Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_OjBMcVOlqy9lTfr01lZpb_INZk.roa
File: _OjBMcVOlqy9lTfr01lZpb_INZk.roa (raw, json)
Hash identifier: VJPha5ZK28o2nlIrL07oBw/EDyExcxbcu5wxvMTvbd4=
Subject key identifier: FC:E8:C1:31:C5:4E:96:AC:BD:95:37:EB:D3:59:59:A5:BF:C8:35:99
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F3F170691343F3636DD269D2C863
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_OjBMcVOlqy9lTfr01lZpb_INZk.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 140042
IP address blocks: 149.126.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f3:f1:70:69:13:43:f3:63:6d:d2:69:d2:c8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fce8c131c54e96acbd9537ebd35959a5bfc83599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:c2:24:e7:a4:ae:2a:60:52:a9:c3:a3:db:
cc:8a:6e:3b:43:ef:0e:fc:9d:72:66:4d:31:2c:5c:
dd:95:ae:b6:b9:05:2e:95:27:0d:d3:80:0b:65:9f:
bd:d5:32:e5:72:1c:9f:93:08:1f:9f:de:0d:7e:cd:
02:45:75:6c:ed:17:96:9b:a2:e4:43:ba:00:72:93:
16:cd:d6:60:24:de:7f:c3:f6:9e:de:cc:29:a9:2d:
f4:09:d0:29:a1:29:39:b9:11:3b:a2:cf:d6:40:6a:
b1:b0:3b:7f:9d:12:4c:18:54:c1:b1:71:83:98:65:
41:d9:b5:e5:48:6d:96:4e:5c:26:60:8c:00:bb:54:
50:0c:1f:24:b5:b7:0b:84:2e:5e:50:6c:fe:43:90:
c1:ac:53:fe:09:2d:e6:75:0e:bf:c9:04:79:d6:4e:
bb:a8:94:62:e4:d1:e7:7c:24:e4:9e:d6:ad:80:bd:
de:d4:db:65:a6:a6:4b:53:3b:9d:42:65:ce:a0:69:
27:1c:43:af:b9:65:a3:e4:7c:f7:6e:66:d4:f8:5a:
a7:1c:14:bb:af:f6:dd:e5:19:16:55:da:ec:75:8c:
5d:78:7e:94:f6:2a:cb:bd:a6:0f:ea:4b:92:a7:1d:
21:1c:19:83:cc:2d:10:af:20:08:21:45:d5:05:fa:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E8:C1:31:C5:4E:96:AC:BD:95:37:EB:D3:59:59:A5:BF:C8:35:99
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_OjBMcVOlqy9lTfr01lZpb_INZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:7c:5f:a3:fb:35:3b:8e:5a:93:2b:5d:3e:43:a3:bb:9f:95:
c7:ad:eb:57:93:a4:5b:c4:83:99:20:24:64:c4:7f:d9:05:b4:
7d:68:fd:57:57:21:fc:93:1f:e0:f1:3e:32:b6:dd:04:32:5d:
a5:0c:14:b0:4c:8e:45:bb:13:ff:9f:c9:0b:8c:f9:3c:5d:bd:
26:d3:0a:48:4e:5d:c0:f8:6c:2e:92:e3:da:5a:7e:a0:ab:41:
b8:e4:e2:c4:c9:f0:ac:e3:e5:40:f8:ba:b2:e2:2c:8c:ea:72:
1a:3a:28:ba:cb:a9:86:19:1a:81:d0:a5:85:1f:03:2e:18:38:
26:e2:6c:3b:19:16:ef:90:30:0e:4e:7a:00:38:e8:76:ac:62:
ec:45:71:df:3b:ce:de:ce:e7:76:c9:e8:58:8a:88:ff:17:05:
3d:50:cc:0c:3e:98:ac:62:c9:a4:3e:72:52:5d:b6:ee:41:89:
50:66:4a:ba:5c:18:58:3e:5e:f9:a9:04:80:60:0f:4a:21:70:
cb:bf:a7:9f:53:5a:96:35:35:e8:7a:3c:16:31:0d:ce:e1:79:
04:8e:20:51:5f:b1:33:b1:5b:3e:f9:36:86:84:35:f3:bd:7d:
f6:48:aa:9b:89:76:02:b8:31:4b:62:8d:b3:26:38:31:da:bc:
65:9a:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:47 2025 by rpki-client