Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa
File: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (raw, json)
Hash identifier: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=
Subject key identifier: 38:90:5A:F8:D8:8C:BB:33:98:02:0E:25:E9:94:1B:89:A2:D1:91:2A
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 0194236995FDCB442202227322B00B1AF8ED
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa
Signing time: Wed 01 Jan 2025 19:48:29 +0000
ROA not before: Wed 01 Jan 2025 19:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 680
IP address blocks: 141.42.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:95:fd:cb:44:22:02:22:73:22:b0:0b:1a:f8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Jan 1 19:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38905af8d88cbb3398020e25e9941b89a2d1912a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:f7:7f:1b:4e:29:ac:97:9f:20:72:d0:42:
04:51:e4:d6:b3:a5:70:dd:8a:79:f3:51:86:c4:75:
69:0e:8b:37:ae:2e:64:ee:d9:c0:4a:57:0c:1a:b7:
2a:ad:59:30:35:13:dd:c4:0f:51:9f:77:98:c3:ae:
8b:44:8c:7a:40:72:62:87:60:c0:9a:e6:a3:9a:3e:
f1:d9:78:42:fe:42:fc:12:06:c1:fb:ff:d1:c0:3a:
af:9c:86:96:80:bc:7f:75:91:23:be:b5:b4:78:9d:
51:97:58:ea:a2:9a:84:81:63:a4:11:94:d7:02:fd:
16:ae:45:8e:3f:6b:6e:7d:cb:3b:fc:06:ec:83:dc:
b4:50:53:68:26:48:f5:74:4c:5b:07:72:a5:c0:b7:
21:dc:ea:5d:94:62:0b:72:22:2c:78:83:96:be:01:
4d:ff:6e:96:2c:1e:d8:6c:9b:02:c5:2e:ad:8a:1d:
72:b9:e5:d1:f7:27:ff:26:51:b9:73:bc:6f:33:10:
60:3f:dc:02:72:d2:74:2a:ff:35:78:30:c1:59:8f:
90:8c:25:b0:2e:7b:33:cc:10:90:1f:ce:71:ee:87:
20:bd:d2:1d:b8:66:43:4c:45:5d:47:c3:b6:04:c8:
60:bd:6d:78:5d:af:1b:75:6f:3d:2e:da:ff:bc:a0:
76:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:90:5A:F8:D8:8C:BB:33:98:02:0E:25:E9:94:1B:89:A2:D1:91:2A
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.42.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:23:71:71:02:e9:2f:15:12:ba:14:63:a0:1d:1a:23:3f:f2:
6b:72:8e:e0:6f:c8:7d:39:ce:ba:2f:87:0e:41:a3:a6:1c:c4:
76:c9:6c:57:4b:93:d5:8d:ae:d7:ce:bd:67:e5:73:42:f1:2d:
08:3a:8c:4a:99:fc:aa:15:42:c8:d8:83:ea:87:5d:2d:9f:f3:
51:6e:ea:25:6c:ca:a5:0a:2c:80:b0:b4:d0:27:36:93:b2:c0:
b3:76:3c:e2:ae:a5:44:8f:47:56:c6:84:83:be:d6:30:8c:a0:
b3:19:53:f8:3d:4d:e5:f3:c1:1a:ea:03:72:eb:f5:32:b6:ec:
65:7d:62:13:79:f5:39:51:3a:90:d5:a8:79:f3:cc:7c:0a:bb:
3f:5a:12:a7:4e:ad:94:ef:3e:ee:5a:51:89:ea:79:15:af:b4:
9a:8d:bc:e9:cb:cd:05:e8:3c:65:73:4d:62:1c:83:11:c4:0c:
67:9a:a6:90:f8:83:d7:28:8c:e0:79:71:94:11:8d:ac:6c:ef:
84:a5:b1:e4:d3:0d:c5:ae:b8:57:99:55:cb:f1:34:e4:0e:1b:
b0:15:8d:4a:10:2c:07:f2:2e:aa:67:15:3f:85:2a:8f:ba:78:
6d:ed:ec:37:1d:a7:eb:21:68:34:b1:5d:5d:2d:3b:d1:37:9e:
de:fb:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:50:48 2025 by rpki-client