Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/0m-9m5OFcPf8OuDYL2FUGvph8_g.roa
File: 0m-9m5OFcPf8OuDYL2FUGvph8_g.roa (raw, json)
Hash identifier: dOT7ZXgrSZ8DnL/LTBhNtapy6nZ67rmfPX5nGpKKR4k=
Subject key identifier: D2:6F:BD:9B:93:85:70:F7:FC:3A:E0:D8:2F:61:54:1A:FA:61:F3:F8
Certificate issuer: /CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Certificate serial: 019423D6C222F9394378402824BC3391AB73
Authority key identifier: 08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/0m-9m5OFcPf8OuDYL2FUGvph8_g.roa
Signing time: Wed 01 Jan 2025 21:47:44 +0000
ROA not before: Wed 01 Jan 2025 21:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30722
IP address blocks: 194.55.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c2:22:f9:39:43:78:40:28:24:bc:33:91:ab:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d5eb6a96864dfa2c51b2e256c5180ab92229cd
Validity
Not Before: Jan 1 21:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d26fbd9b938570f7fc3ae0d82f61541afa61f3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:94:89:b1:91:46:85:af:cb:10:ec:97:5c:
53:af:73:76:81:71:8b:9d:7c:fa:7f:10:51:08:43:
78:aa:d9:f1:ed:62:95:09:fd:69:27:df:09:5a:bb:
e0:cc:30:e0:91:dc:f5:d0:10:c0:82:c7:7a:3f:c6:
3f:69:d3:65:98:8d:d3:9d:48:75:7b:73:95:0f:1a:
8d:8f:a8:08:23:cb:d3:97:13:9c:ca:4d:7c:8d:5d:
db:ee:85:b3:71:23:f1:50:fe:0f:80:ff:77:00:ab:
40:6e:fc:94:56:20:a1:e0:4f:ba:30:83:3e:ad:51:
28:4d:fb:ef:ea:32:fc:62:1a:ce:e4:cc:d0:af:b3:
19:1e:e8:e2:06:59:06:76:df:4e:44:90:83:14:b5:
ab:c9:b2:0a:66:f6:49:15:80:62:37:e8:17:56:6a:
11:9d:cc:dc:ec:15:0b:4a:3b:6a:19:92:88:72:7a:
c2:d6:5d:1a:1d:23:a0:3c:0e:b7:55:4d:7b:7d:d7:
9f:a2:17:58:10:2b:76:f0:8c:ae:b3:3a:c7:a3:04:
e0:79:b9:4d:88:29:ba:dd:03:40:4d:e8:08:ab:3e:
20:e0:a9:ba:1b:26:28:75:6b:fb:93:ea:ec:67:2a:
9f:f0:92:82:a1:01:8c:80:4b:eb:42:96:c3:18:48:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:BD:9B:93:85:70:F7:FC:3A:E0:D8:2F:61:54:1A:FA:61:F3:F8
X509v3 Authority Key Identifier:
keyid:08:D5:EB:6A:96:86:4D:FA:2C:51:B2:E2:56:C5:18:0A:B9:22:29:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNXrapaGTfosUbLiVsUYCrkiKc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/0m-9m5OFcPf8OuDYL2FUGvph8_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4a58bc-2403-4144-bb5e-bb6829360cee/1/CNXrapaGTfosUbLiVsUYCrkiKc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.44.0/22
Signature Algorithm: sha256WithRSAEncryption
37:8f:1c:53:24:f2:fe:56:56:bd:74:2f:6e:a6:2a:5a:f4:3e:
b7:61:ef:ea:27:c0:d5:34:73:77:b7:37:aa:d3:7a:0a:cb:f8:
b7:af:0d:7b:2b:14:57:77:e7:5c:fc:09:b7:56:3d:f8:34:ac:
eb:a2:28:25:f4:d7:10:d9:41:1d:a3:f4:eb:6b:73:00:34:00:
b7:a2:e2:25:15:18:ca:e9:0a:16:2c:78:ec:79:df:0f:45:1e:
cd:1c:8d:dd:55:56:42:79:71:9b:ea:28:cd:20:d2:ae:f3:1b:
54:d7:84:7c:7b:69:3e:03:c3:5b:89:47:c9:da:a4:c9:e7:05:
f4:5d:a7:fb:4b:63:f3:aa:d6:43:3d:1d:ad:b8:bb:a6:26:8d:
49:e8:c4:6c:88:b1:d5:54:d0:b5:78:a7:63:f9:c3:7d:52:b6:
91:d5:32:ad:0e:cf:44:20:fc:e8:e7:90:0f:50:6b:d9:6f:1f:
c9:bd:09:bf:bf:7a:a6:b2:56:d8:7c:29:c9:03:93:0f:90:4b:
03:cd:31:f7:d6:aa:36:99:20:54:9d:4c:42:2e:58:1e:2a:6e:
9d:66:51:cb:fd:c0:b0:41:67:a7:4d:99:9c:eb:06:22:e1:1d:
15:66:40:19:2d:b2:44:16:71:51:ff:6f:67:ff:be:09:65:e8:
47:cf:32:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:41:49 2025 by rpki-client