Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa
File: O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa (raw, json)
Hash identifier: 3xRQqmBaiPMEC6+BvwWE12p1a9per8d/4WLoxHZdLwY=
Subject key identifier: 3B:97:49:D4:FF:2A:3C:BB:EA:37:54:C5:64:22:6F:F8:10:87:57:01
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 01963ECE9ECBAA26433F9FFBBBF46024148E
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa
Signing time: Wed 16 Apr 2025 13:34:10 +0000
ROA not before: Wed 16 Apr 2025 13:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 92.249.24.0/24 maxlen: 24
2a14:6881::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:ce:9e:cb:aa:26:43:3f:9f:fb:bb:f4:60:24:14:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Apr 16 13:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b9749d4ff2a3cbbea3754c564226ff810875701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:f4:d0:d3:4e:6c:9e:56:b2:6a:7b:13:4f:
97:89:b8:6d:ff:0c:58:94:f1:0d:86:3f:18:93:0c:
dd:85:31:95:29:5b:91:72:72:55:44:fc:db:02:d9:
3b:b6:d0:e0:a7:90:ba:04:0b:c1:21:e0:38:c7:f9:
cd:d7:81:68:52:17:e1:aa:f7:bd:87:39:a0:9b:c5:
9a:56:d6:0c:ba:67:cf:82:29:d8:13:af:d9:fa:53:
db:17:da:ab:a2:b8:47:07:b7:b7:3f:3f:c5:ed:69:
a0:01:f4:69:f2:3c:02:20:02:49:49:f8:cd:0a:12:
ee:0a:ce:50:1a:21:40:33:6f:a0:7d:a7:80:14:b8:
aa:13:88:c8:b8:f1:5a:27:49:e2:de:b8:74:dd:f4:
fd:2a:20:36:23:eb:87:21:df:e8:33:6f:c8:96:e2:
69:bc:a5:cc:9a:3f:b2:3b:98:a0:f9:47:fb:e1:55:
13:25:2c:46:3b:f4:f6:20:f1:53:58:49:b3:f0:c9:
ad:76:fb:53:83:7e:28:9f:d4:f0:db:37:27:f6:1b:
ae:fc:2b:84:25:be:86:42:75:e0:f4:06:f0:13:db:
d7:f1:35:88:c3:57:0a:24:bc:8c:ce:6c:02:6b:c7:
c7:93:e4:eb:e5:3c:5a:f4:9d:fb:92:23:c8:29:61:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:97:49:D4:FF:2A:3C:BB:EA:37:54:C5:64:22:6F:F8:10:87:57:01
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/O5dJ1P8qPLvqN1TFZCJv-BCHVwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.24.0/24
IPv6:
2a14:6881::/32
Signature Algorithm: sha256WithRSAEncryption
08:4e:23:fa:93:8a:bf:a8:42:3d:ea:ec:15:89:28:8e:2e:2a:
64:c2:7f:54:86:19:52:57:1b:d8:9b:85:63:56:be:a8:11:2f:
2a:05:98:87:1f:a3:50:02:ce:ac:01:5f:08:cf:39:fe:90:8b:
a4:79:b7:64:d5:e2:22:4a:ac:82:f1:12:0e:8d:aa:74:9a:52:
e5:e8:fd:8e:69:72:24:02:74:bc:1f:07:2e:9a:0d:c4:d4:41:
76:5f:65:c0:64:25:4c:49:79:68:fd:cb:b4:77:f4:5e:f5:e2:
c9:b0:27:0f:64:3e:58:7f:c4:f5:ae:0f:aa:67:61:35:0e:40:
41:ad:b3:e3:cd:16:9f:d2:73:c4:74:dc:b3:24:d4:71:f3:89:
1a:d6:36:bb:7d:c0:8f:9d:84:a1:08:06:9e:b6:45:50:aa:f0:
9e:ba:42:8a:3a:93:31:cc:a9:1a:43:fd:b6:01:f7:62:88:e5:
1f:15:39:80:4f:ad:49:b5:54:c9:ba:aa:0f:50:a5:78:66:e0:
c7:42:28:3a:c7:17:2e:58:9a:4f:4f:f5:21:af:88:b7:b4:f8:
14:da:88:b2:4a:9c:9a:b8:ff:a6:7a:12:c1:15:af:02:3b:59:
a6:f6:a1:04:03:d4:44:65:12:b3:d9:b6:be:79:cd:52:b9:8a:
1a:70:89:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:04:22 2025 by rpki-client