Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/OL6AoyvltIWrfared4b30q9zkxI.roa
File: OL6AoyvltIWrfared4b30q9zkxI.roa (raw, json)
Hash identifier: BCZJFaW2H8wcaghHXjKzyZLLD5xoj/h4op/UrSZpM4s=
Subject key identifier: 38:BE:80:A3:2B:E5:B4:85:AB:7D:AA:DE:77:86:F7:D2:AF:73:93:12
Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Certificate serial: 019420686BA7B7E6E59CC1B89FC811F8E5D5
Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/OL6AoyvltIWrfared4b30q9zkxI.roa
Signing time: Wed 01 Jan 2025 05:48:21 +0000
ROA not before: Wed 01 Jan 2025 05:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49488
IP address blocks: 194.0.10.0/24 maxlen: 24
2001:678:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6b:a7:b7:e6:e5:9c:c1:b8:9f:c8:11:f8:e5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38be80a32be5b485ab7daade7786f7d2af739312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b7:1a:01:17:d5:07:28:57:07:d2:cd:6d:17:
2a:d1:5d:78:eb:b8:c7:50:b9:8a:2a:f1:c7:23:6f:
58:8f:24:28:f9:5b:6e:27:31:73:37:74:b9:fd:a1:
6b:19:90:b5:cf:0e:4b:a6:a0:e2:0f:6f:50:b7:40:
0f:eb:48:e7:2e:5c:e4:c5:c2:9b:a3:41:4b:c0:43:
24:c9:07:54:77:7d:2c:76:93:fc:78:2b:34:2b:6f:
b2:60:ce:35:f0:41:9a:1b:13:b8:f7:91:b5:dd:bb:
2d:e5:25:47:d6:89:53:bc:4b:4c:23:16:79:6a:ea:
c4:6a:bd:5b:c8:5f:fb:52:d3:eb:46:13:11:ff:a7:
1e:7d:c6:33:89:2e:15:c3:f1:e8:f9:81:3c:31:14:
1b:f1:f1:a9:9c:e9:eb:85:f4:35:86:71:a6:9c:0b:
57:c6:e6:68:bd:87:6c:47:22:96:28:f4:1e:5d:93:
9c:cd:6b:1a:c7:94:31:5f:fd:01:ad:ce:dd:41:c1:
90:0c:a5:99:2c:ca:e6:22:83:a0:ba:9f:38:c2:21:
98:e5:57:bd:2e:c4:e2:7b:52:4e:ac:c6:3c:73:4f:
8a:61:13:2a:89:bf:68:08:81:f8:8f:8f:2b:cf:3e:
49:2f:39:81:d0:fd:1d:3b:76:94:69:95:4c:94:eb:
ad:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BE:80:A3:2B:E5:B4:85:AB:7D:AA:DE:77:86:F7:D2:AF:73:93:12
X509v3 Authority Key Identifier:
keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/OL6AoyvltIWrfared4b30q9zkxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.10.0/24
IPv6:
2001:678:d::/48
Signature Algorithm: sha256WithRSAEncryption
6d:7e:29:5f:35:5b:ec:13:b1:30:56:8d:2a:e1:f4:97:59:23:
f6:f1:84:93:79:0a:4b:32:26:b9:7c:98:eb:95:ff:e4:52:33:
95:45:6b:b0:25:f5:4d:48:95:7c:43:00:bf:76:37:8c:fa:51:
84:7a:2a:d9:0c:44:20:88:ce:e3:1d:88:05:ae:ea:54:8a:58:
03:c6:7a:a2:5a:90:92:6d:ee:7a:70:cb:2d:4c:6d:6a:2a:b9:
57:be:bd:23:bb:a9:d7:94:00:be:15:6b:e2:0b:b9:e1:3b:c1:
55:4c:90:c8:2a:8d:37:c5:bd:d8:75:40:4f:35:2a:23:d5:a2:
5a:2f:a8:81:51:8f:13:a9:cc:98:d2:83:07:16:c0:13:79:45:
74:65:e9:08:b2:14:40:d2:ff:9e:72:99:22:72:7f:9a:af:e7:
14:1c:9f:cf:2f:d9:30:ea:dc:99:e7:a0:ec:45:44:31:ce:8d:
2d:9b:33:e9:6f:7c:30:fa:ea:e0:55:f5:ff:85:e8:6e:66:8e:
45:14:cf:67:02:29:41:53:3f:7c:2c:fb:97:3c:f2:34:c1:51:
00:be:dd:98:69:2c:e0:ea:96:b6:06:74:84:f2:b5:3a:e0:d8:
76:a1:97:4d:e9:57:93:2d:65:0f:16:ed:00:2e:21:dd:50:49:
07:e8:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:23:54 2025 by rpki-client