Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/ow3qzF69wqcAle7bTyTRDSI-CjU.roa
File: ow3qzF69wqcAle7bTyTRDSI-CjU.roa (raw, json)
Hash identifier: zPkJxRIh+4adiToqm5Gt9iWworMW5Po/0t9AKhqJJ1k=
Subject key identifier: A3:0D:EA:CC:5E:BD:C2:A7:00:95:EE:DB:4F:24:D1:0D:22:3E:0A:35
Certificate issuer: /CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Certificate serial: 019424B3805EE67A5015B6D1D5749A134A76
Authority key identifier: 99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/ow3qzF69wqcAle7bTyTRDSI-CjU.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12810
IP address blocks: 78.40.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:80:5e:e6:7a:50:15:b6:d1:d5:74:9a:13:4a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e7209a8c9b176fbf623edf3ee0b82007fc2c40
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a30deacc5ebdc2a70095eedb4f24d10d223e0a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:4a:ca:e2:e4:0a:72:b1:7a:67:b0:ba:77:
c0:02:ae:14:59:f4:17:1e:83:dc:ab:ec:4d:39:f0:
17:d1:a8:98:d9:29:ee:1d:d4:cc:54:bb:87:9b:04:
0e:f4:69:8b:f1:ac:29:ca:7d:92:47:04:6e:8f:ce:
a9:46:01:9a:0b:0e:b7:a9:0d:b0:1b:c1:7e:40:23:
5d:94:d2:8c:49:f3:79:a7:58:23:03:53:ec:c2:25:
0d:55:fc:52:ca:a7:18:a7:ff:70:cd:f3:a9:dc:03:
90:51:ae:38:6e:4b:bb:7a:b8:15:89:bc:db:58:0d:
2f:e3:6d:14:18:24:8e:0a:37:a6:d6:af:b8:b9:8d:
78:84:8a:f6:6f:a3:c8:ff:93:39:c5:99:04:67:53:
d7:25:56:d1:13:19:3b:bf:9d:a7:1f:1c:5d:4c:2b:
b9:72:34:50:39:32:a0:91:91:b4:24:80:00:79:b2:
c5:ac:3f:b2:60:8a:8a:ae:31:e8:73:36:83:b9:33:
3a:5b:03:43:9f:a8:fb:17:a5:5a:64:37:d0:69:b7:
3d:2c:44:9f:df:96:8e:35:07:da:5a:8b:9a:5f:0d:
1c:c6:20:d2:cf:5f:23:8c:09:62:7c:ab:97:f1:b8:
1f:f1:5d:e9:7c:cb:cd:59:ec:1d:3e:04:45:61:16:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:EA:CC:5E:BD:C2:A7:00:95:EE:DB:4F:24:D1:0D:22:3E:0A:35
X509v3 Authority Key Identifier:
keyid:99:E7:20:9A:8C:9B:17:6F:BF:62:3E:DF:3E:E0:B8:20:07:FC:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mecgmoybF2-_Yj7fPuC4IAf8LEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/ow3qzF69wqcAle7bTyTRDSI-CjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ef5856-bbc0-45a4-891e-b2dcc1863e8b/1/mecgmoybF2-_Yj7fPuC4IAf8LEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:87:da:d2:2f:c7:bc:a1:55:0a:41:d4:3a:4c:10:3f:5c:96:
a0:36:5b:08:e7:99:3f:1c:fc:45:77:69:11:d8:c4:32:08:dd:
55:06:79:d2:b2:b5:ba:0f:4f:fc:d0:e4:ce:90:fc:01:7a:17:
8b:a4:4d:40:c7:2f:77:cc:cd:81:e7:bd:ac:ca:7c:2a:40:bd:
96:6e:46:85:96:3b:0f:9f:d1:e9:e9:18:a3:ea:eb:e0:ea:0c:
d7:1e:0f:fc:fb:9d:a4:18:63:75:f2:15:cf:aa:b7:a9:4e:c7:
a7:06:0b:c8:f0:ff:6d:79:db:e0:0c:ac:de:10:1a:03:3b:b9:
c2:df:06:04:c9:7f:77:19:3e:71:09:10:0a:8f:77:42:59:c3:
71:36:f2:d4:fd:b2:be:72:f2:05:63:23:c0:4e:c0:dc:3a:64:
ae:df:5b:7d:0b:2f:06:f3:c6:9f:50:cb:f3:03:66:01:c9:04:
c7:c4:cc:da:b2:ce:c4:f5:93:c0:40:98:97:0e:e3:d2:b1:05:
60:fe:29:dd:6f:c6:7b:3d:17:80:9e:e0:0a:00:b9:26:b9:94:
a7:ef:ff:df:da:21:9e:46:77:57:ea:aa:48:bd:b9:6e:77:de:
89:6d:33:53:fa:89:31:13:8f:81:24:fa:cb:11:cb:ad:4d:a4:
f3:8a:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:20 2025 by rpki-client