Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/0BmC-81HN_hGVStiVWyBsG7yPOQ.roa
File: 0BmC-81HN_hGVStiVWyBsG7yPOQ.roa (raw, json)
Hash identifier: 1DBUkLbwQ3sH8OPXtfdrx6wa0RdQ3lqLVqMY8QCHCK8=
Subject key identifier: D0:19:82:FB:CD:47:37:F8:46:55:2B:62:55:6C:81:B0:6E:F2:3C:E4
Certificate issuer: /CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Certificate serial: 019422201BF972D7B82BC1E384027A2DF9D0
Authority key identifier: A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/0BmC-81HN_hGVStiVWyBsG7yPOQ.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 185.137.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1b:f9:72:d7:b8:2b:c1:e3:84:02:7a:2d:f9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ebf54d028ee4764f62f78ad871dbf026228788
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d01982fbcd4737f846552b62556c81b06ef23ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:f9:ed:50:0b:8d:25:6c:79:49:f6:65:bb:
0c:a5:b0:07:c4:63:1a:9c:ab:b6:7f:09:c8:1b:89:
1e:1e:ae:9b:02:63:df:4c:7e:06:1a:05:65:77:26:
a0:96:7e:31:2d:8b:7b:94:9f:cc:6f:60:ee:8c:80:
62:03:1a:e6:d3:21:b6:ac:1d:f9:5e:39:05:fa:8e:
c7:79:80:03:f2:a8:4b:1d:e1:3a:53:28:5e:b8:e4:
be:4a:6c:96:07:b0:ce:69:72:0c:ae:b3:9e:28:a1:
c3:ff:7d:d4:58:77:0c:43:fe:64:34:25:b5:45:81:
da:0d:9a:6b:41:08:e0:8d:f1:35:81:5a:b6:dd:b2:
c1:60:5a:ad:8e:f8:29:7b:f6:3a:74:40:83:7c:96:
27:12:8d:37:28:78:ed:da:bc:27:b1:d8:e1:db:5c:
81:36:01:9a:86:09:1f:6f:dd:97:40:98:31:f9:6b:
52:81:89:ec:46:16:f4:8a:60:6e:22:98:13:4d:95:
22:e4:23:c7:b2:fd:25:35:a5:3b:77:b2:aa:da:1d:
8d:47:c2:d4:ec:fc:d1:8c:26:c0:68:7b:98:e9:6e:
a4:81:ed:c1:81:b7:3a:b1:0e:fc:85:6f:31:a0:e1:
f7:a4:24:a0:6c:7d:8a:36:50:f5:45:9c:f5:2a:4a:
ec:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:19:82:FB:CD:47:37:F8:46:55:2B:62:55:6C:81:B0:6E:F2:3C:E4
X509v3 Authority Key Identifier:
keyid:A1:EB:F5:4D:02:8E:E4:76:4F:62:F7:8A:D8:71:DB:F0:26:22:87:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oev1TQKO5HZPYveK2HHb8CYih4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/0BmC-81HN_hGVStiVWyBsG7yPOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1b172a-61d1-420c-a3dd-47a5bf5b313d/1/oev1TQKO5HZPYveK2HHb8CYih4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.132.0/22
Signature Algorithm: sha256WithRSAEncryption
68:0b:d6:2b:1c:f1:a8:ea:4d:e1:16:f8:1c:20:67:f2:d8:a5:
c6:18:8e:7a:52:c1:67:11:fd:8d:c1:eb:e7:b1:ad:aa:03:c7:
8b:5e:29:80:c0:6b:d5:7c:2b:30:7c:29:3f:c5:96:15:58:b1:
a3:c1:96:7a:b4:ed:8e:dc:a6:67:cb:66:c2:7d:0a:de:47:35:
54:97:13:d6:ec:67:54:e1:16:ec:ec:e6:58:10:7d:91:65:fa:
79:f6:80:a4:1a:26:39:ce:80:42:03:70:de:39:e6:75:17:42:
f4:57:0d:20:c1:ad:ba:de:ec:ce:42:e2:7b:4d:2a:18:7e:33:
e6:0a:6c:44:36:39:5a:f7:d6:2c:e8:62:3a:c8:08:37:97:3f:
15:e8:ee:77:7a:0f:04:12:2b:58:a1:9b:0e:b5:e3:9c:4b:ca:
f3:b4:bf:67:fe:6c:3c:60:97:69:28:02:78:62:13:e0:51:5e:
46:5b:b1:00:2c:9b:f6:eb:20:a1:20:eb:1f:2b:b1:73:d8:6a:
af:06:c4:2f:62:58:94:b5:d5:7e:46:52:93:f4:8d:9d:0f:60:
38:a9:b7:5e:71:fc:97:14:5e:5f:b5:62:07:a4:6c:33:59:fa:
5a:22:bc:5e:35:54:64:af:99:4b:70:f1:5a:a1:b1:f9:ce:9c:
0e:3b:60:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:31:19 2025 by rpki-client