Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/owvK-K4xt1xLcc7TBT_SQsn0CJs.roa
File: owvK-K4xt1xLcc7TBT_SQsn0CJs.roa (raw, json)
Hash identifier: i/ROe7RqOf5kAUxhkRxcQuX6NvNJ0cLz8fR53Bhsxmc=
Subject key identifier: A3:0B:CA:F8:AE:31:B7:5C:4B:71:CE:D3:05:3F:D2:42:C9:F4:08:9B
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 0194221FE861D83FF683D042EBEDC6CB625F
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/owvK-K4xt1xLcc7TBT_SQsn0CJs.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202691
IP address blocks: 185.157.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e8:61:d8:3f:f6:83:d0:42:eb:ed:c6:cb:62:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a30bcaf8ae31b75c4b71ced3053fd242c9f4089b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:b8:9a:e0:58:7e:3d:b5:ef:30:1a:a5:70:
01:41:08:e0:ec:6b:bf:12:d2:7c:8d:bd:c1:9f:6a:
cf:fe:f7:26:31:71:03:a8:03:78:72:c8:3f:ce:19:
a1:11:0a:c2:03:ac:3d:05:04:0f:84:df:12:0e:8e:
e4:6c:3b:4b:ac:6e:03:5c:53:2e:e5:16:31:44:36:
6d:4d:79:96:28:1e:f3:49:31:e6:ef:d3:fd:c0:cc:
67:dd:a9:c4:33:04:9f:25:16:5f:9e:80:bc:59:34:
bb:8e:bd:0c:e1:7c:b8:5b:b0:a9:0e:02:03:ee:44:
00:29:64:79:3d:22:0b:ca:90:99:10:c5:23:6e:3b:
01:2a:ac:d5:52:68:51:cf:d8:08:91:46:51:58:60:
dd:aa:77:68:e5:62:1a:cf:6b:fb:ed:75:5d:29:4a:
e5:3d:e2:a6:29:26:82:5a:cc:f7:24:0b:7c:23:64:
aa:4d:2c:d9:77:d9:0a:16:08:0a:13:b2:99:27:75:
c0:27:73:4f:22:46:6c:43:33:92:a7:d0:61:03:c7:
11:2f:32:f4:a8:4f:44:7e:fb:32:30:20:96:30:e8:
06:1a:d0:88:1a:3a:68:43:b0:f8:33:fb:2d:00:fd:
92:f2:c1:2b:c5:88:6d:3c:6a:bc:34:a0:16:01:b0:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0B:CA:F8:AE:31:B7:5C:4B:71:CE:D3:05:3F:D2:42:C9:F4:08:9B
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/owvK-K4xt1xLcc7TBT_SQsn0CJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.72.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:6f:3e:49:9b:b6:a1:2d:ff:10:6c:a8:67:36:43:31:e2:f2:
91:35:ec:e8:c8:4b:15:25:43:f0:a0:ec:41:60:12:b5:c9:67:
d3:56:e9:92:6e:eb:b0:54:ca:28:d7:8f:6d:f2:d4:d8:77:9d:
c0:c1:37:96:e3:a5:7c:bf:39:83:9b:2b:75:d2:4e:62:f2:61:
be:eb:67:46:3d:00:67:3c:16:dd:e6:e3:47:15:8b:ea:cc:6b:
86:63:f2:93:19:bc:ef:34:1f:51:23:5f:ea:66:3a:b5:89:ec:
e8:ea:8a:4c:40:c8:03:38:dd:21:a1:4a:6e:3b:5d:2c:62:df:
e6:d4:d3:c9:1a:25:2f:37:da:f0:7f:83:a0:d1:c7:79:5f:8f:
9d:e0:11:35:38:ca:c6:1e:d6:d5:53:51:e1:b5:83:cc:d7:24:
28:c4:7d:d8:55:94:47:3b:f5:11:e1:ed:e9:2b:7d:50:d1:47:
d5:51:00:21:52:12:05:72:a3:08:07:cf:87:a6:0a:90:26:87:
4b:51:fa:3a:b6:0e:ec:2d:3d:06:e7:39:09:7e:c4:71:0f:21:
4b:f0:1f:76:62:e8:e8:3c:d4:e8:db:2b:b9:7d:45:42:fa:d7:
da:f0:e8:f4:1f:45:16:8d:5b:7d:a8:be:e8:59:7d:fe:87:e3:
c5:81:47:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:12 2025 by rpki-client