Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/oskd316tBTAUTSHf0wsKURHXyDc.roa
File: oskd316tBTAUTSHf0wsKURHXyDc.roa (raw, json)
Hash identifier: IsLUQsw+ev9Voy8iNeiPun8V5Wlg4SPwA/B548IB55M=
Subject key identifier: A2:C9:1D:DF:5E:AD:05:30:14:4D:21:DF:D3:0B:0A:51:11:D7:C8:37
Certificate issuer: /CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Certificate serial: 0194228D14A4B7005B0085FD8B85A0425504
Authority key identifier: 43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/oskd316tBTAUTSHf0wsKURHXyDc.roa
Signing time: Wed 01 Jan 2025 15:47:38 +0000
ROA not before: Wed 01 Jan 2025 15:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201876
IP address blocks: 185.50.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:14:a4:b7:00:5b:00:85:fd:8b:85:a0:42:55:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439dd1ceae0f65d62a2eb7c67c48dd430e7da696
Validity
Not Before: Jan 1 15:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2c91ddf5ead0530144d21dfd30b0a5111d7c837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:60:3c:33:e0:21:4d:44:22:f3:6a:29:65:
e1:45:41:89:35:94:27:d6:14:b4:ab:f0:30:74:43:
d3:46:94:5e:7a:06:18:3e:15:78:ea:94:d2:f8:95:
e9:10:08:d4:ea:a9:c0:9e:55:2b:33:70:1b:06:3f:
5f:29:c2:d9:68:ab:df:19:f2:53:14:f5:43:ee:42:
6e:c5:66:30:fb:54:20:cf:e5:f8:80:bd:7d:87:99:
ef:18:f9:fc:b2:c5:04:d7:36:0a:e6:e5:57:75:28:
16:63:e2:7e:22:8e:00:cd:7c:d9:64:4b:39:4b:aa:
b1:f7:25:10:f8:5a:fd:3d:61:6b:98:44:c8:17:5f:
b7:84:18:02:0a:85:98:e8:f9:8d:73:a5:1d:64:6d:
cc:fe:e9:f6:f1:ab:5f:50:fc:c1:13:7d:8a:ea:e6:
9d:e2:be:f4:df:73:10:dc:7c:60:1d:12:17:ed:64:
54:7b:b2:08:d6:8f:d2:3c:55:6c:d7:fc:81:c3:0a:
d6:74:32:85:aa:f8:b3:35:88:08:4d:30:08:93:d3:
28:5f:97:c5:10:c7:88:cd:e7:ad:21:99:75:7e:4b:
c1:4a:96:75:53:4a:02:fa:96:42:4b:ea:34:87:02:
7c:51:c4:ff:4c:68:be:12:ab:da:2b:e8:45:85:05:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C9:1D:DF:5E:AD:05:30:14:4D:21:DF:D3:0B:0A:51:11:D7:C8:37
X509v3 Authority Key Identifier:
keyid:43:9D:D1:CE:AE:0F:65:D6:2A:2E:B7:C6:7C:48:DD:43:0E:7D:A6:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q53Rzq4PZdYqLrfGfEjdQw59ppY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/oskd316tBTAUTSHf0wsKURHXyDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/b37a56-7bb1-4f83-a17e-6417bd8fe29c/1/Q53Rzq4PZdYqLrfGfEjdQw59ppY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.112.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:39:c0:44:66:f5:18:ff:a8:75:d1:b6:58:6a:7d:b5:98:fe:
ae:76:38:6c:e2:8e:cb:05:53:56:53:b3:d0:cd:19:38:44:01:
6f:01:31:13:80:e5:41:ba:76:ae:e9:0a:85:a8:fa:47:b3:5c:
52:9f:08:77:1c:f8:5a:96:20:a6:1d:d1:c3:a5:90:4c:7a:e7:
49:a4:55:aa:ea:61:13:7b:98:91:61:b8:bc:41:18:3a:d1:0c:
c5:41:cd:aa:a7:0e:78:2b:29:36:5f:19:c1:a8:e9:a8:6f:25:
a7:3d:05:ce:0f:56:1d:5e:59:23:b6:5e:5d:32:fe:e8:5c:e8:
65:42:3f:2d:b3:6d:32:d8:66:9b:7d:74:a9:c2:9e:57:07:cd:
05:5c:44:ed:17:2e:cf:b6:6c:89:db:f3:bc:1e:b0:28:a9:dc:
92:a1:24:40:00:5c:53:e2:07:4e:51:b2:45:7d:8c:d8:13:fd:
b2:51:0f:70:1f:3d:17:c0:db:2f:70:45:4f:19:43:e0:9a:2f:
42:06:80:20:4c:04:e6:41:b4:28:a8:fa:44:46:5d:a6:dc:01:
16:2a:ab:10:bc:ab:e6:4c:a3:c5:2f:44:92:03:73:0a:7e:96:
6b:a7:97:c0:6d:66:7a:c3:54:04:e7:1d:3a:70:e4:b3:34:a6:
20:54:b7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:14 2025 by rpki-client