Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/oGXIgL4XeGgFsoOzE_plr2AX24g.roa
File: oGXIgL4XeGgFsoOzE_plr2AX24g.roa (raw, json)
Hash identifier: h9S8MEgqkl0Mx1T5bmYSQIXTjB58xAGkLJVMidxjJTo=
Subject key identifier: A0:65:C8:80:BE:17:78:68:05:B2:83:B3:13:FA:65:AF:60:17:DB:88
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 019427B3CC7C1ECAEBD56280409713636683
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/oGXIgL4XeGgFsoOzE_plr2AX24g.roa
Signing time: Thu 02 Jan 2025 15:48:02 +0000
ROA not before: Thu 02 Jan 2025 15:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59721
IP address blocks: 94.126.112.0/24 maxlen: 24
94.126.113.0/24 maxlen: 24
195.80.158.0/24 maxlen: 24
2a13:1c0::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:cc:7c:1e:ca:eb:d5:62:80:40:97:13:63:66:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Jan 2 15:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a065c880be17786805b283b313fa65af6017db88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3e:a2:f9:a2:ba:ea:7c:2c:f9:a7:08:c5:5b:
a8:d6:b5:c7:65:18:4d:88:ef:f1:06:3d:01:a0:99:
da:71:f6:ff:de:0d:31:0e:fc:20:87:5b:51:77:fa:
11:b7:21:a9:4b:83:1c:2b:56:66:96:41:03:29:fa:
09:51:7a:e6:d7:7b:c2:d4:3f:4f:4b:6b:c4:80:8c:
b5:99:89:5c:85:a1:c9:87:12:b2:c0:af:37:d8:52:
96:5e:11:4b:b8:fc:7d:da:d8:a5:f4:b8:59:fc:a2:
78:2f:a7:0a:1d:ad:7d:77:70:bf:2f:d8:ee:19:ce:
9d:23:49:93:19:f3:05:e0:f8:05:33:ef:06:37:13:
31:9e:e6:90:1b:8c:2a:f4:90:92:59:4a:39:fd:77:
2f:bc:3a:01:75:64:f0:ab:6c:fc:a9:af:22:0c:2f:
6b:c7:8d:fa:6f:dc:ac:bd:a1:66:27:c2:2f:0f:89:
66:c2:8f:5c:00:75:b1:f2:10:01:63:24:a4:4b:c7:
22:59:58:65:9d:9a:e7:6d:4c:d0:ec:fc:41:58:f9:
62:d0:48:46:ca:b5:eb:ab:eb:46:68:e8:c3:be:8c:
77:e6:df:7d:fb:17:3e:bc:8f:39:b6:8b:e0:4b:b6:
3e:88:9a:39:07:fc:10:21:0c:a0:2b:d3:2c:67:e5:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:65:C8:80:BE:17:78:68:05:B2:83:B3:13:FA:65:AF:60:17:DB:88
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/oGXIgL4XeGgFsoOzE_plr2AX24g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.112.0/23
195.80.158.0/24
IPv6:
2a13:1c0::/64
Signature Algorithm: sha256WithRSAEncryption
88:e7:3c:0e:46:cc:87:3e:85:a7:bf:76:a4:75:74:2b:c0:0a:
0a:29:12:bb:e5:88:dd:88:d6:8e:69:32:21:80:1e:1b:20:ea:
ef:69:fc:46:f3:b0:06:d0:8e:0c:80:f5:b9:3b:3b:b6:c3:a5:
51:05:9f:92:1a:bc:1f:62:74:31:23:87:05:39:ad:68:fd:1e:
12:dc:70:1a:99:91:a3:0e:5f:0d:a4:b1:a9:26:15:94:b0:88:
bf:db:00:81:b6:34:af:eb:79:80:d0:d8:6c:68:b9:5e:27:a9:
4f:72:be:14:57:13:90:0e:55:e9:a0:40:b3:ed:be:2b:c4:3b:
a1:0a:5e:00:76:17:fd:c8:a2:aa:95:56:36:fc:08:84:54:d9:
e9:e6:fe:81:a2:85:4f:aa:dc:34:bc:ba:c0:5f:5c:ab:ec:82:
21:cc:84:a0:09:01:dc:dd:9f:b8:cf:7f:6b:b9:06:f3:06:ef:
30:a3:14:d2:e2:de:f3:91:13:83:5f:d1:83:64:ff:d8:73:6c:
79:3b:44:d5:9e:16:a3:31:92:ab:29:f8:09:86:e1:1a:e9:14:
26:c0:7c:05:ad:97:c1:0b:bb:51:10:65:11:2d:10:ad:d4:bd:
09:14:7f:8d:a8:76:3d:6f:25:03:78:ce:31:ed:b8:28:47:41:
72:01:05:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:06:23 2025 by rpki-client