Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/oBBYy0ld98gJluOgW3OE5ry-1bI.roa
File: oBBYy0ld98gJluOgW3OE5ry-1bI.roa (raw, json)
Hash identifier: cDSWMJxoBmliysmmQ82PR5LMpFN2xHzw2hwrTiHsQ+Y=
Subject key identifier: A0:10:58:CB:49:5D:F7:C8:09:96:E3:A0:5B:73:84:E6:BC:BE:D5:B2
Certificate issuer: /CN=81c11512eee8fed91c422f33b658d68bc34eb780
Certificate serial: 0194221F61A7F430DB484BB3D533EBEFFD02
Authority key identifier: 81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/oBBYy0ld98gJluOgW3OE5ry-1bI.roa
Signing time: Wed 01 Jan 2025 13:47:49 +0000
ROA not before: Wed 01 Jan 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50625
IP address blocks: 94.232.216.0/21 maxlen: 21
178.212.160.0/21 maxlen: 21
192.162.172.0/24 maxlen: 24
192.162.173.0/24 maxlen: 24
192.162.174.0/24 maxlen: 24
192.162.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:61:a7:f4:30:db:48:4b:b3:d5:33:eb:ef:fd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c11512eee8fed91c422f33b658d68bc34eb780
Validity
Not Before: Jan 1 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a01058cb495df7c80996e3a05b7384e6bcbed5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:3f:e6:34:23:17:00:eb:09:5d:80:da:64:
4c:94:f4:10:40:b8:3a:11:05:38:c6:b9:41:e2:d0:
b7:db:21:f0:2a:ea:e0:14:ac:5f:d9:01:a6:9d:4d:
32:de:3c:8a:c4:8c:8d:70:e1:31:3a:ad:b1:2c:42:
f5:95:52:7b:93:2a:0f:45:b8:b3:15:19:aa:27:b4:
7e:52:61:44:d1:51:48:3e:ad:9e:12:ea:4e:56:c6:
85:87:3f:09:63:dc:be:94:b0:b2:b7:ea:64:62:b8:
22:36:b1:44:9f:43:04:d1:7c:56:62:09:78:f2:84:
30:51:b7:4d:d6:5a:7a:01:c6:ad:1d:2e:98:92:23:
d0:4d:fd:08:55:43:2e:af:04:34:99:fe:66:b2:2f:
8a:80:46:65:c8:17:c6:c9:bc:0b:37:42:4b:df:ce:
73:35:41:83:5e:f4:61:01:2a:89:d2:a4:64:49:43:
33:34:86:79:1a:ad:d8:e7:ec:4e:cc:b7:88:66:cd:
53:de:95:c6:27:5f:7b:70:5e:6c:f3:81:fd:2e:c8:
a8:34:d8:8c:55:1e:a2:34:55:d0:4b:9d:63:d1:3d:
76:56:ed:26:a8:8c:43:2e:da:a2:c4:3a:4d:9e:41:
42:45:e5:48:03:f3:8e:6e:e6:46:8c:f8:9f:69:98:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:10:58:CB:49:5D:F7:C8:09:96:E3:A0:5B:73:84:E6:BC:BE:D5:B2
X509v3 Authority Key Identifier:
keyid:81:C1:15:12:EE:E8:FE:D9:1C:42:2F:33:B6:58:D6:8B:C3:4E:B7:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcEVEu7o_tkcQi8ztljWi8NOt4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/oBBYy0ld98gJluOgW3OE5ry-1bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c2c03e-56e1-403a-93de-e23ad799b1d1/1/gcEVEu7o_tkcQi8ztljWi8NOt4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.216.0/21
178.212.160.0/21
192.162.172.0/22
Signature Algorithm: sha256WithRSAEncryption
68:de:62:9a:05:99:3c:ca:f0:41:69:f3:71:e3:e9:3d:50:4f:
c0:ad:ca:97:f1:d7:0e:f3:ef:ff:71:4e:9e:5b:ff:53:f5:3c:
9c:b4:4c:07:e2:31:5c:8b:3b:6c:cd:a6:9f:05:b3:70:2c:4d:
b0:bd:cb:e7:85:a6:c0:d3:58:24:ff:56:84:a0:2b:90:0b:e9:
b5:69:da:5e:7d:ad:48:1d:7e:20:d2:21:9e:0e:15:22:f7:67:
9f:05:9e:d2:3f:17:18:ca:6e:a0:da:ba:d5:b4:e3:ee:b7:db:
5b:a9:0e:8d:2d:9f:bc:5a:b4:8d:6b:34:ac:f4:e2:a1:8e:56:
a2:f6:89:bb:51:13:3d:7d:e1:98:3b:e8:39:46:61:64:c5:63:
e8:53:28:13:ed:73:d8:3f:29:e9:df:a0:13:83:ef:8c:28:1c:
76:c2:55:c4:3e:a6:99:13:bf:aa:bd:a3:b2:b8:c2:22:ad:7e:
84:f5:4e:ca:6c:a3:3e:2d:fb:3c:c6:c2:db:35:0b:ba:06:f8:
1f:dd:f7:c3:59:23:9f:c6:0f:f4:bf:f2:bf:03:fc:27:87:88:
45:95:5b:a4:89:80:9a:cc:e7:85:f4:a9:e3:72:b5:84:8b:e0:
5f:6d:6b:9f:87:cc:fc:1a:57:e6:fa:48:21:42:4e:27:06:e0:
78:ca:65:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:53 2025 by rpki-client