Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oEURMaHjBzBIHxRKWKxnRjWgUpg.roa
File: oEURMaHjBzBIHxRKWKxnRjWgUpg.roa (raw, json)
Hash identifier: T1xBd8wCAZpByfgcPgb4Tq36XZVDoGTxKS2/Zvcto/w=
Subject key identifier: A0:45:11:31:A1:E3:07:30:48:1F:14:4A:58:AC:67:46:35:A0:52:98
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019424B2E84E4CFA835F4F905050E8ADF2FB
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oEURMaHjBzBIHxRKWKxnRjWgUpg.roa
Signing time: Thu 02 Jan 2025 01:48:12 +0000
ROA not before: Thu 02 Jan 2025 01:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21016
IP address blocks: 185.176.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:e8:4e:4c:fa:83:5f:4f:90:50:50:e8:ad:f2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0451131a1e30730481f144a58ac674635a05298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:80:26:75:8a:e5:71:80:e4:e7:8a:b9:af:f3:
c7:24:aa:bf:6a:06:55:1a:7a:fb:81:33:0b:de:1b:
2e:8e:ce:0c:43:24:7b:43:7c:68:ad:83:5b:56:e2:
a6:ae:8f:0d:65:db:8e:0b:ca:ff:94:37:26:6c:92:
12:84:bc:a0:c2:28:8c:14:12:d9:15:af:11:0a:b4:
70:75:86:37:ef:e7:ec:ed:be:4a:38:5f:df:66:40:
96:e6:c0:2c:f3:2c:4c:57:6f:8e:0e:ea:ee:ee:a2:
76:b6:3d:1b:9f:bf:e5:ac:65:44:62:00:22:6a:8f:
af:d3:b7:72:6b:5c:a2:15:a8:5d:cb:cd:62:55:f4:
08:aa:c9:a4:03:b0:46:67:27:38:93:bb:66:d6:d7:
70:17:8f:7f:32:90:3a:69:39:b7:e8:f4:84:82:f8:
88:62:4c:62:2c:68:7d:de:e7:ae:88:ab:19:4c:bc:
5f:5c:2c:04:81:80:11:04:2e:36:ae:46:3b:e1:cc:
10:83:0d:cf:b8:4e:58:7f:47:13:44:ec:9f:52:35:
83:b1:e5:c1:1c:db:5d:67:20:23:8b:09:9e:e2:5c:
c8:2b:89:5c:fb:99:43:f8:f0:e4:7a:c1:d2:5f:6c:
85:17:94:2c:eb:52:dd:ac:da:8c:2a:28:04:e8:2c:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:45:11:31:A1:E3:07:30:48:1F:14:4A:58:AC:67:46:35:A0:52:98
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/oEURMaHjBzBIHxRKWKxnRjWgUpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.118.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e6:04:37:8c:70:b9:a8:05:cb:88:05:1a:b8:fd:21:92:08:
cf:a4:5f:1a:19:a8:e2:d1:68:3f:ee:4a:75:cd:45:c6:4a:e4:
c5:ea:78:21:01:4b:90:b0:4e:a7:1e:90:82:e5:8c:e1:be:ed:
cf:a5:ea:1d:93:c3:3a:86:ac:0f:8e:d7:c4:7c:d3:1e:09:b6:
a4:0c:63:6a:62:02:e5:cd:19:14:ec:40:4b:16:e4:88:98:c4:
f1:a8:40:f0:77:50:13:ce:a0:80:ea:21:f5:d7:52:3c:43:dc:
0e:42:60:6a:41:ce:79:e4:8a:72:b1:d3:b0:40:93:93:18:b2:
80:48:fe:ef:62:a8:aa:fc:91:d0:fb:3a:48:40:e3:52:a1:83:
a7:20:d8:cb:bc:9f:cf:10:e6:aa:23:cd:82:ca:c4:2e:c8:b6:
de:51:0c:8a:d6:90:3a:75:37:19:60:b7:8f:5d:be:e9:02:d4:
07:42:0e:1f:c4:cc:1c:63:43:41:52:ff:46:dd:e3:2e:d2:31:
66:50:0e:60:d5:a3:29:94:a6:96:0f:40:ba:70:43:10:4f:6c:
be:80:e8:37:a3:d2:e3:99:b4:3e:82:3c:35:d1:15:0f:2f:97:
94:48:33:02:93:bf:e3:68:e7:95:f9:d2:83:46:8a:4e:67:a9:
37:d6:d4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:34 2025 by rpki-client