Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa
File: oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa (raw, json)
Hash identifier: xodF+0GY/o0dnV+Pf3SoupYGcpVAvzY6q/h09Jx9Nzo=
Subject key identifier: A0:5A:A3:8D:83:EE:3B:2B:19:9B:C2:2F:5F:61:C5:9D:9D:B2:30:DF
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019428263A9A6F8A8D9EF312241E2FDB3539
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa
Signing time: Thu 02 Jan 2025 17:53:01 +0000
ROA not before: Thu 02 Jan 2025 17:53:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6282
IP address blocks: 45.158.200.0/23 maxlen: 24
45.158.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:3a:9a:6f:8a:8d:9e:f3:12:24:1e:2f:db:35:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: Jan 2 17:53:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a05aa38d83ee3b2b199bc22f5f61c59d9db230df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:08:3f:db:d1:3a:f5:17:28:d8:51:1b:58:0f:
2a:cc:c0:45:32:38:df:12:27:8c:e6:a8:18:a0:85:
4f:bf:cd:fc:0a:5e:a9:04:42:a3:58:27:0f:2e:b3:
38:9e:78:96:12:57:19:bd:ce:4a:68:71:a5:4b:f8:
25:54:bd:bc:6b:15:ac:d3:56:03:72:7a:3c:cc:0a:
0a:72:eb:bb:24:29:37:ec:06:b6:6e:1e:c6:1a:20:
5d:17:10:e5:5a:d0:80:b6:50:28:fa:9d:2c:ab:30:
25:26:ff:ef:d2:c9:e9:3a:88:9c:59:e2:a5:21:e8:
cd:83:52:0e:0f:0c:71:8a:2e:13:1e:be:d8:32:88:
cd:45:c8:80:10:e9:3e:55:eb:25:6b:79:e3:8c:f0:
68:a0:bd:a0:e4:29:ef:8b:71:b4:28:a5:ba:e3:10:
f0:18:8a:83:bb:18:eb:98:d7:f7:c8:de:51:66:e5:
ae:2a:97:31:9a:9c:02:70:b7:d5:e7:71:a1:ae:86:
6f:f5:9f:c2:fd:54:a4:6f:88:8f:0c:6c:6b:c2:c2:
f9:01:8a:e2:fd:0d:cc:32:bf:35:22:88:c3:db:ac:
0c:bb:e4:fc:40:26:8e:35:69:2e:91:03:4f:8a:6e:
6d:c2:94:20:4e:d3:62:bc:73:b1:43:66:1a:75:87:
1c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5A:A3:8D:83:EE:3B:2B:19:9B:C2:2F:5F:61:C5:9D:9D:B2:30:DF
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/oFqjjYPuOysZm8IvX2HFnZ2yMN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:ba:eb:1c:9f:5a:de:33:77:02:9b:2c:92:fe:cc:4a:26:f2:
a3:d4:01:87:0b:8d:bf:27:4c:4c:3a:8c:ed:64:fb:5c:ec:ca:
aa:8f:24:3f:40:66:5d:d0:c5:80:11:ee:71:40:65:68:4f:45:
5a:fd:ae:63:aa:a4:c5:f7:48:33:a8:25:2e:80:e6:14:9d:a6:
79:87:c6:fe:bf:e5:1f:0a:3c:61:34:81:f3:05:29:62:35:5a:
e0:42:73:20:bc:2b:9a:62:2c:a8:56:e6:89:c8:38:c0:6f:d5:
16:c5:19:43:83:27:b2:b8:51:c3:69:15:56:5e:b3:c3:9c:83:
db:28:4e:85:cc:03:eb:d0:cb:06:a3:aa:e4:f7:9d:34:cf:07:
00:bd:bb:e5:62:80:44:76:26:2b:08:7f:29:c7:03:78:35:64:
c9:ae:ff:b7:79:51:f8:87:17:85:75:4a:89:eb:e2:c9:5d:be:
91:85:f0:75:81:d7:31:0a:ac:7d:85:76:92:51:5a:7c:07:03:
c7:e4:cc:43:c2:93:56:c0:08:76:ac:1f:43:f6:75:3e:59:b3:
3e:2e:ca:23:df:0b:83:fc:f0:5e:f9:6c:c5:37:7a:7a:97:44:
f0:8f:92:8f:2b:8f:6d:43:dc:c4:00:e7:d1:d8:e9:f7:19:bf:
bd:95:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:10 2025 by rpki-client