Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/oD6-_ySxwIZNHRBLdh1EsHHsRV4.roa
File: oD6-_ySxwIZNHRBLdh1EsHHsRV4.roa (raw, json)
Hash identifier: sAQHwkiD2lZDCVsriC16YxE+OETBeSCkVF8S8rYbgnE=
Subject key identifier: A0:3E:BE:FF:24:B1:C0:86:4D:1D:10:4B:76:1D:44:B0:71:EC:45:5E
Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Certificate serial: 019542ABFD8B3662340CC5FD6EEA2F5E552A
Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/oD6-_ySxwIZNHRBLdh1EsHHsRV4.roa
Signing time: Wed 26 Feb 2025 14:32:02 +0000
ROA not before: Wed 26 Feb 2025 14:32:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 185.160.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:42:ab:fd:8b:36:62:34:0c:c5:fd:6e:ea:2f:5e:55:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91
Validity
Not Before: Feb 26 14:32:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a03ebeff24b1c0864d1d104b761d44b071ec455e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:bd:85:03:3e:62:2d:7f:f3:2e:c8:58:6e:
72:94:fb:ee:9d:fd:d1:69:76:23:27:47:96:a3:36:
84:fc:df:d6:8f:25:38:a3:2e:8b:d6:76:d6:70:dd:
b9:46:18:ce:1b:f8:9c:e8:99:f0:2f:35:94:7c:4f:
4e:4a:68:79:60:99:6b:28:01:98:53:0a:77:2e:f7:
06:b2:32:7f:37:60:95:3b:ba:d5:37:72:64:9a:b1:
a3:17:34:91:95:98:f7:de:ca:be:92:de:5f:a3:cf:
c0:70:f2:5f:67:58:f3:d4:c1:82:07:1e:62:8d:50:
23:36:04:94:38:71:50:67:35:2a:1c:cf:6b:ce:ec:
d8:19:61:0c:05:d4:42:12:25:96:ca:6c:29:cf:98:
57:14:cc:1e:e1:6f:30:1f:7e:db:17:07:82:2c:01:
d1:68:49:36:f1:2f:6b:f0:9a:0e:71:f8:6b:df:86:
cb:f0:eb:2f:87:7f:c8:53:03:18:4f:ba:63:17:76:
58:71:c5:3e:bb:51:8a:79:c0:59:34:31:ea:b5:c7:
1e:d1:f9:61:a8:83:6f:31:3a:35:3c:a0:4b:b2:14:
29:f4:f7:c7:ed:1e:11:6f:1d:cc:12:ef:c7:b1:6c:
fd:6d:30:26:c3:51:7c:1e:12:31:61:a7:af:e6:4b:
c6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3E:BE:FF:24:B1:C0:86:4D:1D:10:4B:76:1D:44:B0:71:EC:45:5E
X509v3 Authority Key Identifier:
keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/oD6-_ySxwIZNHRBLdh1EsHHsRV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.30.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5b:4b:a5:94:e2:41:2d:6d:50:c9:db:ac:37:c9:22:35:29:
58:9a:a4:15:60:44:4e:e2:c8:42:19:60:21:e8:5e:d8:e4:70:
a7:82:0e:f8:f8:7d:7b:9c:ab:08:d1:be:04:89:d2:05:fd:57:
ef:52:de:b9:5b:7d:b6:d6:c5:1a:16:40:e4:98:07:0b:df:f0:
bd:51:a6:9a:ac:6f:46:04:3d:13:0a:ee:22:e5:8a:4c:1c:f0:
39:28:06:38:2e:03:34:01:18:9e:06:60:57:c1:17:50:db:79:
b5:8a:02:0c:3c:8d:b0:bc:86:20:61:89:8f:4a:2d:38:24:87:
de:eb:27:61:3f:3a:b0:42:e4:19:c2:d7:a7:65:e0:2c:32:fb:
88:be:e6:d7:95:bc:b2:08:55:0f:c1:59:ee:b9:9a:e2:71:73:
a3:2c:9f:6f:9e:ae:eb:5e:f3:3b:05:15:c6:e4:77:1b:56:af:
c4:6c:dd:4b:cb:7f:d8:a7:c4:48:fb:b3:0c:78:f0:34:36:09:
41:2f:13:8a:2a:15:b0:aa:e5:a4:f2:47:11:4a:9e:eb:fe:45:
fc:85:e8:ac:df:f5:3a:c3:6d:c4:a2:b0:86:77:c0:af:aa:da:
12:57:57:6a:88:70:77:88:c3:e2:87:32:4a:ec:0d:cf:09:fb:
a7:b2:ae:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:37:16 2025 by rpki-client