Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa
File: oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa (raw, json)
Hash identifier: /NMMdoNH5sZWYkg6OnNqyz5087fDkPkdrRkbme1onLo=
Subject key identifier: A3:24:E2:58:9F:75:DF:05:53:8E:70:9C:C3:A4:38:44:15:19:6E:AF
Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750
Certificate serial: 019426D9D77841C5385561A4E59A68B670D8
Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa
Signing time: Thu 02 Jan 2025 11:49:58 +0000
ROA not before: Thu 02 Jan 2025 11:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 185.33.224.0/22 maxlen: 22
2a00:ce20::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft
rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d7:78:41:c5:38:55:61:a4:e5:9a:68:b6:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a324e2589f75df05538e709cc3a4384415196eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:2b:5b:0f:04:65:21:eb:82:b8:44:5c:6b:
7b:c8:34:e8:fa:f1:12:0f:3d:4a:e7:f1:2d:4b:a9:
a6:ec:22:a1:01:3a:31:cd:cb:95:7c:4a:35:12:15:
8c:5f:51:82:e8:27:c0:6d:4b:ab:ce:4d:1c:0e:81:
1b:2b:ea:2a:f2:de:e0:30:e6:92:3f:9c:ec:aa:62:
96:b6:0e:cc:e7:66:46:4b:06:f9:4a:58:df:e2:f6:
1c:67:de:f9:a1:6a:12:9f:07:d5:e7:e5:06:b9:83:
c7:29:68:4d:52:f0:4b:64:ae:a8:87:0d:31:01:ca:
b0:99:e7:23:9d:3d:ee:aa:c1:e2:a3:46:41:75:90:
12:d7:ce:51:26:9f:ac:e5:a9:6e:3f:54:de:13:24:
f5:ba:3e:64:9e:cd:de:48:c1:6c:c1:18:13:b5:a7:
ee:ae:05:4a:3e:f1:62:54:da:05:20:9e:53:ef:77:
5e:c4:75:7f:aa:c0:9e:04:ac:27:8b:c4:cf:dc:43:
83:99:97:19:fd:2e:35:c5:a6:f9:ce:d5:f4:5a:0f:
0d:ad:5a:43:b9:61:a9:2f:e9:66:a3:c8:c5:e9:22:
23:7f:99:9d:4b:b3:82:eb:3f:3c:a9:6e:78:bf:82:
3a:64:f9:02:44:ea:e2:b8:35:ff:d7:a1:49:f9:7f:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:24:E2:58:9F:75:DF:05:53:8E:70:9C:C3:A4:38:44:15:19:6E:AF
X509v3 Authority Key Identifier:
keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/oyTiWJ913wVTjnCcw6Q4RBUZbq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.224.0/22
IPv6:
2a00:ce20::/29
Signature Algorithm: sha256WithRSAEncryption
4c:8c:2f:31:65:95:44:2e:2a:1e:79:0a:20:c0:2e:23:d1:64:
6e:ba:32:d4:4e:ad:0f:30:47:5e:fb:4e:60:c6:4f:63:3d:30:
f9:34:29:1b:b3:6d:e4:d7:9c:5b:aa:2e:49:38:84:c8:e2:30:
f9:02:e9:97:f8:c2:1a:85:b5:f0:1e:54:5d:22:c2:ea:dd:b9:
5d:1a:00:85:fa:f5:53:b4:5f:34:8a:ec:23:b3:44:ae:1b:73:
4e:a1:6f:a6:5c:c3:f0:0f:9e:49:0a:45:b5:99:d8:8a:da:62:
26:44:2c:83:0a:2a:f4:63:53:97:c8:5f:2b:a2:b2:5a:aa:38:
6f:61:c8:f0:97:7b:8a:5b:aa:bd:0b:50:35:ff:6e:3f:7b:07:
58:75:08:81:dc:25:31:8c:91:15:71:cb:bf:d3:f2:e8:b2:c6:
06:44:34:2f:c6:7a:ed:c1:a4:d9:76:58:a3:6a:23:b5:0b:cc:
6e:c5:e3:84:89:5a:ed:da:43:26:99:fe:10:10:fc:05:cf:22:
86:07:59:e3:f7:65:df:9f:2f:77:d2:94:c4:b8:fa:92:e5:e2:
33:4a:95:d2:32:87:b1:5a:a0:f5:a1:cd:74:c9:6b:ce:e6:a4:
01:77:8f:38:3d:23:37:5d:ae:17:d4:9f:88:f4:c5:4c:bf:95:
a7:71:c1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:59 2025 by rpki-client