Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-OyisJv-y0yxvFO2-1fQ6XkjkuQ.roa
File: 1-OyisJv-y0yxvFO2-1fQ6XkjkuQ.roa (raw, json)
Hash identifier: EMLWqbOyjUON7XmnjtU63D6mX0NXWcYMczqnx4HqErE=
Subject key identifier: F8:EC:A2:B0:9B:FE:CB:4C:B1:BC:53:B6:FB:57:D0:E9:79:23:92:E4
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019420683FD518F4A882434D6EF1144DFD61
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-OyisJv-y0yxvFO2-1fQ6XkjkuQ.roa
Signing time: Wed 01 Jan 2025 05:48:10 +0000
ROA not before: Wed 01 Jan 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48330
IP address blocks: 147.45.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3f:d5:18:f4:a8:82:43:4d:6e:f1:14:4d:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8eca2b09bfecb4cb1bc53b6fb57d0e9792392e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:41:0d:ad:70:aa:ef:96:51:64:0d:c8:1e:
c2:88:10:9b:40:3e:bb:69:34:80:ce:a4:83:b3:d4:
11:bb:3c:36:47:92:86:88:d8:f5:18:17:4e:7c:f5:
d5:33:d1:f2:54:5c:4e:60:d4:c3:d7:22:51:c1:a6:
d8:2e:33:36:f0:d5:29:0d:8c:c5:d9:49:b9:68:9e:
28:51:b8:88:8d:cf:96:ac:ce:99:c4:b7:4e:ab:bd:
10:9d:e9:ea:1f:19:80:f7:ef:bd:a8:40:a1:f8:98:
9d:c4:47:ff:56:d3:07:7d:13:05:9c:0d:0c:32:96:
09:11:6d:68:f9:b0:41:92:aa:56:e2:2f:b6:10:cf:
bb:6a:65:9b:17:e6:d0:45:61:b8:7a:33:0f:b3:92:
cb:b5:2e:d0:41:99:34:34:8f:2b:51:b5:58:a4:c9:
8a:36:16:c0:02:2b:1c:a2:89:35:4d:f9:d3:3c:78:
d2:bf:0e:2b:eb:45:9b:e7:21:c0:23:dc:55:f7:ee:
3f:ec:05:b0:f3:44:54:ad:1d:27:c7:cb:12:84:17:
d0:fc:57:77:de:a6:11:43:f2:c8:60:c1:58:eb:15:
33:d2:8a:65:99:e7:07:85:29:d8:ff:56:c2:d8:af:
04:26:84:1e:1f:20:37:de:a9:58:58:1f:12:69:5f:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EC:A2:B0:9B:FE:CB:4C:B1:BC:53:B6:FB:57:D0:E9:79:23:92:E4
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-OyisJv-y0yxvFO2-1fQ6XkjkuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:16:a5:6b:be:a1:35:fe:47:67:8b:9f:26:b1:cf:fc:9d:a1:
4f:a1:cb:5b:bb:b0:5b:a7:3f:af:f6:64:05:f1:0b:8d:c6:bb:
cb:69:ce:2e:e8:37:94:19:27:2c:4f:01:61:a4:38:8e:b9:7a:
9c:9d:57:d8:d0:07:41:6a:88:da:29:31:ac:72:aa:2b:a2:21:
6d:f2:92:b7:1a:3c:17:07:d3:17:5f:68:1f:b5:38:2f:74:05:
ea:8f:ea:89:4e:b9:3e:c1:03:a5:d0:f0:95:1b:f7:0c:5a:1e:
db:ac:e6:95:a5:95:4d:e1:31:89:81:fc:a4:78:34:a6:51:3e:
bb:53:6f:76:d4:bd:ae:90:71:26:88:3e:35:ed:21:ab:6c:58:
4d:15:32:e1:ae:3d:47:a1:22:f9:8b:e0:7f:3a:4c:ec:31:c6:
93:f3:70:76:53:a5:b2:db:91:a1:4e:81:cd:b1:9c:4a:64:d4:
41:c6:93:70:09:f4:4c:ac:bf:d4:a9:81:39:44:8e:a8:bb:69:
42:52:6d:3c:45:8e:18:03:49:ca:e5:2b:24:01:55:ac:a0:f9:
80:9e:16:98:03:4f:ad:07:d5:85:64:64:6d:f2:f8:0c:f0:94:
39:06:1f:90:87:89:41:d8:52:e1:fb:89:99:32:7a:b0:1e:8a:
f0:b2:c7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:13:43 2025 by rpki-client