Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/oANVOGpGqSZNzfjjdghTPit9_38.roa
File: oANVOGpGqSZNzfjjdghTPit9_38.roa (raw, json)
Hash identifier: VSfuOwX73gMez7dFTyLtUenlMRci41842EschwuvUEw=
Subject key identifier: A0:03:55:38:6A:46:A9:26:4D:CD:F8:E3:76:08:53:3E:2B:7D:FF:7F
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 019421443227D68F3C1117A583093F2F117D
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/oANVOGpGqSZNzfjjdghTPit9_38.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215968
IP address blocks: 194.49.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:32:27:d6:8f:3c:11:17:a5:83:09:3f:2f:11:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a00355386a46a9264dcdf8e37608533e2b7dff7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:12:05:ae:a9:ee:f1:7d:30:9a:05:b5:77:
f5:8f:d0:b3:f2:1f:30:6d:75:32:1f:16:7f:3d:8e:
cf:8c:4b:9e:08:0b:ba:75:cf:42:43:59:a1:87:3a:
ae:da:df:79:fb:57:54:72:90:23:2b:2e:3d:a3:a0:
d0:46:d9:9d:91:e0:27:69:15:9d:70:88:18:0e:b3:
50:66:ca:35:f3:a2:96:17:9d:0a:07:4e:96:7e:16:
3d:8c:76:65:0e:a7:25:db:bd:e1:ff:aa:94:e9:2f:
3e:4c:d8:0e:46:70:4c:44:b5:c2:99:05:a2:89:a1:
01:1e:6b:e0:43:b4:ff:20:2b:25:cc:40:36:38:d5:
66:75:ee:5b:98:5e:02:78:62:3a:e1:d0:9e:5e:44:
94:41:6a:1b:c9:f4:d5:aa:17:07:02:85:e5:0a:d6:
97:a2:3d:9a:13:47:35:38:8d:e3:b6:4c:fc:d1:f7:
c1:47:ac:ee:d3:b0:52:e2:cc:4b:df:5e:78:d0:bb:
a6:70:0d:95:78:69:a1:dd:47:73:bd:89:d1:e3:1c:
46:ee:3b:41:05:ab:d3:04:31:cc:26:f6:b0:ca:ac:
89:f4:c5:83:46:a4:f9:7f:9b:c2:6d:96:96:f9:8a:
9c:42:69:a2:ae:31:eb:9c:c6:bf:a8:90:75:b3:5b:
de:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:03:55:38:6A:46:A9:26:4D:CD:F8:E3:76:08:53:3E:2B:7D:FF:7F
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/oANVOGpGqSZNzfjjdghTPit9_38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.55.0/24
Signature Algorithm: sha256WithRSAEncryption
65:91:b9:9d:98:61:db:b2:57:be:13:34:ce:f6:87:f0:02:4f:
a4:4d:9d:43:dc:ec:d4:9a:68:c1:4f:46:73:6f:ec:39:52:2d:
53:03:06:2b:da:b4:31:bd:3e:95:b4:15:c7:89:77:e5:14:ad:
78:73:11:de:22:45:4f:d2:4c:a7:19:b8:bc:58:23:f1:4d:33:
ee:7c:72:16:0f:08:63:82:94:ce:76:29:93:fc:76:21:79:39:
c5:00:6c:34:a7:96:ec:c1:e4:da:fa:21:90:e5:8e:fe:c8:bb:
0f:1e:47:9d:26:06:a9:77:16:13:09:c9:45:0b:10:7c:f7:2e:
8a:7b:b3:f1:09:d8:ff:46:03:8a:5a:29:66:5b:7d:5e:14:68:
97:73:03:ff:f3:bd:9c:37:bc:ba:fb:14:0c:c0:4d:09:5e:c3:
5a:f7:bd:e3:6c:35:61:03:7c:bc:f1:7a:91:11:85:46:c6:06:
df:c3:6b:90:12:c0:bb:a1:b1:f8:ee:95:2d:30:41:7a:c9:24:
f6:a7:f9:be:59:02:b1:6e:09:d9:bd:83:27:d0:b0:1d:79:b1:
3f:cf:ab:b7:41:99:5f:8d:50:a3:b7:de:de:2a:ee:77:d6:6d:
2b:04:1e:a7:6c:d4:78:44:f1:4c:72:01:d1:40:28:24:5e:db:
12:d1:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:55 2025 by rpki-client