Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/o2wn3mbItTBjc_bcacCib0Z56J0.roa
File: o2wn3mbItTBjc_bcacCib0Z56J0.roa (raw, json)
Hash identifier: 4MU1GeOc8ffLN6ba0fSqewF7b8KH+w7vt1UXghMCELk=
Subject key identifier: A3:6C:27:DE:66:C8:B5:30:63:73:F6:DC:69:C0:A2:6F:46:79:E8:9D
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 01958523BBA904E09AAC9D5A62D60FE7760F
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/o2wn3mbItTBjc_bcacCib0Z56J0.roa
Signing time: Tue 11 Mar 2025 12:17:46 +0000
ROA not before: Tue 11 Mar 2025 12:17:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 145.46.160.0/24 maxlen: 24
145.46.161.0/24 maxlen: 24
145.46.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:23:bb:a9:04:e0:9a:ac:9d:5a:62:d6:0f:e7:76:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Mar 11 12:17:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a36c27de66c8b5306373f6dc69c0a26f4679e89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:5a:74:dc:b6:79:15:61:c3:17:15:7d:f2:
01:5b:c1:8d:1e:bb:cb:9b:35:f1:9f:81:24:73:7f:
16:89:5a:ea:f7:24:29:c5:d0:a7:ff:98:9c:6d:16:
58:39:73:c1:8c:f1:e7:cb:1e:f7:1a:f2:9c:d1:2e:
bd:f3:3a:0e:e5:3a:e0:54:b7:5a:53:e9:1c:f3:cf:
92:0a:03:f4:c9:61:75:8c:fa:70:bc:95:c1:ca:b2:
a1:6d:8b:89:70:c8:92:27:a8:64:fc:40:a8:87:ad:
6a:65:bd:5a:41:7a:6f:7b:50:90:1d:99:fb:2e:4e:
ff:f7:03:bd:01:22:ca:8f:c5:2f:6b:61:1d:50:3a:
fc:01:0b:23:a1:41:25:f9:65:fc:3a:1e:80:e1:89:
8c:c9:93:a8:a9:21:46:b0:45:3b:af:70:24:5e:bf:
ef:2f:36:b2:03:d3:46:96:9b:ff:49:e5:71:09:c7:
83:5a:9a:3d:1c:d5:c0:44:4c:16:09:36:ea:80:3d:
7d:ba:8d:bf:85:20:2b:ac:58:89:b4:97:88:80:a4:
20:86:84:c6:25:bd:5c:43:8d:6d:2a:21:8d:da:54:
74:fa:90:68:2b:fc:e2:65:c1:f1:bd:80:85:6a:ae:
8a:a6:ed:ec:47:21:12:e3:51:69:a9:5e:8d:4e:1b:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6C:27:DE:66:C8:B5:30:63:73:F6:DC:69:C0:A2:6F:46:79:E8:9D
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/o2wn3mbItTBjc_bcacCib0Z56J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.160.0-145.46.162.255
Signature Algorithm: sha256WithRSAEncryption
12:3a:a4:67:12:6f:51:42:a5:7d:d8:71:50:96:ae:0b:8a:16:
03:52:21:e0:ec:da:09:f4:9d:c5:95:cc:ad:74:e3:90:bd:20:
dc:bf:83:c7:9d:89:d7:72:32:6c:06:04:05:37:93:3f:cd:bc:
3b:3b:d0:f1:fb:1a:ab:43:53:3b:d4:8c:3f:9a:d2:8d:91:ab:
39:e8:1d:27:2a:00:84:33:3b:76:da:e4:68:51:f0:cd:5b:b2:
66:b0:a6:62:2c:c0:fa:20:b4:6f:0d:6e:7f:60:ec:06:6d:2c:
b5:67:e9:49:de:c5:41:0e:cb:f9:3a:18:86:87:81:e8:9a:e1:
86:72:8e:ab:5c:09:d6:38:17:d7:62:51:2d:1a:d8:aa:50:9e:
cc:b0:83:33:d7:36:96:1e:aa:96:b2:5f:c2:cb:bc:f6:97:32:
ff:f4:48:87:b6:a8:00:6d:ef:fc:a7:a8:aa:bd:f5:f1:2b:33:
cd:e0:6b:e6:14:21:32:20:17:e7:e9:7b:bf:95:34:bf:73:78:
2f:31:b5:59:b2:a9:8e:18:a0:6e:d4:0a:f4:bb:61:42:a6:f2:
2b:c5:2e:1d:5d:4f:18:d8:41:a8:23:96:4a:3d:d5:fb:0a:0c:
f1:fb:23:38:74:ee:cd:c7:ba:0c:f7:e0:42:e7:f1:53:0d:03:
2a:6c:90:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:46:41 2025 by rpki-client