Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa
File: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (raw, json)
Hash identifier: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=
Subject key identifier: 39:BB:22:CB:73:46:12:85:23:2F:E0:CB:42:8D:32:84:BC:78:28:02
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 019420D5ABFA9DF99B80B3F70A441DEF9B43
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8455
IP address blocks: 195.248.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ab:fa:9d:f9:9b:80:b3:f7:0a:44:1d:ef:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39bb22cb73461285232fe0cb428d3284bc782802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:73:7d:8c:1b:cf:59:8f:10:c3:8a:ae:f5:
14:18:6a:71:d4:47:58:11:dd:10:e0:ca:f4:01:05:
53:77:25:35:19:24:4b:b6:b6:7f:08:29:bd:c1:c3:
8e:f2:58:86:fc:73:47:6c:fd:93:2c:23:d6:b3:0e:
a9:81:aa:a1:db:d5:75:97:9c:9d:67:ad:2c:dd:9b:
08:45:62:bf:ad:9b:69:43:59:fb:f0:af:6a:1b:7d:
cb:69:9d:a7:d1:e2:a0:32:b2:75:61:be:1c:ba:23:
1c:ce:0b:64:e7:92:90:82:71:35:0c:6d:3e:94:5a:
6b:f7:13:ef:27:01:ec:d0:f0:2b:5f:66:ff:f7:1a:
a3:7f:9d:bc:00:10:57:84:e6:38:c8:1c:b1:69:91:
e6:4d:5a:30:bc:3d:b6:17:5f:2a:c6:54:ee:d3:0d:
cd:8d:6c:f1:a3:a6:49:cc:1b:d8:c0:c6:c4:49:93:
32:52:04:ba:e3:80:f8:ec:e9:f0:6b:a5:6e:16:ff:
a6:6e:8d:3d:e7:eb:d4:cc:8d:fb:cd:fe:62:b7:a7:
14:9f:b9:9b:46:0a:98:8a:ec:71:23:36:ca:0a:2d:
97:de:2a:84:eb:30:6c:28:04:de:61:11:0b:38:28:
5e:a8:ed:a6:29:1c:91:cf:d2:88:c9:e2:24:09:9e:
c9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BB:22:CB:73:46:12:85:23:2F:E0:CB:42:8D:32:84:BC:78:28:02
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.87.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0a:4d:be:2f:ee:26:f8:d2:5d:96:5c:f5:f1:5b:35:80:6e:
aa:2f:1e:b3:03:00:3d:7e:cd:1c:f7:59:b8:77:af:68:b3:30:
2b:b7:f4:95:b5:a2:94:94:92:19:6b:43:e7:c0:ce:2f:79:21:
76:e5:e2:7b:86:09:80:e3:ca:a2:6d:45:c4:d3:47:30:35:68:
38:3f:14:86:9a:50:43:5e:c4:85:5c:aa:ce:ae:f3:5b:3d:7b:
fa:0d:bb:ed:06:04:b3:af:0d:d7:43:93:8b:50:ae:a1:fd:10:
5d:58:2e:5e:e6:bf:8a:77:f2:2f:eb:bb:f2:b0:c1:e0:f1:e2:
db:20:13:25:3b:a7:e0:ed:8b:00:45:ef:ec:b8:96:20:e2:e2:
a7:e5:14:e8:ef:29:64:b6:d5:17:68:ec:c9:a7:5f:78:ff:5b:
97:e5:d4:02:0e:48:5c:e0:4b:62:4b:22:91:72:4e:50:e6:97:
98:0d:8e:fd:de:a6:b7:07:10:7e:c6:89:7f:41:64:ee:ae:36:
d8:07:c5:78:a1:cb:ae:5e:0e:87:c3:ed:0f:ae:cd:0e:bf:fb:
93:4d:f6:1e:08:2a:fc:51:da:47:a3:ad:37:0e:9a:bb:b3:a4:
a2:72:4b:7c:95:49:bb:d9:77:de:be:9f:6e:4d:80:49:4d:a6:
27:63:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:54 2025 by rpki-client