Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OILM5kzVfvOhvj7aRfQkUQpkFg8.roa
File: OILM5kzVfvOhvj7aRfQkUQpkFg8.roa (raw, json)
Hash identifier: N0PunA4xJi5I60gUNpZRuqoA+iAb/TqLxizzds37zL8=
Subject key identifier: 38:82:CC:E6:4C:D5:7E:F3:A1:BE:3E:DA:45:F4:24:51:0A:64:16:0F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019720689A5085B1EC2D5FDBE5CB1742358F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OILM5kzVfvOhvj7aRfQkUQpkFg8.roa
Signing time: Fri 30 May 2025 08:56:55 +0000
ROA not before: Fri 30 May 2025 08:56:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 94.156.177.0/24 maxlen: 24
94.156.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 08:25:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:20:68:9a:50:85:b1:ec:2d:5f:db:e5:cb:17:42:35:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 30 08:56:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3882cce64cd57ef3a1be3eda45f424510a64160f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:05:5e:9b:d5:6e:1a:5c:a3:3c:19:e1:db:
9d:05:07:24:4e:38:e3:8e:da:26:26:80:bd:94:1d:
38:11:93:51:28:42:82:e6:70:25:8f:f5:09:1c:62:
eb:83:64:dd:16:73:ff:18:a7:c0:34:ee:55:e7:65:
ab:01:52:33:a7:89:ab:6d:0d:46:46:a4:43:d1:c4:
40:07:79:9c:b9:56:cd:f4:97:0f:2b:01:fe:4a:ca:
84:72:a3:88:67:a5:d6:f3:54:27:6c:db:e8:f3:ad:
7f:7e:be:b2:ef:52:82:79:c6:81:0f:16:33:01:1c:
2b:cd:ce:4c:e0:16:6d:3f:a4:d1:66:5e:a7:f1:60:
e2:8a:a0:b1:23:34:c1:f5:cc:c8:dd:f9:49:75:61:
d1:20:89:91:74:4f:25:88:a1:59:96:d9:7e:0b:e0:
db:15:17:71:90:d8:99:df:65:d0:e5:81:d1:5f:97:
f6:b2:bd:a4:ad:1b:0d:89:79:4e:9b:32:88:f4:fe:
60:7e:4a:02:8f:86:40:28:f1:7e:04:08:74:3c:aa:
2c:87:a8:e9:e2:35:70:c1:6a:ba:08:fb:a6:af:a5:
4c:26:dd:ae:b8:c7:a9:e4:85:b8:5a:ee:6e:8b:52:
4c:b9:18:51:1a:a5:b1:7e:88:8d:32:37:91:1a:27:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:82:CC:E6:4C:D5:7E:F3:A1:BE:3E:DA:45:F4:24:51:0A:64:16:0F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OILM5kzVfvOhvj7aRfQkUQpkFg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.177.0/24
94.156.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f3:01:be:6b:ed:5a:88:86:d5:f5:57:a3:72:7e:c6:b4:38:
df:4f:49:29:4e:8c:ff:fd:67:1b:34:44:d2:39:d7:85:87:ee:
92:ac:65:0f:e9:fa:52:cf:d5:9f:2b:b1:df:6c:b1:bf:3b:69:
f2:4f:e4:2d:82:3c:7f:71:7f:22:3d:d6:99:3b:64:b2:36:d7:
59:3f:68:6f:e6:17:18:14:a9:c2:78:6e:a3:4d:5c:02:2e:19:
ca:b1:1b:ab:f0:42:94:39:e2:a4:d2:0a:dc:e4:f6:06:8f:dd:
ca:fe:22:61:2e:99:d5:fa:10:ed:d7:a2:04:37:d3:47:75:fe:
7c:70:5a:90:0d:0b:46:bb:b0:c6:ba:30:b8:0f:70:0c:79:9c:
3f:1b:01:db:90:43:54:57:07:b3:8d:be:1b:51:d8:84:9e:cf:
81:01:36:62:a4:a1:27:30:e6:55:f3:63:5e:9d:4e:e6:90:cb:
00:29:41:ad:7c:6a:7c:83:c0:c7:50:0e:07:5c:02:83:15:4b:
b1:6c:7c:64:83:1e:93:7b:37:f5:39:45:be:6e:29:f9:4b:cb:
43:a4:c6:99:96:ac:02:83:9c:b0:27:fe:63:42:56:f0:72:67:
f7:4d:75:c4:62:71:0d:c7:a8:c0:58:94:1e:27:66:b9:a7:79:
3f:aa:9a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:30:27 2025 by rpki-client