Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/RG8-5DCoahn6GmJj1z8ZOudD3Ko.roa
File: RG8-5DCoahn6GmJj1z8ZOudD3Ko.roa (raw, json)
Hash identifier: U4VRzrFwaz+IBjse4+JgnquYkIHdetXrDGCWv7xW5ao=
Subject key identifier: 44:6F:3E:E4:30:A8:6A:19:FA:1A:62:63:D7:3F:19:3A:E7:43:DC:AA
Certificate issuer: /CN=79101035d53377c5a72bedca522fc1456e0b8419
Certificate serial: 019422FC4A1B548AE60D10BD4BE095212F97
Authority key identifier: 79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/RG8-5DCoahn6GmJj1z8ZOudD3Ko.roa
Signing time: Wed 01 Jan 2025 17:49:06 +0000
ROA not before: Wed 01 Jan 2025 17:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49806
IP address blocks: 185.15.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4a:1b:54:8a:e6:0d:10:bd:4b:e0:95:21:2f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79101035d53377c5a72bedca522fc1456e0b8419
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=446f3ee430a86a19fa1a6263d73f193ae743dcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:36:59:9f:92:6e:56:37:ab:03:20:5d:79:
0f:e6:d6:9a:ec:ef:b8:ba:94:61:5f:13:33:c6:d0:
1f:06:ba:7a:82:a1:db:25:c6:00:74:23:a9:03:5f:
00:b9:30:8d:ae:13:2f:08:bf:ab:6f:d9:b2:62:35:
80:77:aa:6f:c0:64:52:88:aa:dc:2c:55:7d:0e:42:
53:af:56:06:d8:c9:fd:45:36:e2:be:9f:f7:ae:3b:
1a:95:b9:b2:93:16:2a:51:72:9e:f5:2b:5b:4a:9f:
2c:ba:6a:75:34:b2:b4:51:6c:e1:58:bb:13:b5:30:
6e:0a:dd:fd:3c:9e:9d:66:0a:57:c9:58:2d:0d:b6:
53:44:01:50:79:42:18:32:c3:45:ed:49:5c:61:af:
ae:3a:ce:69:f9:26:e5:c2:f3:bf:ee:ed:0e:ed:12:
99:40:7d:a0:01:7e:d8:ed:df:df:a9:24:5e:76:57:
3d:db:bb:fe:25:d9:54:9d:81:e5:4f:24:94:19:02:
4b:02:a8:90:e2:54:cb:ef:3f:5d:58:d8:02:81:80:
5d:86:82:57:97:a6:fa:44:19:77:3b:a3:6f:b9:ab:
21:cc:22:47:36:99:96:d7:f7:ab:af:cb:d5:cf:b3:
ae:8b:05:28:ba:25:0f:16:be:4d:5e:cf:10:90:69:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6F:3E:E4:30:A8:6A:19:FA:1A:62:63:D7:3F:19:3A:E7:43:DC:AA
X509v3 Authority Key Identifier:
keyid:79:10:10:35:D5:33:77:C5:A7:2B:ED:CA:52:2F:C1:45:6E:0B:84:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRAQNdUzd8WnK-3KUi_BRW4LhBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/RG8-5DCoahn6GmJj1z8ZOudD3Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/958c2c-b4c3-432d-9ab1-0cc83b00fc58/1/eRAQNdUzd8WnK-3KUi_BRW4LhBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.157.0/24
Signature Algorithm: sha256WithRSAEncryption
31:37:a2:b2:05:b8:a1:b4:dc:c4:7e:ef:95:97:ef:5e:db:93:
c2:dd:9a:14:95:6f:d4:cb:c0:3d:c9:c5:51:45:3b:28:d6:c2:
70:72:65:32:7f:a9:33:67:88:6c:c2:d4:d2:90:2e:ac:65:cb:
23:f3:3b:d7:73:6b:60:30:e4:32:d7:96:7a:31:17:32:2d:6f:
85:da:34:c6:b4:3e:52:3e:2d:70:5d:2e:00:82:79:f9:89:0c:
26:08:ce:da:45:9b:68:24:a8:75:25:03:a6:e6:1b:f5:c6:fe:
20:8f:37:d9:f2:83:78:f9:be:8f:a5:a1:0b:28:46:f6:46:4d:
6f:f1:fb:45:48:8a:4f:ec:b6:ac:e3:49:d8:17:33:5d:50:c0:
86:d1:5f:66:f6:d2:2a:c2:7e:c2:2f:4f:00:95:17:df:f2:67:
43:f5:a1:a4:8e:2a:af:67:ab:98:75:ba:9d:98:ad:61:a7:82:
cc:3e:8a:05:23:fb:c2:40:a1:e2:29:e9:d9:05:07:36:9f:c1:
8c:a9:58:3f:eb:b8:59:72:75:44:da:c0:d3:c1:99:8a:e3:de:
63:10:19:17:71:12:90:ac:bd:c0:5c:08:5a:0c:92:12:03:eb:
4b:f5:aa:cb:d9:c6:f9:f0:ed:9b:bb:32:d5:2d:60:49:ee:09:
7c:8a:d1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:41 2025 by rpki-client