Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/oFK59Q3C9TGh3OjadIioNiBOVT4.roa
File: oFK59Q3C9TGh3OjadIioNiBOVT4.roa (raw, json)
Hash identifier: LP1kIHI3DX97h8zxZoYZWGIq//mTDS9bTjeGSRHWj7Q=
Subject key identifier: A0:52:B9:F5:0D:C2:F5:31:A1:DC:E8:DA:74:88:A8:36:20:4E:55:3E
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B89B534825E2F27F63A331F390F3
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/oFK59Q3C9TGh3OjadIioNiBOVT4.roa
Signing time: Thu 02 Jan 2025 01:49:05 +0000
ROA not before: Thu 02 Jan 2025 01:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215042
IP address blocks: 95.164.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 23:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b8:9b:53:48:25:e2:f2:7f:63:a3:31:f3:90:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a052b9f50dc2f531a1dce8da7488a836204e553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:3a:d1:b4:c2:5d:cb:7c:6b:5e:34:f5:8a:
dc:8d:61:22:9d:54:88:3a:5c:da:43:84:6b:d1:f8:
91:e1:80:9a:94:f6:38:9e:f4:58:ee:af:fa:39:7e:
46:a6:24:7e:a6:c4:f8:f9:43:1c:da:cd:4d:90:81:
0b:63:6f:a2:5e:19:c5:67:e8:e2:b0:5d:10:b4:7e:
f4:df:5e:93:72:5a:11:0b:02:e7:89:45:0e:cc:d0:
4d:af:f1:bf:70:53:ed:13:08:50:24:df:ac:8c:3e:
8f:6d:4f:95:58:f1:1c:52:17:64:3f:70:05:73:34:
06:f4:d4:81:b2:0e:53:6a:59:bf:92:79:e2:43:42:
07:ab:ed:65:0c:26:00:3e:56:77:fd:07:19:97:fc:
64:4e:de:99:a1:d2:a5:ab:30:61:af:c2:a4:fb:54:
c3:93:61:1e:18:98:62:b9:54:0a:64:4b:37:83:d8:
10:5c:2c:af:b5:fa:9f:87:a1:78:4a:30:4d:4a:80:
d3:68:c0:5a:8c:57:88:f4:74:06:f1:14:9e:47:e8:
bd:a8:9f:a7:3f:51:c8:33:94:e1:fa:51:89:ea:ff:
f3:26:e7:41:35:73:90:c7:45:91:f6:6a:5b:82:53:
27:b8:10:02:05:90:3d:cf:63:1b:cd:fe:dd:8f:5a:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:52:B9:F5:0D:C2:F5:31:A1:DC:E8:DA:74:88:A8:36:20:4E:55:3E
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/oFK59Q3C9TGh3OjadIioNiBOVT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.14.0/24
Signature Algorithm: sha256WithRSAEncryption
69:44:9c:8d:58:03:73:5f:68:72:e7:27:00:1a:52:24:2c:e2:
9a:ed:45:78:97:a6:48:85:d5:b0:be:db:52:cf:bf:89:2e:dd:
18:2a:3b:1c:ec:75:81:ed:71:e7:c5:c0:4d:0d:ea:62:32:c8:
e7:42:2c:cc:50:00:a4:10:a3:67:a0:41:ab:a0:8a:4f:9e:73:
63:40:5b:02:97:4a:29:8a:0a:04:05:b8:b7:ea:f5:ac:2f:68:
b5:41:53:2a:47:15:91:62:bc:80:6c:35:a8:09:83:05:fa:86:
0c:c9:53:12:82:92:0b:b4:70:aa:04:e6:9e:b0:1f:2e:7c:fc:
01:bc:9f:ee:32:7a:15:76:67:7f:6a:d5:e1:d2:15:19:24:44:
5c:c9:97:78:b7:d6:9a:80:e3:0f:f4:f6:ba:14:5a:79:34:9a:
a3:52:27:e1:c2:6d:40:f6:ec:bd:ab:d4:25:a9:c2:10:2f:07:
d5:fe:13:dd:95:b5:92:2e:20:5c:d8:17:d6:43:13:53:00:7e:
11:07:2c:66:64:ab:6c:0f:12:50:a2:16:8c:b5:bf:b8:74:3d:
af:8e:83:dc:6e:73:32:38:61:fb:95:e0:40:40:d9:ae:54:7f:
48:28:41:cd:73:d1:f0:85:5f:b5:4f:31:0f:f9:0d:a3:cc:4e:
31:77:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:40:00 2025 by rpki-client