Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/OihnMqADYCl3o_f-cEn9z-d6QNU.roa
File: OihnMqADYCl3o_f-cEn9z-d6QNU.roa (raw, json)
Hash identifier: h4mfAryNKMLZ+cLBNN9ToEHye+NJw4a1Xa8qSeqh6GA=
Subject key identifier: 3A:28:67:32:A0:03:60:29:77:A3:F7:FE:70:49:FD:CF:E7:7A:40:D5
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 0197439D880B727BBE3DD51273ABA88900D5
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/OihnMqADYCl3o_f-cEn9z-d6QNU.roa
Signing time: Fri 06 Jun 2025 05:01:26 +0000
ROA not before: Fri 06 Jun 2025 05:01:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 46.70.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:9d:88:0b:72:7b:be:3d:d5:12:73:ab:a8:89:00:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Jun 6 05:01:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a286732a003602977a3f7fe7049fdcfe77a40d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:b5:b2:4f:eb:52:63:d0:86:25:c6:3f:d8:
39:c4:f1:89:fd:60:8a:0e:70:03:ec:45:84:27:cd:
52:f5:08:51:2c:9e:95:d0:44:ec:0d:2b:2d:ce:3d:
5e:3d:07:b9:63:a8:21:58:b8:59:aa:ed:eb:78:30:
f2:5a:30:0f:c3:d7:63:ab:f7:f8:f2:e0:91:23:22:
96:1d:56:38:07:7b:bc:b1:8c:a1:71:9e:88:37:40:
c1:1e:dc:42:91:22:ea:91:d0:0f:d9:49:30:ae:3f:
cb:bd:0d:0e:2e:0d:a9:43:8d:ad:b5:7b:7f:2d:3a:
88:60:c5:48:cf:2f:48:e7:21:64:80:8b:2d:46:26:
cc:df:b3:24:23:60:37:d1:e3:00:f8:ab:21:c5:b6:
5e:61:e6:04:90:c0:01:a8:2b:0a:35:1a:02:0b:3a:
a9:8d:3a:1a:b2:24:81:c6:0d:b2:6e:e9:1e:5d:f1:
e9:ac:21:70:0d:ff:1c:b6:e6:87:36:1f:2a:8e:e1:
29:6e:f6:65:83:c9:2b:5d:06:ce:49:0f:db:35:48:
07:ec:bf:01:bc:f8:ea:0b:87:47:62:e4:3d:f9:77:
33:cb:84:04:5f:a4:74:47:97:ef:c1:72:77:6d:05:
cb:dd:6e:a5:05:34:dc:81:77:07:8e:ea:a6:56:47:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:28:67:32:A0:03:60:29:77:A3:F7:FE:70:49:FD:CF:E7:7A:40:D5
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/OihnMqADYCl3o_f-cEn9z-d6QNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.70.192.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:47:4b:0e:05:6e:63:ba:48:f9:dc:7b:90:02:c0:2e:a7:e0:
d9:95:e5:4f:aa:a4:b8:4b:cc:36:94:61:bc:01:dd:db:a9:07:
bc:b1:62:2c:8c:1b:0b:1e:9e:79:7c:c8:5a:d5:9b:63:48:f8:
7c:73:d1:60:e8:da:be:75:5e:0d:05:4f:fb:38:de:28:58:56:
d2:52:6e:94:38:8c:7d:28:e0:46:c4:63:ef:4e:73:7a:cb:82:
8b:b4:78:87:cb:31:9f:7c:f4:ed:6d:b4:76:d3:75:00:38:fa:
8f:71:b1:a7:04:4a:7e:c7:3e:fc:0b:55:12:c4:e4:c9:c9:76:
80:f2:7f:d0:40:ba:26:f2:d6:29:c7:f8:70:c8:fc:19:4d:31:
e3:a3:91:e9:a1:8b:9b:fb:d9:94:85:50:87:88:0d:c4:0d:88:
ee:c3:f9:14:d9:22:25:e4:75:e0:9f:f3:80:19:02:c1:15:4a:
5f:99:07:6c:e3:f5:d3:c1:d5:7b:df:eb:9c:5d:29:87:9f:e3:
9c:65:63:6c:ec:26:bd:91:11:b0:28:fa:34:bc:65:db:2b:76:
23:01:35:29:e0:94:06:eb:2f:c2:86:0d:dc:d5:ff:aa:0c:02:
f5:48:07:d8:5e:28:7f:cb:ad:79:fd:4d:7d:df:fd:dd:36:a1:
35:ab:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:13:33 2025 by rpki-client