Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ONKHpYimKuwzn77m9LydYFbzpRY.roa
File: ONKHpYimKuwzn77m9LydYFbzpRY.roa (raw, json)
Hash identifier: 8J246+Nt2Y+QpfgD1sKVEVeqnWKlH8aPvihNQisvlT8=
Subject key identifier: 38:D2:87:A5:88:A6:2A:EC:33:9F:BE:E6:F4:BC:9D:60:56:F3:A5:16
Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial: 0194221FADB16C5FBC28288B5303A1A53AD7
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ONKHpYimKuwzn77m9LydYFbzpRY.roa
Signing time: Wed 01 Jan 2025 13:48:08 +0000
ROA not before: Wed 01 Jan 2025 13:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50949
IP address blocks: 84.23.46.0/24 maxlen: 24
84.23.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ad:b1:6c:5f:bc:28:28:8b:53:03:a1:a5:3a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Validity
Not Before: Jan 1 13:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38d287a588a62aec339fbee6f4bc9d6056f3a516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f5:74:6b:85:be:b5:2b:d4:d7:84:e5:25:da:
5d:80:34:58:53:54:cc:0b:cc:04:98:72:1b:d5:85:
2e:5c:b4:33:50:73:0f:5f:10:1a:12:7a:55:93:e9:
b2:3d:43:e3:23:74:98:0b:87:3f:eb:13:ce:11:96:
6b:7d:40:de:f4:24:e4:75:6a:25:c6:74:6b:15:44:
ac:e8:2c:d3:d2:b6:ff:c4:e0:ae:c5:6b:85:4a:b2:
f6:0e:eb:47:9c:17:a6:16:11:00:3f:92:ba:e1:ad:
10:6e:54:ba:98:11:88:05:9d:a0:05:be:e4:d3:aa:
ff:1a:8c:af:4a:b6:8c:37:a6:f8:93:ce:18:34:c5:
aa:d6:f7:ca:04:e7:2a:18:5c:82:8c:0b:f2:07:81:
5d:90:8c:20:b5:44:46:46:95:93:00:30:8e:5f:f3:
46:0b:18:87:b0:77:35:6b:0d:dc:1c:b5:6f:e5:b6:
a3:47:0a:0f:03:6f:17:62:60:ae:c1:87:74:2c:0c:
33:00:66:a9:bf:9b:c6:ad:3e:49:e2:55:2f:81:f7:
7d:d3:32:02:b2:b6:d7:35:9c:71:39:c8:19:c9:e1:
52:00:43:0f:69:44:14:3a:82:82:47:87:1b:c7:d2:
a3:d8:35:43:4f:7d:98:6f:80:69:5c:3c:9e:63:20:
20:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D2:87:A5:88:A6:2A:EC:33:9F:BE:E6:F4:BC:9D:60:56:F3:A5:16
X509v3 Authority Key Identifier:
keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/ONKHpYimKuwzn77m9LydYFbzpRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.46.0/23
Signature Algorithm: sha256WithRSAEncryption
84:84:2e:c9:98:55:06:24:07:79:32:bb:73:33:16:45:31:14:
d0:3a:62:15:af:5a:2a:4b:4d:49:2c:cb:e4:70:ca:6f:92:25:
5f:b1:69:8f:f4:e6:95:46:f1:53:3b:64:26:8f:35:9d:af:08:
a7:78:08:3b:80:cb:0d:9f:b3:9e:ca:b1:fc:c1:c8:3a:c4:0a:
57:a4:48:57:20:62:80:f0:27:5e:51:45:2d:5c:58:7b:c3:2c:
10:20:8d:30:ec:f4:c4:95:f1:85:de:d4:77:ec:c9:cc:84:62:
6e:07:36:ad:6c:91:ce:a5:cf:93:99:11:92:c2:43:3b:f5:61:
d8:22:2c:c0:73:7a:bd:81:02:d3:a0:95:fe:6e:75:4c:e7:6b:
03:e4:98:24:7c:43:99:fa:cf:9c:b8:aa:77:d8:62:9a:3f:e9:
65:b5:0e:c2:8d:74:58:d4:9b:25:03:ef:7b:92:f4:b7:31:59:
14:d6:7b:3c:f8:82:55:77:6e:d5:c6:04:62:be:92:31:9d:8d:
52:3e:59:8b:b3:55:22:82:74:30:27:62:36:79:c7:e2:81:2c:
45:7e:d2:e8:81:ec:4b:fd:1f:81:65:4b:cc:28:af:1a:ab:f2:
c6:b5:39:b7:29:4d:a0:92:6a:13:e5:63:a5:48:e5:49:4c:04:
ec:08:88:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:04 2025 by rpki-client