Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OBo5Wo30NVLHG065qLc9q73yauM.roa
File: OBo5Wo30NVLHG065qLc9q73yauM.roa (raw, json)
Hash identifier: JXPfVQqyBcyNRe7Bf1w6UwR2WMBYITp6Q+tTNqtE4tc=
Subject key identifier: 38:1A:39:5A:8D:F4:35:52:C7:1B:4E:B9:A8:B7:3D:AB:BD:F2:6A:E3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194BC4CF2F392674EB68A51CC96A3ECF7A9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OBo5Wo30NVLHG065qLc9q73yauM.roa
Signing time: Fri 31 Jan 2025 12:19:07 +0000
ROA not before: Fri 31 Jan 2025 12:19:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215590
IP address blocks: 45.95.3.0/24 maxlen: 24
83.143.113.0/24 maxlen: 24
85.209.135.0/24 maxlen: 24
87.120.88.0/24 maxlen: 24
87.121.98.0/24 maxlen: 24
87.121.218.0/24 maxlen: 24
185.246.222.0/24 maxlen: 24
193.168.196.0/24 maxlen: 24
193.168.197.0/24 maxlen: 24
193.168.198.0/24 maxlen: 24
193.168.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:4c:f2:f3:92:67:4e:b6:8a:51:cc:96:a3:ec:f7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 31 12:19:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=381a395a8df43552c71b4eb9a8b73dabbdf26ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f5:76:54:f3:56:72:6b:06:8e:c7:06:23:ac:
a4:d9:6e:52:fa:6c:0e:0a:87:ef:55:cb:5d:46:17:
cf:1c:97:c7:3b:14:b7:7b:49:24:85:0f:cc:7a:45:
1a:42:26:38:36:45:d4:77:80:d3:ea:42:cd:06:ca:
9a:11:4f:1d:5d:0a:7c:f8:76:df:57:51:eb:26:01:
77:cf:71:63:c7:10:3e:05:eb:8c:e2:07:04:2f:1b:
57:3a:07:42:41:1b:28:68:45:1d:aa:96:cf:b2:06:
22:ec:3f:d7:90:c1:3b:f6:b5:05:5e:2d:04:22:b9:
0d:1f:19:df:55:d7:6d:b4:5c:b4:4b:aa:19:4b:8e:
9d:fb:7a:e7:8b:21:74:c6:3e:89:34:93:13:16:f6:
97:c2:d3:42:b0:e3:fb:e6:ce:29:6f:23:a1:64:68:
5d:ca:25:26:ab:61:73:43:01:e6:b4:0e:fa:60:64:
98:43:0e:d1:78:3d:bf:7b:da:d1:33:88:7c:0f:c8:
7b:7f:68:de:4b:4b:e1:96:bd:96:e5:23:d0:71:5e:
69:96:7b:4d:28:4e:74:e4:12:02:07:c3:92:00:93:
39:a9:db:14:a8:06:b1:10:9d:38:45:c4:6c:67:3a:
f4:ad:b2:8e:aa:be:af:4b:91:4b:e0:cc:f1:c6:6a:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1A:39:5A:8D:F4:35:52:C7:1B:4E:B9:A8:B7:3D:AB:BD:F2:6A:E3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OBo5Wo30NVLHG065qLc9q73yauM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.3.0/24
83.143.113.0/24
85.209.135.0/24
87.120.88.0/24
87.121.98.0/24
87.121.218.0/24
185.246.222.0/24
193.168.196.0/22
Signature Algorithm: sha256WithRSAEncryption
31:54:86:90:12:b3:00:1d:78:c9:32:64:9d:66:08:15:1b:15:
41:62:cd:d8:9e:dc:8e:41:57:fe:a1:0b:33:a2:ee:14:00:f8:
b1:20:2f:05:ce:dc:bb:16:f6:54:ea:e2:fc:cc:99:57:61:cc:
d1:be:52:2b:94:2d:db:c8:8c:d1:00:81:12:98:6e:ea:2d:a5:
a6:52:c3:21:23:a7:46:58:67:0f:ac:cf:5a:52:be:56:b2:da:
53:d0:5c:29:ac:96:f3:6f:a9:04:da:02:9a:5e:6c:ba:4e:fd:
db:72:28:ac:3f:83:50:b8:e1:8a:18:75:fa:72:c4:63:60:00:
df:0d:da:c0:ae:25:00:f5:70:12:f3:f3:34:26:02:9a:83:f4:
af:a2:17:9c:31:09:54:7a:6e:68:7a:df:9e:da:ad:ae:7e:0a:
99:ab:a7:5e:87:e2:fb:63:04:72:34:9f:39:17:e9:b1:5d:39:
d5:47:90:62:d2:81:da:23:a5:74:0d:86:4f:64:05:d0:26:98:
81:17:04:df:ed:97:c5:99:64:d8:ee:5b:6b:2d:a8:1b:f2:c1:
9f:9c:78:45:68:44:29:6b:5f:82:8f:d0:6c:81:31:66:c4:cf:
4d:94:05:8a:42:0f:08:83:0b:32:77:71:8b:ed:b5:5d:ec:fc:
b4:35:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:24 2025 by rpki-client