Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa
File: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (raw, json)
Hash identifier: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=
Subject key identifier: A1:BA:C0:F9:9A:02:82:4D:33:4B:C8:60:26:99:93:EB:B3:5A:07:66
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 0194258E48AC55C70E72A98F8AA99931E750
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa
Signing time: Thu 02 Jan 2025 05:47:49 +0000
ROA not before: Thu 02 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3223
IP address blocks: 185.62.188.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:48:ac:55:c7:0e:72:a9:8f:8a:a9:99:31:e7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Jan 2 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1bac0f99a02824d334bc860269993ebb35a0766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:78:4c:5f:69:d1:46:51:a1:30:e3:21:b5:
62:39:5e:1b:1a:61:07:a3:01:72:df:4a:88:a4:57:
52:dd:71:70:fb:88:ac:bf:a3:9d:2d:9f:73:44:e3:
00:ec:8d:d9:82:8e:e7:8e:c5:be:48:2c:5f:35:d2:
a7:b7:db:ad:8d:32:bc:97:f7:54:00:87:44:0c:08:
b5:45:9d:fc:f9:b7:bb:b1:70:52:d2:7d:6d:44:b6:
c7:db:71:b8:cd:f4:da:2b:4d:56:bd:f7:19:38:53:
c8:54:46:46:15:77:5b:d3:05:25:ca:60:b2:bd:b0:
52:5e:be:8a:00:ee:74:bd:cc:52:4e:d5:e4:cd:fd:
96:93:27:3b:2b:4c:e0:c1:7b:a6:ab:bf:b6:62:3c:
2c:3f:0c:e9:3d:af:77:16:82:bf:51:a6:f8:aa:9e:
0c:72:0c:c6:dc:df:82:2e:57:7e:6d:ac:47:39:d1:
6f:39:b0:54:97:f7:45:60:b9:af:8c:64:6d:bb:5a:
36:9c:22:c6:b7:05:75:c4:01:3a:a1:c5:a0:8a:16:
d5:a3:d9:66:d5:6a:0a:37:a4:e6:32:fa:64:dd:4c:
f1:0b:7a:57:e0:97:e7:c5:92:82:3f:a3:27:a5:9c:
35:1b:1b:ee:74:91:f3:f3:34:f7:06:30:85:47:d8:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BA:C0:F9:9A:02:82:4D:33:4B:C8:60:26:99:93:EB:B3:5A:07:66
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.188.0/23
Signature Algorithm: sha256WithRSAEncryption
16:8f:5a:d4:a3:6f:c6:2f:66:4b:34:9a:f3:8b:01:ce:b7:e5:
0c:69:99:e0:12:e9:6d:b5:a2:4a:86:53:3d:c6:ef:c3:d8:f8:
cd:9f:04:a0:f9:e0:e7:47:4e:87:cc:af:fa:15:d8:67:77:6a:
78:a8:3d:35:bc:f7:a4:41:9e:a2:b1:a9:17:50:c6:96:a8:ca:
b6:db:f5:b7:4f:b1:7b:bf:b5:fa:43:72:e7:49:cb:83:10:fd:
5c:b2:e9:69:6a:0a:b1:e3:79:c1:a7:89:a4:ea:33:5d:ee:dc:
0b:4c:7d:71:33:04:d5:e7:9d:40:fc:c4:53:47:8c:f5:6d:eb:
de:e9:0e:b2:95:26:e4:53:87:05:9a:b9:27:3d:c5:1d:73:39:
f3:bd:3e:b2:05:91:ff:22:40:28:04:f9:65:2e:b5:e9:ea:0d:
1b:4f:99:26:98:e4:9b:c9:ae:b5:a5:aa:82:50:10:0d:11:a7:
3d:cc:00:34:6c:4f:bf:d2:0c:6e:5e:7d:70:aa:d0:cc:19:5a:
8a:60:cc:eb:39:26:51:9b:5e:6d:fe:e9:89:cf:33:e1:16:f6:
c6:6a:e3:50:b9:60:76:9c:83:87:5c:5c:b5:dd:6c:4a:02:89:
ae:d6:fe:ae:f1:82:c6:20:b0:30:c5:f4:ea:eb:c1:a1:b4:f0:
09:c8:14:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:16 2025 by rpki-client