Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/oZEeWPGfEOsJMw0F9nwHDdVOGRU.roa
File: oZEeWPGfEOsJMw0F9nwHDdVOGRU.roa (raw, json)
Hash identifier: HNqkGeGmxCcQK39sTwTcN/DUzfSDSYIs3Ek5YRR36ps=
Subject key identifier: A1:91:1E:58:F1:9F:10:EB:09:33:0D:05:F6:7C:07:0D:D5:4E:19:15
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F4E251ECF0D3A0AA37480A645B768
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/oZEeWPGfEOsJMw0F9nwHDdVOGRU.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198461
IP address blocks: 81.93.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4e:25:1e:cf:0d:3a:0a:a3:74:80:a6:45:b7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1911e58f19f10eb09330d05f67c070dd54e1915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:11:10:d5:7c:c6:87:05:c4:2d:c2:d5:52:
2b:7d:80:ac:b8:20:4f:21:68:26:9a:98:df:fa:0e:
2e:3a:28:02:05:bf:bc:f6:a2:16:99:9b:3d:65:69:
6c:30:64:ec:84:fb:59:c1:01:6a:ce:c9:91:eb:45:
d0:d0:85:3f:7a:4b:29:7b:ef:16:d4:43:be:c5:5a:
29:11:a4:72:c5:7b:77:93:03:2e:80:35:6d:8d:bc:
bf:7a:47:58:7e:35:e5:a0:0b:5c:4e:7b:fa:7c:10:
6d:fb:c6:95:6c:9d:12:60:ba:51:02:0b:15:78:5e:
1d:00:ba:ce:d6:b9:7a:7e:5d:4d:d2:50:ee:6e:13:
68:d5:47:59:07:76:c8:78:e4:15:54:54:7c:38:6c:
c9:17:5d:bc:c8:91:71:0b:1b:0a:26:03:2a:9d:c3:
58:85:7f:39:31:d1:ec:a1:a5:ec:e3:25:58:d0:a0:
f1:fa:e2:e5:e7:d5:81:5c:cc:53:85:71:b4:c0:07:
f0:d6:b5:99:7b:31:49:c4:7c:2f:f5:f9:1e:04:bf:
26:2e:c6:47:d4:fe:81:80:c2:2b:f2:b1:d2:7b:c1:
33:2e:9c:b6:43:6c:76:9d:96:de:55:e8:d9:87:72:
6e:69:68:f7:fa:5b:2f:ee:df:20:99:8a:78:e3:70:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:91:1E:58:F1:9F:10:EB:09:33:0D:05:F6:7C:07:0D:D5:4E:19:15
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/oZEeWPGfEOsJMw0F9nwHDdVOGRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.93.219.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ac:11:cc:41:78:c4:88:e5:d1:56:80:cf:f3:3b:94:17:bd:
a1:98:a3:61:fe:41:b9:55:fc:7d:36:26:44:50:91:d6:b5:d2:
c3:22:04:62:e7:96:0d:a1:62:0a:a6:73:e6:5c:83:f3:b0:ca:
85:2c:a6:9b:24:eb:6c:45:55:13:a4:ea:8f:c8:26:f6:7e:e9:
32:38:89:e0:cb:f2:0c:d2:2f:0b:73:54:3f:51:3d:0e:dd:2f:
0e:85:7f:80:22:cc:8e:6d:35:45:09:53:2e:e8:ec:13:73:b1:
2c:2d:02:03:38:f3:cd:09:b3:64:d9:c0:ff:f9:58:71:19:de:
27:a6:cd:8b:d1:aa:16:a5:2c:85:38:ee:72:e8:2f:99:2e:7b:
1e:1c:35:16:da:67:fa:8e:18:5f:aa:fb:67:f0:52:ec:45:4e:
2a:cb:19:c4:01:29:00:7c:a5:9f:63:59:9f:00:fb:f9:ee:b5:
2d:bc:df:ac:b6:c2:c6:f6:44:c5:13:d2:82:b0:5a:73:6f:45:
34:92:2e:f6:32:90:29:58:4f:f6:56:45:dc:b5:06:f4:6c:ed:
80:a2:17:eb:51:c2:a2:72:5f:de:00:c9:75:26:1d:06:15:07:
c0:03:43:96:ac:93:81:49:50:4b:51:3a:00:ce:52:96:87:38:
5f:86:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:35 2025 by rpki-client