Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/w-ow2t4s5d80X3-xzHRdMNix0fw.roa
File: w-ow2t4s5d80X3-xzHRdMNix0fw.roa (raw, json)
Hash identifier: 4RIMZhfoktIdHVRbOcazQlm95TLudqzurk7X7sEszxc=
Subject key identifier: C3:EA:30:DA:DE:2C:E5:DF:34:5F:7F:B1:CC:74:5D:30:D8:B1:D1:FC
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0194228DD06B3FFC0161C0D0B288AA8FF905
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/w-ow2t4s5d80X3-xzHRdMNix0fw.roa
Signing time: Wed 01 Jan 2025 15:48:26 +0000
ROA not before: Wed 01 Jan 2025 15:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61157
IP address blocks: 84.246.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d0:6b:3f:fc:01:61:c0:d0:b2:88:aa:8f:f9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 1 15:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3ea30dade2ce5df345f7fb1cc745d30d8b1d1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4b:22:3c:98:49:ef:6f:b4:d2:b1:02:d6:64:
0a:4f:2d:f4:95:e5:a7:89:39:8b:2e:40:1f:d7:32:
1f:41:5b:82:4c:ea:cf:e3:39:79:2d:34:54:a0:c9:
5d:34:81:76:18:fe:75:40:d2:87:0e:d9:3d:c1:0c:
f8:30:aa:bd:e4:92:93:f3:17:8b:9e:f1:65:53:fa:
cd:9f:17:c8:2d:70:39:42:be:62:31:49:44:e8:ed:
6f:bf:01:63:4c:7c:a8:07:7e:02:91:7a:89:f2:b4:
43:80:61:e9:6d:01:02:73:81:71:b5:b2:3b:36:1c:
2f:c5:ce:cc:cf:4d:9d:1e:a6:8a:a9:a7:a9:96:16:
49:60:9f:8a:29:50:a3:5c:ea:d3:23:33:39:d1:aa:
47:54:95:c0:ac:91:a2:84:8c:4f:b9:17:27:c5:12:
99:be:87:38:ea:e8:b2:3b:4b:1b:71:8a:2b:2e:44:
3b:f4:35:42:2a:d1:f2:6e:9c:bc:fa:73:45:13:92:
88:da:83:ee:86:83:55:2a:a4:51:8b:35:fb:2b:d9:
0b:fb:2c:5d:f6:32:c9:2f:50:7c:c8:db:aa:68:28:
93:51:49:91:56:fb:e2:76:ad:8a:86:86:ce:d1:5b:
4c:26:09:89:f4:08:49:5d:8f:62:cc:da:b7:7d:3a:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:30:DA:DE:2C:E5:DF:34:5F:7F:B1:CC:74:5D:30:D8:B1:D1:FC
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/w-ow2t4s5d80X3-xzHRdMNix0fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.125.0/24
Signature Algorithm: sha256WithRSAEncryption
55:dd:d6:7b:e2:49:19:77:9a:1f:ce:66:33:c9:23:56:a3:a1:
db:4d:47:f8:e8:18:e3:be:06:ce:cb:cc:b2:84:f8:e1:69:79:
0f:7c:36:71:28:12:9c:86:fe:77:9d:69:9e:e7:ef:a0:7e:03:
a7:4f:77:b4:52:cc:59:65:af:7e:af:a8:06:76:e4:3a:f5:5e:
4b:2a:9f:6a:b7:59:a3:7f:46:4f:19:32:89:21:86:25:f9:7d:
15:33:cb:d5:44:0e:0d:ff:08:07:04:d4:bc:4c:0d:97:08:32:
57:24:94:f1:8b:72:92:63:bd:b9:c5:3b:ba:06:02:9f:18:1a:
77:d6:ec:e6:06:79:d2:60:b3:76:64:88:77:84:15:47:a8:99:
71:1f:86:65:76:4e:88:e5:e5:c9:47:7c:60:20:df:f0:75:51:
34:0c:5b:3c:6e:9b:6c:0e:38:75:80:4d:9b:ce:e0:3a:95:42:
33:62:3a:65:2d:af:ef:36:0f:71:ee:6e:e2:87:7a:e7:42:43:
3e:25:c4:17:c1:c5:49:da:80:f1:a6:d1:34:05:60:cd:3b:91:
ed:78:90:d0:9d:32:96:a1:5b:71:47:81:4e:bc:81:7e:e5:7c:
55:7d:61:56:1c:c1:75:e0:72:7a:c0:7a:60:24:53:ec:d7:6e:
f4:89:2e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:35 2025 by rpki-client