88:61:ac:35:de:6b:7e:97:df:bd:
24:66:12:fe:b7:20:a4:ae:34:6a:6a:a7:85:dc:a5:87:a7:2c:
45:2a:17:e5:dc:73:ae:28:e9:c2:63:26:2d:c2:a0:b2:b0:6e:
61:d1:83:e7:89:89:1a:c0:52:46:f5:cd:2a:15:42:33:d5:a9:
49:42:cd:84:a9:8b:4b:fe:7f:b3:30:1d:34:b5:10:75:7a:03:
d9:44:5f:66:14:5a:f7:6f:61:fa:9f:a5:5f:b4:c3:3a:38:7e:
95:66:6e:83:c0:ae:bf:f7:43:2b:ed:4a:30:72:00:18:e0:38:
bc:92:b5:b0:48:e3:13:00:0b:73:b4:3c:68:a5:f4:68:ca:24:
bc:05:ce:d3:c2:03:17:c0:43:d5:09:cf:f1:43:f2:d1:0d:8e:
5c:97:a6:fa:a0:03:22:06:a5:32:44:4d:a5:0d:30:64:12:bf:
a5:a5:ec:5e:1e:7d:03:6c:03:0e:65:3b:e5:33:67:01:9b:00:
c4:b0:b4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:07 2025 by rpki-client