Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OYy_IIjTBnyT8xNxNLv-k7JL15I.roa
File: OYy_IIjTBnyT8xNxNLv-k7JL15I.roa (raw, json)
Hash identifier: A4poT+A4G9CjVEDIjRDCIl1+mOn9+KDG7DtjmjSNY6o=
Subject key identifier: 39:8C:BF:20:88:D3:06:7C:93:F3:13:71:34:BB:FE:93:B2:4B:D7:92
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 019428282BD23C937B3C6C0DAAEE750BBC9C
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OYy_IIjTBnyT8xNxNLv-k7JL15I.roa
Signing time: Thu 02 Jan 2025 17:55:08 +0000
ROA not before: Thu 02 Jan 2025 17:55:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202357
IP address blocks: 78.83.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:2b:d2:3c:93:7b:3c:6c:0d:aa:ee:75:0b:bc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 17:55:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=398cbf2088d3067c93f3137134bbfe93b24bd792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:c7:1d:03:7c:8e:fc:95:3f:99:cb:23:34:
c3:2d:e1:6d:eb:84:7b:c4:15:0c:be:02:9b:3e:24:
68:7a:05:7c:44:dd:c2:f4:15:e2:9c:f7:bd:e1:d9:
dd:31:1c:74:53:09:d3:e9:c0:0c:77:59:91:52:47:
fa:7a:6f:63:78:61:ee:e3:ec:00:16:c4:22:39:82:
49:ce:e7:8d:78:a2:d4:41:38:35:07:38:bd:40:c0:
58:ab:5c:2d:e2:38:16:36:a4:86:d1:23:c6:bb:a7:
64:97:fd:83:50:db:ca:79:bf:c0:21:6f:1e:5d:c2:
d6:7c:76:d7:f8:54:0a:be:51:f7:41:89:6a:34:11:
47:82:ce:56:09:5f:69:29:d7:82:33:74:9d:8c:b1:
a8:03:4f:87:f7:98:b8:d6:67:c2:65:a5:91:b7:b1:
a4:66:9e:94:18:3a:63:5a:ae:6b:30:78:13:0e:93:
74:ed:3e:1a:a5:51:55:e1:14:bf:2a:a2:cc:f3:b4:
cb:87:fb:4c:7a:ad:24:15:87:ab:45:69:bd:50:84:
32:c6:8d:d9:58:43:f9:c2:73:0e:19:43:0d:c9:de:
b2:0a:c5:07:47:7d:dc:b0:09:21:5a:bc:18:10:2a:
63:e9:8c:74:6f:ce:0d:23:a4:44:96:c2:86:40:8a:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8C:BF:20:88:D3:06:7C:93:F3:13:71:34:BB:FE:93:B2:4B:D7:92
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OYy_IIjTBnyT8xNxNLv-k7JL15I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.234.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d1:38:d6:04:aa:3b:cd:f5:9f:8e:79:9f:1f:d4:4c:74:81:
f0:1f:74:ba:19:27:26:f2:85:a8:7d:52:83:c7:e0:fe:e9:06:
7e:59:06:6c:6c:b1:dd:bd:55:81:eb:10:8c:5a:ac:51:02:00:
a3:21:f2:20:96:a3:25:ad:a1:b1:0c:15:35:a5:f4:0e:a0:43:
f4:50:00:41:94:0d:8c:2b:be:ab:4b:05:46:45:c5:58:76:c1:
95:ce:38:3b:1e:6b:12:b9:90:3a:4a:e1:e0:89:c3:48:7f:9a:
e9:43:cc:40:34:b7:aa:ef:52:2a:ac:d9:64:af:2e:a1:c8:ab:
71:77:a8:e2:b9:a6:74:73:2d:1d:1a:7f:54:ce:0e:d7:6b:9d:
ee:cd:cd:65:8d:a5:f7:25:b2:bd:c6:c8:94:8f:df:8f:5b:d9:
0e:9d:44:ab:09:93:e9:b0:ce:bf:93:37:7b:19:f8:48:9d:37:
74:fd:9c:30:fe:ab:55:36:ac:77:10:1c:9a:92:9d:d2:c7:5e:
15:66:70:73:27:0d:fc:f5:35:bf:7a:0b:bb:58:3b:3c:9a:00:
53:4e:10:33:57:69:c9:79:4c:49:00:ec:f8:93:05:5a:31:15:
71:34:83:85:4b:05:ff:bc:ba:a9:5e:f3:74:0e:65:83:9e:c2:
15:60:e3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:47 2025 by rpki-client