Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa
File: OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa (raw, json)
Hash identifier: mqfa0ZehsylIV/d7nzWZG94iCnmV9oQHVVnGpSyC+og=
Subject key identifier: 39:C8:09:F6:07:78:5C:F7:F6:70:7D:6F:C0:E4:83:93:CC:2C:58:26
Certificate issuer: /CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Certificate serial: 01942068714AB872A9AD144D3B2EB2A51110
Authority key identifier: CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206014
IP address blocks: 45.13.156.0/24 maxlen: 24
2a00:6420:ff00::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:71:4a:b8:72:a9:ad:14:4d:3b:2e:b2:a5:11:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd02d077485a15e8a254a49edd994d4fc2a908a6
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c809f607785cf7f6707d6fc0e48393cc2c5826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:75:04:e4:61:c8:ec:23:e9:2a:d1:a7:12:
0a:8f:7d:f6:51:8c:03:bc:68:93:2d:35:dc:89:ab:
15:6a:87:e9:f9:c4:8b:b6:8b:6b:56:d4:8d:3f:f4:
20:7c:2c:97:71:3d:82:66:87:8a:fc:68:70:e8:3b:
e7:0a:6f:7b:ed:23:e8:bf:f4:3a:6f:36:02:d6:5c:
81:69:9a:f9:cb:7b:2b:1c:e2:25:15:01:38:48:9b:
17:bb:8f:7d:ed:a0:dd:5d:ea:b3:7b:50:e5:df:7a:
a4:a8:d4:40:65:99:5e:00:18:d8:50:67:4e:a1:b5:
85:ae:11:db:bf:48:44:89:fa:74:3e:dc:20:c3:89:
74:4a:c6:68:aa:fa:23:67:dc:89:8d:2a:7f:c6:c5:
44:f2:3e:46:cf:94:a6:f7:e5:02:e5:11:4d:9c:ce:
7f:3f:39:40:d4:60:2a:a7:4c:4c:c1:ba:0d:20:0b:
71:90:57:fa:81:23:7a:1c:8a:93:ea:5d:97:0a:8e:
5a:ee:d3:b5:49:ab:87:1f:95:66:2e:69:a0:7d:0b:
f5:c3:b0:f5:cc:c6:ff:b4:8d:85:00:90:9c:1d:2d:
9b:db:4e:dd:31:7d:50:c0:43:a9:c0:02:c3:3e:f9:
40:1a:49:38:04:6a:84:55:73:94:52:a3:2e:44:54:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C8:09:F6:07:78:5C:F7:F6:70:7D:6F:C0:E4:83:93:CC:2C:58:26
X509v3 Authority Key Identifier:
keyid:CD:02:D0:77:48:5A:15:E8:A2:54:A4:9E:DD:99:4D:4F:C2:A9:08:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQLQd0haFeiiVKSe3ZlNT8KpCKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/OcgJ9gd4XPf2cH1vwOSDk8wsWCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6714f1-c3d6-4875-a36a-37e80dab9302/1/zQLQd0haFeiiVKSe3ZlNT8KpCKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.156.0/24
IPv6:
2a00:6420:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
63:26:3c:1a:82:48:8b:30:2b:c6:e9:76:94:22:f3:e8:b7:c0:
c1:f5:ee:a9:0a:9e:6e:0a:ca:57:9b:72:54:58:34:8a:84:ce:
f6:02:3a:2a:62:80:91:87:28:d3:59:c3:e9:fc:f1:8d:ba:ee:
08:0e:0c:8b:b9:c8:4e:4f:0a:6c:71:e8:81:ae:8a:84:c4:ca:
09:42:b6:85:67:33:58:df:a2:61:e8:80:0d:ea:fc:35:9d:0e:
32:38:d9:b3:7e:b2:fb:93:5e:a6:bf:0c:73:08:f2:2c:80:fc:
96:84:fb:2d:95:86:19:54:40:bc:f8:f9:0a:92:52:a9:ef:f9:
a5:84:70:d7:28:97:d2:8b:ba:94:c3:e3:2d:53:ea:03:45:e9:
d7:59:09:5a:d7:9d:3a:b7:e4:47:ee:d4:d4:2e:bb:b3:92:7c:
16:23:8b:e5:16:0b:4b:46:54:a3:f0:79:af:d1:9b:1e:d4:b9:
c4:3b:f4:c0:45:44:9d:b1:87:d6:34:d4:50:1d:83:b1:c0:f1:
90:15:dd:9d:a3:06:05:98:84:c1:14:64:56:07:0a:52:97:12:
0e:9b:09:4f:5e:77:88:51:75:22:d9:d3:f2:55:55:15:99:39:
7d:ba:fd:80:a3:8e:85:32:ac:3e:7c:4f:b8:bd:1a:c3:a0:fd:
4e:e3:ec:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:38 2025 by rpki-client