Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/T3oxGhtfnzHKbbwdZErkaogp77o.roa
File: T3oxGhtfnzHKbbwdZErkaogp77o.roa (raw, json)
Hash identifier: WlvKNk40vKPhNT0/amKR/KLk793BzUumFCKvq07PRvg=
Subject key identifier: 4F:7A:31:1A:1B:5F:9F:31:CA:6D:BC:1D:64:4A:E4:6A:88:29:EF:BA
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0194282426C303CE01BD2D6895BEFE6C7C7E
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/T3oxGhtfnzHKbbwdZErkaogp77o.roa
Signing time: Thu 02 Jan 2025 17:50:45 +0000
ROA not before: Thu 02 Jan 2025 17:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59989
IP address blocks: 94.72.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:26:c3:03:ce:01:bd:2d:68:95:be:fe:6c:7c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f7a311a1b5f9f31ca6dbc1d644ae46a8829efba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:0e:a4:96:c0:fd:c9:1e:12:1b:1d:d8:1a:
57:bf:5a:1a:0c:03:fe:9f:83:44:21:31:76:72:d4:
c8:5c:52:1a:57:ae:13:42:7f:04:f5:4f:4f:37:87:
76:ed:17:08:e5:02:71:54:57:11:d1:cb:f8:90:83:
aa:0b:d3:01:81:16:5a:e3:ce:7c:83:ea:82:97:35:
7c:9e:22:87:ef:8c:9b:9d:ba:12:a9:4e:17:64:f1:
74:1c:75:b2:74:fa:4d:d2:e3:03:a1:cf:53:c8:e3:
8e:08:9c:91:1b:c7:8b:86:0c:fb:dc:9a:75:f4:a7:
3d:64:5d:ff:de:b8:36:f6:b9:d7:df:18:2e:26:59:
c7:ac:0b:79:4f:96:4c:54:c4:9c:18:9e:9e:9b:12:
eb:ac:45:a1:6b:75:5d:71:db:9c:a7:45:11:2b:b7:
d0:10:70:c0:39:92:94:80:e5:b8:ce:d8:e7:ec:49:
2d:48:0e:ff:ea:d3:63:88:fc:73:89:82:d5:79:c6:
9e:03:ab:6b:b2:cf:6c:71:d1:bd:9f:86:d2:2d:8d:
02:9c:f6:cd:36:7d:f9:e5:bd:72:88:b4:24:8c:e6:
59:9b:56:76:fb:a8:2f:b8:1a:32:81:cc:27:ff:bb:
99:85:e4:59:ba:ba:56:93:25:3a:d6:e7:14:da:0f:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7A:31:1A:1B:5F:9F:31:CA:6D:BC:1D:64:4A:E4:6A:88:29:EF:BA
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/T3oxGhtfnzHKbbwdZErkaogp77o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.72.152.0/22
Signature Algorithm: sha256WithRSAEncryption
28:cb:65:78:01:6e:4a:91:eb:ae:33:06:b2:7c:ca:ed:55:fa:
f5:2d:df:c5:72:5d:52:35:4c:94:9c:8f:41:b3:de:d7:95:b6:
0f:71:9e:ee:3d:ee:4a:62:1f:4e:d8:b6:5d:ae:be:23:be:1c:
b3:31:c5:1e:cd:14:c6:68:4e:aa:1f:bc:62:df:9d:2f:a0:de:
33:76:2e:0b:4e:73:e4:02:ca:79:fe:16:2e:95:ce:61:ff:41:
3a:ef:fe:27:ac:19:36:b3:05:cf:8b:e8:a1:4d:d6:a7:e6:d4:
1c:24:43:ad:b5:de:6f:ed:56:d9:a3:9e:13:f9:f9:a4:40:c2:
6a:96:7c:95:4f:f7:2b:ba:38:8b:92:79:f8:1b:3f:46:f9:1f:
9e:60:b5:43:9c:43:f7:a8:1a:c1:4b:56:7d:2b:5f:9f:d2:e2:
9e:7d:89:b8:ce:14:03:1b:5d:f8:d0:4a:e3:30:34:b8:c4:16:
91:19:42:f8:62:b8:b6:cb:d7:6a:61:76:cb:a6:ec:e7:64:70:
fe:ec:67:e8:de:22:8d:42:d3:67:3d:0b:69:1a:f5:41:a0:0f:
1f:d9:8e:70:c7:56:26:7d:70:cf:cc:66:4a:87:47:ae:70:b5:
fd:29:e5:8e:96:d8:6e:cc:a6:f4:cf:64:3f:50:96:a5:28:ae:
e3:ab:c9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:35 2025 by rpki-client