Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/onA5Qj1rH9MGyVQYHgNFggbjtjI.roa
File: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (raw, json)
Hash identifier: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=
Subject key identifier: A2:70:39:42:3D:6B:1F:D3:06:C9:54:18:1E:03:45:82:06:E3:B6:32
Certificate issuer: /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial: 019423D7FB37922A7A8B9A2173C01E966E79
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/onA5Qj1rH9MGyVQYHgNFggbjtjI.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206394
IP address blocks: 94.176.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fb:37:92:2a:7a:8b:9a:21:73:c0:1e:96:6e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a27039423d6b1fd306c954181e03458206e3b632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5e:e3:05:57:23:56:e7:ea:f6:7c:0f:ef:cc:
e2:03:6e:b1:6f:d9:29:90:c2:2c:31:a2:47:1f:ae:
c1:cb:81:4b:f7:00:fc:2c:af:24:d4:78:eb:6c:cf:
03:e0:f5:ec:22:1c:1a:d0:82:c2:61:ea:68:e8:e9:
cb:ee:79:b1:e3:95:43:d6:cd:94:aa:36:14:bf:b3:
24:13:a3:d0:d4:d7:7f:22:72:75:49:66:c0:a2:e4:
41:da:9e:f8:88:a6:06:45:aa:6d:5d:82:50:b7:fb:
42:be:1a:74:40:e2:ce:e8:52:36:41:4e:27:2f:de:
d9:3a:9f:ec:4b:4c:c0:4b:7d:84:1d:1f:e2:96:af:
34:d4:b2:8d:ad:c5:ea:41:53:e8:e4:53:f2:73:c0:
ab:53:d8:b3:7f:75:21:be:ed:3e:d6:f5:43:00:cf:
7e:a1:a0:e0:b6:ea:2f:0b:af:dc:44:39:8e:e8:4c:
b3:9c:fd:dc:47:52:0c:40:46:2d:af:c1:66:cd:e9:
01:9b:27:02:c4:cd:07:1f:50:a9:ec:62:d7:fa:4a:
22:39:2c:65:02:28:cb:04:ac:3f:7d:1b:a1:54:c5:
b3:d4:88:71:05:52:db:f2:dd:4c:ae:3d:6e:c1:1f:
45:2b:5e:c8:98:ad:a8:e1:48:62:75:27:74:86:e2:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:70:39:42:3D:6B:1F:D3:06:C9:54:18:1E:03:45:82:06:E3:B6:32
X509v3 Authority Key Identifier:
keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/onA5Qj1rH9MGyVQYHgNFggbjtjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.147.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e9:be:e4:16:3b:70:6f:e7:e4:59:87:92:e8:21:d2:5d:3b:
47:94:0c:ea:48:0d:27:15:39:2f:dd:02:d3:41:18:6c:2a:0d:
18:f1:87:4b:7e:79:b3:4e:94:51:62:1c:c0:7b:5d:28:eb:34:
08:48:b0:8b:11:8f:56:f3:aa:1c:9b:cd:71:fa:79:d1:db:eb:
13:31:2d:d2:b9:fb:98:47:6f:d9:51:9f:e6:f8:c1:fe:99:8f:
11:c9:6e:28:02:c0:7e:3f:c8:f6:f3:34:36:ad:88:b2:60:65:
ff:8a:51:68:6d:20:98:fb:0b:a5:91:06:9c:3d:9b:d8:9a:bc:
bd:7b:d6:5b:07:c8:12:35:bf:91:cf:c0:e6:b9:3c:55:71:b5:
60:a1:21:61:70:3e:bc:8e:b3:96:83:7b:bc:5c:21:84:f8:fe:
f3:41:64:35:1c:c3:3e:dd:7c:7a:22:a1:07:0f:ce:c2:8b:c7:
6c:5e:92:20:20:fd:b4:cd:ee:fe:3d:08:25:94:42:93:4f:c7:
3e:27:72:29:a3:dd:06:88:97:75:c7:ae:b1:ce:12:c5:2b:34:
d9:a2:fe:f2:d3:5c:b2:1c:46:fa:9b:82:e5:23:91:e4:b2:10:
d0:6d:53:79:10:c0:83:90:a8:db:f5:c3:ff:ba:c7:c0:ee:3c:
76:a7:d3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:56 2025 by rpki-client