Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/OZKug-HD4Xa2ZWdFBgCPcOgskwk.roa
File: OZKug-HD4Xa2ZWdFBgCPcOgskwk.roa (raw, json)
Hash identifier: 3+egBPFrVIi/azwFyFARnF9adwzzIgSQuiDCKqIhA8c=
Subject key identifier: 39:92:AE:83:E1:C3:E1:76:B6:65:67:45:06:00:8F:70:E8:2C:93:09
Certificate issuer: /CN=8838e856b2272df174ba5a40a8fc7d5d3031caca
Certificate serial: 0194258F21DE5EDDA39E4AE818021C3AF292
Authority key identifier: 88:38:E8:56:B2:27:2D:F1:74:BA:5A:40:A8:FC:7D:5D:30:31:CA:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/OZKug-HD4Xa2ZWdFBgCPcOgskwk.roa
Signing time: Thu 02 Jan 2025 05:48:44 +0000
ROA not before: Thu 02 Jan 2025 05:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210745
IP address blocks: 188.93.114.0/24 maxlen: 24
2a11:10c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:21:de:5e:dd:a3:9e:4a:e8:18:02:1c:3a:f2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838e856b2272df174ba5a40a8fc7d5d3031caca
Validity
Not Before: Jan 2 05:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3992ae83e1c3e176b665674506008f70e82c9309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:01:9f:ba:2d:2c:4a:25:7d:60:0b:d9:8d:7e:
07:6a:2b:38:6d:a7:4a:c6:a4:83:c5:b7:ac:37:b8:
f5:0e:bb:ea:ad:e4:5e:98:90:76:2f:2f:bb:73:8a:
da:52:4c:43:32:00:c6:78:e7:01:45:ae:bb:e5:10:
12:40:8c:cb:e5:5c:6b:c7:88:01:96:06:a6:9d:b5:
2e:2c:44:9a:95:96:9a:f9:d3:2f:63:c3:68:2e:52:
03:a6:cc:5f:5d:f0:30:6b:45:52:d3:41:df:02:a5:
19:92:8f:21:e6:4e:88:a6:e4:41:bf:06:36:a2:0a:
25:44:09:55:8e:1b:6a:fd:b9:4d:19:f0:7c:87:10:
57:96:ab:30:31:41:bc:d8:f2:10:af:c4:38:25:2f:
09:fe:f4:c1:07:70:1e:9f:a6:a6:b5:bd:a5:6f:a0:
e0:97:3d:7b:12:c5:00:0d:f7:71:32:53:54:e1:87:
91:ff:d2:39:bd:c3:a5:a0:8b:a6:65:d0:a2:a0:35:
4b:0e:7f:e1:38:21:64:97:32:7b:d9:ae:5a:86:4b:
20:88:bc:24:cb:4b:c0:8d:60:d8:d7:ea:b8:92:68:
3d:cc:37:e1:8e:0f:eb:b3:2b:46:c4:b9:7d:37:0f:
c8:18:5a:b5:ae:b5:b7:b7:6f:45:11:fd:49:b2:e6:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:92:AE:83:E1:C3:E1:76:B6:65:67:45:06:00:8F:70:E8:2C:93:09
X509v3 Authority Key Identifier:
keyid:88:38:E8:56:B2:27:2D:F1:74:BA:5A:40:A8:FC:7D:5D:30:31:CA:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDjoVrInLfF0ulpAqPx9XTAxyso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/OZKug-HD4Xa2ZWdFBgCPcOgskwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7da3a9-34df-48f8-8a1b-079e111edbf9/1/iDjoVrInLfF0ulpAqPx9XTAxyso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.114.0/24
IPv6:
2a11:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
01:fc:b3:77:47:38:a1:c6:b6:ec:97:db:e8:7c:be:0d:fd:7f:
db:cd:27:07:02:ef:51:67:96:51:48:b8:96:50:6d:98:a9:d4:
60:3b:3e:90:79:a1:64:8b:71:b9:17:58:74:e5:fe:1d:8c:d6:
76:2a:3e:34:ff:72:86:b0:bb:70:81:32:f0:79:40:64:22:e0:
0e:70:aa:e2:20:7e:8f:03:4d:01:d8:1e:ee:45:29:59:a5:72:
9e:80:b1:37:4f:d2:1e:6c:e8:fb:39:7b:c7:2b:29:61:a8:7d:
b7:b1:d9:c8:c2:7e:c0:fd:7d:ba:83:e2:e5:f0:74:bd:59:0b:
ce:e0:41:2c:eb:bf:c0:60:69:f9:dc:eb:6e:9b:5c:f5:3a:88:
45:5b:dd:64:ec:df:bd:cb:2c:c3:71:06:88:3b:8b:88:0c:f5:
10:c5:b9:53:9b:f7:da:46:65:e2:2e:ef:f1:6f:9b:a4:5c:92:
79:61:68:88:c6:25:df:41:ea:03:86:11:5b:6e:5e:c9:35:d5:
8d:34:7a:a5:53:6f:cd:9a:0e:1f:ff:33:b3:4a:fb:1e:66:4f:
2e:ef:cb:93:95:7b:d5:5b:db:79:cc:b9:41:51:0a:d2:a5:98:
4e:ef:5a:05:67:53:4f:21:fa:c8:cd:db:43:0a:6a:9a:b8:c3:
23:9f:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:35:04 2025 by rpki-client