Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/oaKvlORrQzC1pBRT_-aPNUnnxzk.roa
File: oaKvlORrQzC1pBRT_-aPNUnnxzk.roa (raw, json)
Hash identifier: JOqyxNULi6w982eQ+ny7py8GGUgIBVYkOxYYzZnsAac=
Subject key identifier: A1:A2:AF:94:E4:6B:43:30:B5:A4:14:53:FF:E6:8F:35:49:E7:C7:39
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266C01D7AD2BDF7417EE651E04218370
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/oaKvlORrQzC1pBRT_-aPNUnnxzk.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212163
IP address blocks: 77.65.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:01:d7:ad:2b:df:74:17:ee:65:1e:04:21:83:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1a2af94e46b4330b5a41453ffe68f3549e7c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ce:70:25:0d:ed:cb:17:26:c1:d3:8a:ae:00:
e7:ff:2c:1e:4b:aa:f9:a3:5c:5f:b3:e3:0c:1d:71:
fb:60:c0:94:88:82:ca:29:c7:a5:9e:f8:f7:4b:f4:
d5:d6:42:a3:61:b1:e7:06:24:82:27:74:86:9f:a8:
e5:19:cd:87:d0:4a:ce:7b:15:87:1a:b4:95:54:a6:
78:e5:e1:0e:9d:be:97:68:da:a5:d2:c1:3c:84:9f:
54:8a:b2:1b:99:87:80:37:bf:a8:6d:70:78:bc:4a:
59:ba:9b:de:ab:9f:6d:66:11:8e:af:84:b6:b4:8a:
08:cf:04:aa:b3:8b:41:19:7b:0a:3e:7d:f1:39:b3:
72:66:4b:51:92:8a:12:81:58:15:65:26:40:c7:22:
ac:c3:a0:8e:c9:9c:c0:e4:aa:26:53:ee:46:80:9e:
b5:8f:6e:d0:d8:be:63:ca:54:df:51:3f:9d:02:d2:
5f:57:e1:97:6b:36:96:c6:32:44:66:c4:3f:51:fd:
5d:1f:3a:53:94:6b:89:e4:b8:87:ea:ed:03:91:44:
03:ab:76:f9:63:ec:ea:3a:e7:61:87:43:ef:21:9e:
af:dc:d0:2b:a9:18:24:0e:b4:2d:68:c5:e9:93:4f:
4d:a7:7f:bd:a4:0d:b8:7d:18:f0:5f:78:2f:0b:54:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A2:AF:94:E4:6B:43:30:B5:A4:14:53:FF:E6:8F:35:49:E7:C7:39
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/oaKvlORrQzC1pBRT_-aPNUnnxzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.156.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:2a:69:7f:ce:6e:c9:8c:16:87:1b:fa:b4:96:47:24:75:25:
1e:7a:96:70:a0:bf:ad:09:f2:e2:44:45:20:45:08:fb:93:f8:
e9:1e:b0:64:d5:fd:e3:f1:5d:34:1d:d3:f9:bd:a8:19:e9:9a:
6c:1e:81:b5:a4:13:ce:2b:f8:7a:33:f6:04:17:12:b7:9f:17:
5c:30:1a:b7:73:38:ab:56:a4:84:14:3a:cc:79:dd:0f:1b:89:
1d:b5:83:db:ec:5a:6c:70:c5:72:08:6c:5a:e5:ec:cb:2d:8f:
43:79:ae:44:14:2a:a4:c8:ce:4f:59:a8:d5:d2:c5:24:7f:26:
98:aa:05:d5:3b:87:2a:5a:98:45:24:2e:2f:1f:7e:bf:f5:53:
76:ad:99:b7:28:26:93:1a:98:bb:d9:65:ca:e7:fa:1a:cd:56:
ac:67:a9:dc:a4:f6:cd:1a:54:33:ef:58:19:62:a7:4a:4e:2b:
28:39:fb:ea:b5:bd:d1:37:dc:4f:e8:0c:7c:a7:1e:01:00:b1:
33:35:f0:73:e7:43:69:94:62:53:1f:75:bd:98:b7:33:bd:6a:
33:5d:f5:b6:06:7b:bf:53:8d:e5:da:06:d4:53:14:47:57:dd:
17:19:a4:d0:4e:ce:74:5b:c4:4a:56:21:b8:c5:e4:a0:65:ed:
a2:8c:e3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:35 2025 by rpki-client