Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OW5-b8bAmhcnTZRvLAz0-cb_5ng.roa
File: OW5-b8bAmhcnTZRvLAz0-cb_5ng.roa (raw, json)
Hash identifier: QfAyXHtLhifZ7x4Mal7jHc9ooMgI/PmFKa+v+tslAlM=
Subject key identifier: 39:6E:7E:6F:C6:C0:9A:17:27:4D:94:6F:2C:0C:F4:F9:C6:FF:E6:78
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01941F8C0B34A360E1792424796A033DA4D3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OW5-b8bAmhcnTZRvLAz0-cb_5ng.roa
Signing time: Wed 01 Jan 2025 01:47:39 +0000
ROA not before: Wed 01 Jan 2025 01:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3333
IP address blocks: 193.230.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:05:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:0b:34:a3:60:e1:79:24:24:79:6a:03:3d:a4:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 01:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=396e7e6fc6c09a17274d946f2c0cf4f9c6ffe678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:22:ee:3b:87:5c:cf:0d:14:ea:81:b1:b4:
32:f0:74:3e:36:cf:fa:53:cc:a5:92:b0:1d:30:be:
b9:e8:8f:b5:35:ff:20:1a:bf:e5:50:68:39:fc:74:
0a:b2:6f:23:22:5d:d8:de:8c:8e:f3:25:15:0c:a9:
b6:2e:3f:78:88:2c:68:29:3a:33:18:26:80:c9:53:
1a:03:81:a7:7e:1b:c6:c2:d4:aa:4c:d7:23:3e:f4:
06:c4:f0:cb:dc:6d:e7:24:b3:26:ec:64:3c:1e:83:
36:fb:9d:8c:64:0b:c5:96:2b:bc:76:0e:e5:1e:da:
47:d9:f4:45:6c:ca:05:03:cb:f8:e3:98:e1:3b:96:
ec:44:68:07:e6:19:df:74:c8:d8:f1:9c:0b:75:a9:
3c:7f:5d:d5:c9:c2:81:77:86:53:96:17:48:df:db:
47:af:1c:21:62:40:62:f2:73:39:2e:61:1f:02:f0:
67:be:f1:7b:a6:1b:c8:e0:7d:f3:cc:ed:bc:97:4c:
ca:40:35:1a:95:10:e1:39:de:b0:af:97:24:99:d7:
07:fb:e4:92:b5:b1:b7:02:fd:7c:fb:97:e8:93:e7:
b8:83:ac:4e:fc:49:f0:73:1c:f4:b3:5f:f1:43:00:
a9:2f:63:eb:41:74:8e:be:f9:08:32:8b:f4:a1:ff:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:7E:6F:C6:C0:9A:17:27:4D:94:6F:2C:0C:F4:F9:C6:FF:E6:78
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/OW5-b8bAmhcnTZRvLAz0-cb_5ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:4e:92:c2:31:98:2e:22:ce:73:12:a0:c1:e1:68:4c:05:0e:
dc:b8:96:ff:aa:fa:5c:eb:e0:c5:5a:44:73:82:29:15:d0:ff:
6a:2b:5e:1f:a9:97:99:15:48:44:1c:6e:9b:7c:72:9b:6c:a8:
70:47:ee:99:0e:55:59:79:82:ee:60:31:2e:99:ef:c0:6b:79:
13:78:a2:1f:ee:8e:a8:7c:a9:a0:f1:c0:96:e6:e0:48:a0:b4:
64:bc:fe:40:d9:d0:9d:42:10:d3:d8:3a:25:eb:7f:a6:27:e4:
b4:3a:97:bf:a3:23:54:6a:06:f4:1a:45:70:11:69:1f:37:07:
ee:93:da:9d:8a:8b:19:50:60:3a:3c:c4:2c:57:5b:b5:6f:d2:
0d:a3:a0:c6:60:b1:52:7b:2b:da:04:d7:7f:da:78:26:cf:5f:
2f:dd:50:6e:01:2d:6e:6c:ba:5c:c5:47:cb:b6:50:97:98:ee:
21:84:55:1f:da:ad:76:d5:b4:6e:bf:ac:16:09:91:76:fd:f9:
35:71:f1:30:41:5f:d4:58:8d:cd:ad:26:fb:b2:41:c3:c0:c6:
84:94:ef:86:96:98:81:50:28:48:b8:43:92:41:b5:c2:ec:49:
72:89:a0:82:f3:a8:4f:bf:a6:eb:51:a4:25:fd:f3:51:dc:a1:
fa:e7:9a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:39:43 2025 by rpki-client