Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa
File: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (raw, json)
Hash identifier: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=
Subject key identifier: 39:25:84:D6:C2:08:6F:31:52:55:26:57:59:27:B7:F2:14:C0:FD:08
Certificate issuer: /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial: 01941F8C5BDF5CF702FE9BABC1A4AF44CCD4
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50010
IP address blocks: 91.132.64.0/24 maxlen: 24
91.132.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5b:df:5c:f7:02:fe:9b:ab:c1:a4:af:44:cc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=392584d6c2086f31525526575927b7f214c0fd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:90:0e:bd:b6:af:7e:21:28:46:be:be:be:c9:
5d:e7:e0:aa:ae:00:79:c3:eb:f0:58:ae:38:c9:e7:
3b:a5:2e:f5:ee:04:48:98:8d:9b:b6:c6:ef:e0:e9:
a0:cc:60:b8:a7:62:6d:5c:56:d7:8b:31:9a:a0:3c:
4f:c2:64:7d:0b:c7:b3:fe:b7:f7:4d:f6:01:bf:9c:
fb:39:21:c9:22:4c:29:18:51:14:34:ca:c0:b1:6a:
02:1d:c0:3d:2d:e0:31:0f:95:91:d1:37:f1:af:29:
17:1c:05:3d:64:db:9a:89:19:d2:72:b0:13:45:ee:
5e:82:25:9e:d8:7c:c3:bb:ba:6d:0d:76:03:0c:ad:
9c:61:c8:6b:29:0e:ea:aa:08:e7:7c:bc:87:9a:4c:
07:8e:3d:67:67:4a:ee:8f:b5:66:19:2a:16:fd:e2:
4d:91:09:0c:0e:ca:0a:f1:28:09:da:95:71:a3:91:
fe:6a:6c:81:be:bd:33:97:51:7d:b5:a8:31:db:7d:
62:b0:a6:f3:22:26:eb:fa:ac:ad:de:c4:42:cc:84:
a3:2d:09:ca:65:74:0b:f3:27:cf:8c:17:15:68:9d:
31:bc:79:a7:b5:97:5c:0c:09:c1:7a:a3:22:86:51:
79:e0:93:13:9b:3c:25:82:22:64:b0:42:79:cb:d9:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:84:D6:C2:08:6F:31:52:55:26:57:59:27:B7:F2:14:C0:FD:08
X509v3 Authority Key Identifier:
keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.64.0/23
Signature Algorithm: sha256WithRSAEncryption
39:13:c6:ca:f9:bd:d4:ca:a4:b0:68:c1:e2:bd:5c:0b:23:7e:
8c:24:3a:11:33:4c:14:f0:db:2e:20:de:ec:38:a6:ac:55:cd:
d6:e8:92:96:d3:b9:c9:2f:7d:1e:a7:43:05:48:26:8d:42:c9:
33:4a:b2:93:9e:57:14:fa:c8:a0:99:14:2d:82:04:bd:ba:b9:
4a:dc:88:f9:1e:45:4c:d2:dc:93:ba:fc:27:47:9a:47:38:e4:
59:a9:b2:66:9c:4d:97:d9:b2:c2:6c:a7:eb:ca:e3:7e:22:42:
a2:5c:0c:15:c9:f2:3b:3e:0c:b9:dd:80:f4:5b:66:ab:1e:bb:
6d:1e:a2:a4:17:9e:5c:a2:b5:20:71:b9:fd:58:04:cb:57:ba:
19:d4:d6:f8:74:e2:ea:ac:18:b6:11:10:3d:0a:3a:7a:90:8c:
e3:8f:05:d7:db:ee:0d:b8:5c:3a:9b:0e:b1:31:1c:28:2a:90:
9d:7b:d5:92:1f:09:eb:3c:4f:74:61:62:02:82:32:97:5e:2a:
89:e1:6e:10:a2:da:ca:d6:24:2a:d2:0e:a0:e9:25:b6:a4:77:
20:29:76:09:7f:54:36:98:d7:7d:7a:8e:42:17:7e:d2:4a:ac:
9e:a1:a6:1a:ee:5f:43:12:bc:82:2d:85:12:a3:84:a8:56:2e:
1a:86:9f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:36:32 2025 by rpki-client