Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/0OYfvohoTXtpi59LO0J22cI1s3U.roa
File: 0OYfvohoTXtpi59LO0J22cI1s3U.roa (raw, json)
Hash identifier: s7dK6PK+eP+XDZZ2HKEucZtuMEm89+4+6MLOTTKFjE0=
Subject key identifier: D0:E6:1F:BE:88:68:4D:7B:69:8B:9F:4B:3B:42:76:D9:C2:35:B3:75
Certificate issuer: /CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Certificate serial: 01942143ACC9E65A1FC23DC04B8A63727835
Authority key identifier: 3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/0OYfvohoTXtpi59LO0J22cI1s3U.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44322
IP address blocks: 185.162.12.0/22 maxlen: 22
2a07:c940::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ac:c9:e6:5a:1f:c2:3d:c0:4b:8a:63:72:78:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec6fd91d2a4365d3dc16721fedf692172bb3073
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0e61fbe88684d7b698b9f4b3b4276d9c235b375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:52:8f:88:76:1c:1e:97:f4:a3:7b:10:d6:
33:c0:1d:04:50:69:96:e2:05:05:68:d8:9f:2c:96:
af:ac:19:bc:23:5a:7f:9b:84:95:d6:d7:4c:e3:00:
26:a4:77:30:42:c1:d2:f8:ae:88:34:ab:6d:46:7c:
9f:52:eb:f1:39:25:88:9a:8a:62:fb:84:15:b6:11:
1f:ba:3c:03:5e:72:87:bc:48:7c:ca:b0:36:03:45:
8c:d6:60:4f:b9:9d:99:9c:23:b4:5b:34:2d:bb:94:
56:83:d8:ab:9d:6b:d0:70:62:0d:b7:a7:99:f3:6f:
b4:3b:02:a3:9f:5d:b5:c5:28:6c:dc:ef:0b:f3:c2:
a5:2f:81:6a:a5:29:73:71:83:57:27:b4:42:d3:61:
ea:76:cb:fd:be:ff:08:0f:ce:ea:7d:16:5c:bc:70:
09:02:a1:69:ed:f8:e1:8c:f7:ff:f0:f6:70:51:ef:
55:80:4c:dd:64:06:10:1d:04:ba:2c:91:6c:0a:53:
f2:84:3b:3e:95:88:24:6f:8f:99:d1:56:6f:9a:16:
4b:9c:bf:c5:af:9c:01:0f:cd:2c:b5:f2:08:04:28:
34:b8:4d:c5:d7:4e:d2:e4:8d:cc:12:51:88:aa:28:
26:30:de:2a:cf:48:6d:07:20:bc:32:28:17:90:ec:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:1F:BE:88:68:4D:7B:69:8B:9F:4B:3B:42:76:D9:C2:35:B3:75
X509v3 Authority Key Identifier:
keyid:3E:C6:FD:91:D2:A4:36:5D:3D:C1:67:21:FE:DF:69:21:72:BB:30:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Psb9kdKkNl09wWch_t9pIXK7MHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/0OYfvohoTXtpi59LO0J22cI1s3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4cda47-384a-4354-bcb4-bef35605bcd4/1/Psb9kdKkNl09wWch_t9pIXK7MHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.162.12.0/22
IPv6:
2a07:c940::/29
Signature Algorithm: sha256WithRSAEncryption
0e:a3:c6:14:74:be:c3:ee:71:ef:97:97:af:71:3b:31:f3:ca:
ee:88:a8:7a:78:71:9f:29:30:79:50:31:cb:e7:16:49:58:ad:
d2:46:e6:3e:28:9e:af:c8:f6:2c:de:a0:66:9a:55:f9:20:e3:
a4:0a:84:7e:6d:54:db:11:0d:66:5e:ae:c8:ce:15:19:eb:ac:
97:a6:e1:97:24:b9:d7:f8:b0:5e:47:00:dd:3e:01:a9:62:c8:
ba:db:df:f2:17:43:d2:69:93:c0:98:d0:33:44:36:29:40:68:
57:e9:f5:2e:38:ed:ae:1d:8d:2d:e0:3c:50:f8:9c:a7:2f:a2:
19:08:6b:d9:3e:a2:29:2f:66:60:dd:b5:22:e9:5b:a1:00:6b:
6d:3e:4c:6a:d0:f6:ca:a0:61:f7:73:52:fd:ec:97:f6:1a:c7:
f5:e1:79:09:2d:53:b8:6a:11:4e:e0:88:cc:6f:ca:6b:39:97:
e7:4f:a8:62:30:15:24:bc:52:9d:3c:e9:f5:2b:5d:9b:8d:cc:
92:ce:4c:9f:6e:8f:1c:b7:15:67:ac:62:fd:a4:f3:86:48:b6:
70:a1:a2:3e:b6:64:05:15:b8:9c:53:3f:e3:b9:15:a5:dd:45:
e0:11:d9:c3:84:b9:88:61:48:fc:dc:0f:a4:a7:75:17:19:05:
49:da:51:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:05:03 2025 by rpki-client