Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/O4G8Oy8WXn03ntoUxCRHejsTASA.roa
File: O4G8Oy8WXn03ntoUxCRHejsTASA.roa (raw, json)
Hash identifier: +xEpXad5VkxTIKpDB4MRGFxb/Xqo2YExKflblesjHtU=
Subject key identifier: 3B:81:BC:3B:2F:16:5E:7D:37:9E:DA:14:C4:24:47:7A:3B:13:01:20
Certificate issuer: /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial: 0194258F9422AC99925CB1973EF5294059A6
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/O4G8Oy8WXn03ntoUxCRHejsTASA.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49133
IP address blocks: 2a0d:2406:babe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:94:22:ac:99:92:5c:b1:97:3e:f5:29:40:59:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b81bc3b2f165e7d379eda14c424477a3b130120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:0c:5a:d9:87:3f:e3:95:97:0d:32:a8:18:
ee:dd:26:3d:6a:23:dd:40:41:52:95:c1:2d:1d:c1:
7c:f1:88:e8:84:06:78:db:68:54:8b:54:53:da:d9:
97:60:d1:eb:0b:03:ef:13:60:4e:45:3d:5c:49:b0:
63:a5:90:53:5b:a5:e3:de:74:37:0e:f8:b8:d4:63:
48:08:81:10:90:cc:21:6f:db:da:6e:3f:63:77:c9:
d2:91:49:80:c2:b3:18:e0:15:b8:e8:32:a6:b6:b0:
4c:9c:2c:75:d8:c7:2d:ac:87:52:97:f5:17:83:be:
68:8c:ed:d3:c0:b8:45:bd:ff:96:e2:94:25:cd:12:
50:30:30:ca:6b:8b:6f:6e:5c:92:f6:5a:62:3d:ae:
cc:d9:4e:c0:93:b8:19:02:a9:b5:1d:c4:64:8f:9d:
03:c8:d1:62:7d:db:f8:2e:c2:00:f0:f1:d2:5e:05:
3f:2d:1c:9a:06:62:b6:0e:ca:4d:f8:ec:e5:7e:b9:
eb:fc:20:23:9f:c2:53:5c:33:e9:68:71:e0:5f:42:
f1:33:dd:f9:2e:7b:e0:7b:dc:1f:de:66:18:56:6d:
01:0d:11:65:de:11:6f:cf:d5:69:a8:d5:2f:9d:17:
0c:50:b8:57:18:6f:1b:bd:4d:67:58:34:dd:bb:32:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:81:BC:3B:2F:16:5E:7D:37:9E:DA:14:C4:24:47:7A:3B:13:01:20
X509v3 Authority Key Identifier:
keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/O4G8Oy8WXn03ntoUxCRHejsTASA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2406:babe::/48
Signature Algorithm: sha256WithRSAEncryption
8a:8b:22:53:9e:f2:df:a9:02:ad:58:44:bd:80:6b:0b:f7:58:
d5:48:65:43:79:86:9c:8b:5d:25:56:44:51:39:d9:73:a1:bc:
1f:a8:d0:55:91:e4:a5:ec:c9:d4:f8:c5:22:ad:17:6b:89:4a:
0c:1a:2d:01:dd:ad:37:a0:1d:7b:a8:22:53:4a:b5:3f:2b:26:
33:6d:7d:c4:91:5f:bf:26:0e:c0:f2:35:39:0b:5f:38:b6:5f:
53:ff:3e:40:7e:37:1e:3a:5b:d5:a8:80:b3:07:ef:a4:9a:71:
a1:d5:15:d5:d5:10:bc:e7:b8:0f:7b:74:86:74:aa:60:53:8e:
9a:50:d3:60:74:af:20:13:69:05:df:f3:2b:ea:9b:dc:9d:33:
a7:8e:7f:d5:6a:c6:ce:4e:d7:c8:38:a7:3b:38:8e:e6:7e:41:
e5:12:44:90:78:99:b9:75:2c:f0:7c:6f:e0:b9:23:85:80:7f:
f0:da:48:b4:f7:69:55:75:64:67:0d:01:09:42:7d:0d:85:09:
da:54:45:90:d1:e5:13:d4:39:09:bc:42:b4:83:13:48:ea:b1:
2d:fa:9b:31:f0:cf:be:e5:79:14:91:14:00:d6:2d:86:f4:ff:
ca:02:51:09:fb:74:67:68:f9:67:ce:be:fa:4e:53:df:33:fe:
b0:39:3f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:32:28 2025 by rpki-client