Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/ojouXwxiA4Aunr-HY_Ha3X-nK8k.roa
File: ojouXwxiA4Aunr-HY_Ha3X-nK8k.roa (raw, json)
Hash identifier: V3E89n28yhHgqS4vkCJ3f49fshGSQZ1NzPYfiDUP4Ew=
Subject key identifier: A2:3A:2E:5F:0C:62:03:80:2E:9E:BF:87:63:F1:DA:DD:7F:A7:2B:C9
Certificate issuer: /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial: 019425FD644B04179967D2995A9CA41F5884
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/ojouXwxiA4Aunr-HY_Ha3X-nK8k.roa
Signing time: Thu 02 Jan 2025 07:49:10 +0000
ROA not before: Thu 02 Jan 2025 07:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 37002
IP address blocks: 185.161.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:64:4b:04:17:99:67:d2:99:5a:9c:a4:1f:58:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Validity
Not Before: Jan 2 07:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a23a2e5f0c6203802e9ebf8763f1dadd7fa72bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:95:5d:72:56:55:63:ca:f5:17:bf:98:28:
41:3d:29:3a:b0:35:9e:2c:5b:02:62:e4:94:28:fc:
fc:7f:ae:7e:87:6d:cd:e2:d3:30:65:2b:7f:d5:3f:
c9:70:36:e9:0f:dc:39:56:b3:18:84:78:10:b2:70:
bb:e4:25:d4:b0:21:34:ce:6c:be:8e:2d:52:a0:11:
1f:aa:f7:69:40:79:6f:10:7c:cc:27:2e:60:50:a6:
b3:c8:93:a3:89:d4:ce:48:d9:df:63:de:d9:3e:a1:
d5:02:00:5b:72:4a:cf:65:aa:1a:9b:b1:ff:63:57:
ab:8e:a0:97:65:0b:5e:cc:1d:5f:61:0d:a1:a9:0a:
ef:3f:58:60:0c:1d:18:e2:9a:44:8e:dc:8d:60:67:
c8:ca:32:0a:8f:dc:71:19:d6:7a:46:4f:10:c1:3f:
99:a1:25:8c:3f:13:f6:24:38:bc:fc:a9:28:28:27:
af:fc:96:45:ac:88:18:a2:0b:5b:ed:2a:34:79:08:
44:86:20:8d:e2:4a:0d:df:cf:bd:d3:04:76:ff:b8:
75:5a:e0:2f:9e:cb:85:bc:ab:f6:9f:c1:75:d5:5a:
4d:10:44:60:34:49:7f:45:2d:b4:86:a4:6f:0c:8b:
36:9b:9f:39:5b:c6:79:b7:29:87:54:4e:b6:0b:0c:
99:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:2E:5F:0C:62:03:80:2E:9E:BF:87:63:F1:DA:DD:7F:A7:2B:C9
X509v3 Authority Key Identifier:
keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/ojouXwxiA4Aunr-HY_Ha3X-nK8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.10.0/24
Signature Algorithm: sha256WithRSAEncryption
01:e1:2e:54:e2:60:f1:2e:db:41:a7:35:7e:dc:a5:2f:7e:63:
a8:62:72:a7:a2:cd:c4:6e:bd:86:1c:fb:b0:bf:f7:4e:5e:fe:
c8:19:84:ef:59:06:3d:08:0c:21:23:d8:68:49:f0:96:57:a1:
43:17:0a:9b:57:b4:11:d5:62:ae:8e:2a:47:af:45:45:9c:82:
4e:3a:6e:52:c9:70:a4:29:55:30:5b:c2:98:78:19:60:58:90:
34:ba:50:85:b3:c4:4d:6f:02:39:c0:76:e8:20:3a:d8:b2:a5:
94:e9:99:76:58:30:a7:a1:ac:75:63:61:32:f8:9a:33:89:d4:
43:96:e1:36:55:04:6b:66:c7:6a:7d:59:07:89:f2:b7:5f:9b:
5c:e9:39:d0:82:b0:29:1a:82:d3:71:29:ea:85:76:82:8a:47:
ce:90:c3:66:59:73:89:bf:1a:d0:71:18:b7:c2:f1:d0:1d:22:
34:2d:0d:78:2d:a9:fa:39:05:58:31:ae:70:bc:bc:db:83:2d:
cd:ec:5e:e8:1b:84:93:b9:3d:3f:52:3f:82:e7:e6:e2:06:cc:
f6:e1:14:d8:a3:c1:03:9f:77:8d:11:91:57:84:4a:e3:54:b9:
21:0e:3c:e0:65:ec:67:eb:b8:26:5b:e2:a8:82:20:13:ac:66:
29:c4:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:37:09 2025 by rpki-client