Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/j_oVR8giIGJ9TAqquqYifkLeIjM.roa
File: j_oVR8giIGJ9TAqquqYifkLeIjM.roa (raw, json)
Hash identifier: 5Tkxpz+Z+2HB95vYCH8LtVhmoPXDta/4SPNsrM3AuI0=
Subject key identifier: 8F:FA:15:47:C8:22:20:62:7D:4C:0A:AA:BA:A6:22:7E:42:DE:22:33
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 019427B50AC7489CE24891C0A838C08783CE
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/j_oVR8giIGJ9TAqquqYifkLeIjM.roa
Signing time: Thu 02 Jan 2025 15:49:23 +0000
ROA not before: Thu 02 Jan 2025 15:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208924
IP address blocks: 45.14.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:0a:c7:48:9c:e2:48:91:c0:a8:38:c0:87:83:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Jan 2 15:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ffa1547c82220627d4c0aaabaa6227e42de2233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:7d:69:f6:f2:29:9b:6f:70:1b:1b:0c:b1:
25:dc:e7:18:8b:37:c2:94:a3:b2:f2:14:45:bb:8a:
cf:d4:27:e7:0e:bc:1e:e1:ba:ea:b2:b7:fa:28:a8:
e5:42:d3:f1:3c:59:3e:ac:c7:a4:e8:6b:cf:d4:0b:
29:1a:32:33:ee:6a:5f:0b:4f:e3:9a:81:f5:7d:fa:
16:be:da:bb:8b:97:de:f2:0f:56:6f:0c:a5:8f:24:
96:ed:2f:5b:a9:96:ce:f6:9c:af:dc:8c:42:fa:be:
2f:0f:69:92:43:a7:ca:d7:c5:38:0c:e3:c2:90:57:
e4:1e:5c:85:f1:6f:53:b8:4a:30:55:7e:f7:80:12:
fc:9f:05:23:19:7c:c3:83:26:26:3a:d9:19:d1:09:
fc:b9:64:92:ff:34:6d:87:ae:3f:a3:ca:54:ac:f5:
a7:a2:a4:4e:dc:44:48:b9:b6:ea:b4:86:8d:45:19:
f1:ce:05:d9:e6:fd:af:c9:52:fa:2c:94:8a:71:02:
4a:cb:d7:a0:af:35:ac:79:77:e3:32:11:e0:da:2c:
52:33:9e:aa:6b:a9:c4:b0:e4:87:4f:45:87:ac:2b:
ab:d8:a0:1d:37:26:18:f0:8f:07:89:95:2a:13:40:
56:88:67:7c:e0:fe:e5:86:e0:63:a6:22:00:e7:04:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:15:47:C8:22:20:62:7D:4C:0A:AA:BA:A6:22:7E:42:DE:22:33
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/j_oVR8giIGJ9TAqquqYifkLeIjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.172.0/24
Signature Algorithm: sha256WithRSAEncryption
32:4c:fd:bc:71:0a:e3:28:27:f5:f2:ab:19:c3:b0:78:db:30:
94:65:9d:2b:fe:4a:5c:94:c4:ba:5c:8d:02:7e:ea:da:42:00:
0d:d5:ae:ba:d6:c1:30:68:e4:ba:c6:f0:f2:1a:a2:d7:43:04:
8a:66:6c:66:6c:79:92:7e:e7:a8:47:b3:9d:74:5b:4d:76:bf:
f5:47:1e:15:13:82:27:9f:85:cf:5d:88:64:47:01:e8:85:de:
bf:55:9b:58:be:d7:a2:21:65:2c:aa:4a:ba:52:d4:9f:58:1f:
c4:fa:77:ca:d3:55:68:17:c7:3f:11:bc:d7:f2:99:9f:ba:a6:
b9:ce:86:ad:5a:48:32:5a:6c:36:d8:1b:36:72:a4:1e:d1:e6:
3a:26:54:66:53:4c:5c:76:41:14:e9:40:39:54:08:02:38:52:
73:ff:60:6e:f1:14:0e:b7:0d:1a:a6:a0:45:3c:d5:9a:e2:64:
d1:09:48:e9:7d:c1:34:88:77:60:03:04:d2:a7:21:f5:f2:1b:
b4:fc:a6:df:fb:8b:26:a7:69:31:4c:aa:ba:0a:5e:3a:1a:32:
3e:d5:ea:7d:1f:57:5c:34:a8:d7:b7:2c:36:93:50:34:8c:68:
ce:94:29:0b:a4:9e:d4:34:08:be:b1:4f:10:fd:8f:85:c0:47:
fa:fd:7e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:12:22 2025 by rpki-client