Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/rOZzXqhZDodX-Oc13GcxPruRbSM.roa
File: rOZzXqhZDodX-Oc13GcxPruRbSM.roa (raw, json)
Hash identifier: YeJHzy/9tbn5hMpXLH6O6XO6xL28nuOSs+m8iNhWA4M=
Subject key identifier: AC:E6:73:5E:A8:59:0E:87:57:F8:E7:35:DC:67:31:3E:BB:91:6D:23
Certificate issuer: /CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Certificate serial: 019421B25A352D7C0F7C2BE767D4B22EC131
Authority key identifier: 4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/rOZzXqhZDodX-Oc13GcxPruRbSM.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210150
IP address blocks: 152.89.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5a:35:2d:7c:0f:7c:2b:e7:67:d4:b2:2e:c1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4b17d032b9fb5f7e5bc9fd268dfb80edeed21d
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ace6735ea8590e8757f8e735dc67313ebb916d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:01:20:b9:e8:90:b3:16:ce:bd:6f:7c:83:74:
33:e3:02:e9:40:b3:03:8c:5c:7d:6a:68:f0:63:dd:
8d:5b:91:b0:23:69:f1:f3:1f:78:c2:ee:8f:2c:4b:
ad:2c:2a:00:73:d7:79:b8:8a:c3:49:7f:34:1d:cd:
8e:c0:93:26:6c:76:58:4a:01:12:d2:09:cc:26:8b:
e0:1c:e8:be:ff:43:54:09:ec:03:74:43:6e:aa:8f:
5a:50:30:40:a7:f7:28:d6:2d:76:17:f4:0c:e6:f1:
d7:5c:05:8a:cd:a2:74:54:09:a0:0c:e9:0f:73:79:
c5:27:1c:bb:d0:d0:c4:19:f3:79:08:cb:f9:89:20:
2a:8f:25:aa:57:dc:2e:e9:ce:11:62:da:f6:c1:64:
26:a6:f3:da:f8:0b:20:f9:bc:c4:52:de:c4:88:88:
ca:9c:c1:9e:42:8e:e2:6e:58:ff:ed:2a:4d:11:f5:
18:bc:01:41:e7:63:9d:e1:88:52:1b:31:ca:b1:f9:
ed:d9:e9:a5:2b:27:9d:86:84:b3:9c:40:2d:7f:fa:
c9:ba:a5:28:2b:d4:1d:9d:b1:1b:ca:1e:fc:6b:ae:
8a:86:dc:7d:da:3a:c8:c8:9d:2d:0c:e0:2e:0f:dd:
a0:ca:db:41:69:63:b9:ce:c2:d8:12:d4:9c:80:85:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E6:73:5E:A8:59:0E:87:57:F8:E7:35:DC:67:31:3E:BB:91:6D:23
X509v3 Authority Key Identifier:
keyid:4A:4B:17:D0:32:B9:FB:5F:7E:5B:C9:FD:26:8D:FB:80:ED:EE:D2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SksX0DK5-19-W8n9Jo37gO3u0h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/rOZzXqhZDodX-Oc13GcxPruRbSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/75785f-0e82-4d46-8456-759ac50414de/1/SksX0DK5-19-W8n9Jo37gO3u0h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.184.0/22
Signature Algorithm: sha256WithRSAEncryption
95:c7:a9:a9:fc:6b:7e:fa:01:6d:d4:f9:5d:f1:39:5c:e2:00:
1f:37:47:4e:de:f6:1d:95:dd:5f:77:2c:ea:a5:59:ca:03:63:
e2:f0:12:45:a9:18:87:ed:60:37:8e:ef:78:f7:5c:40:6a:01:
61:e2:8e:73:c5:47:f4:40:34:4d:ab:8b:99:0d:49:d8:c8:3f:
1b:47:bf:5a:18:f1:f4:ba:d8:00:37:76:57:bf:87:c5:6c:d3:
d2:6c:d9:c6:c3:95:b8:3f:4e:54:b7:e4:82:3a:21:2a:cb:53:
71:77:f6:ba:46:00:81:4a:22:7e:45:02:81:e2:45:20:1d:54:
08:81:4e:99:40:71:fd:ea:0e:ec:cc:21:c0:f2:cf:14:db:75:
f3:f0:f6:71:70:a1:95:ee:f9:36:4a:6d:76:40:da:28:76:35:
db:c9:2c:e9:fc:e8:0e:4c:a3:e3:a1:2d:8f:55:6e:18:bf:7d:
d2:97:9d:46:1d:6e:6e:23:6a:67:20:da:60:13:68:4b:85:58:
41:a3:eb:4c:4f:5f:41:31:02:0b:a0:62:73:e4:fd:4c:00:29:
63:8c:1b:04:e7:c1:3f:fb:1c:a6:f5:27:79:3d:6b:17:aa:07:
f4:98:5e:ef:64:9d:9b:06:80:ec:3b:e6:dd:5c:c0:b9:8a:e7:
23:fe:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:20:27 2025 by rpki-client