Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/OY3T_xG0jFJ_6yc5NmhmVJsNZOM.roa
File: OY3T_xG0jFJ_6yc5NmhmVJsNZOM.roa (raw, json)
Hash identifier: af8mlEBnTxkbr73XYFoiiYy6suBahBU1dHobCDHfy/U=
Subject key identifier: 39:8D:D3:FF:11:B4:8C:52:7F:EB:27:39:36:68:66:54:9B:0D:64:E3
Certificate issuer: /CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Certificate serial: 019420D658FC2DE41F697F1C241000027379
Authority key identifier: CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/OY3T_xG0jFJ_6yc5NmhmVJsNZOM.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43631
IP address blocks: 193.46.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:58:fc:2d:e4:1f:69:7f:1c:24:10:00:02:73:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=398dd3ff11b48c527feb2739366866549b0d64e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:37:c3:dd:db:72:23:43:db:ab:86:90:9f:
a6:b9:b1:78:4b:ab:51:c9:5a:8a:3c:c2:9a:a6:87:
86:7c:ff:e2:ed:c5:f6:7a:7f:6f:b1:f9:1e:15:57:
3b:4a:a4:50:cf:25:23:5c:a5:5a:23:26:77:aa:9e:
65:77:bb:6d:f1:3c:bc:61:b1:35:2c:ad:88:c8:65:
ae:61:d0:3d:06:10:1c:53:07:c4:45:c8:df:2a:04:
69:14:cf:54:3e:f4:ba:99:4f:c9:fb:6b:3b:2c:9f:
ef:d9:63:60:53:37:dd:fb:7c:b4:cc:ba:02:f2:2b:
28:e4:5a:58:51:68:30:22:b6:a0:6e:81:1b:26:06:
5f:61:86:66:cf:1a:c3:00:05:a2:98:8b:7b:f3:72:
e4:d1:7f:17:73:c0:bd:6e:6a:6c:02:9d:5e:06:b0:
e8:e2:c6:5b:a1:32:e9:57:fe:4c:b0:56:d3:26:13:
46:4c:b5:4c:33:5e:22:74:25:cb:fc:e0:6e:cf:47:
10:af:a2:72:4c:df:54:c3:50:21:88:f2:7f:6c:67:
e6:63:69:2a:11:5a:c0:51:32:ae:c7:06:c5:c6:46:
4a:c5:ac:9b:63:b2:2d:0c:16:ca:0d:99:b6:f1:fb:
9b:c5:00:09:e1:64:1f:4e:20:ad:b3:43:05:be:12:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:D3:FF:11:B4:8C:52:7F:EB:27:39:36:68:66:54:9B:0D:64:E3
X509v3 Authority Key Identifier:
keyid:CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/OY3T_xG0jFJ_6yc5NmhmVJsNZOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.91.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c1:39:88:64:80:06:3a:65:65:47:53:ae:a1:5d:d8:7d:28:
b9:02:d3:fd:4f:a0:61:80:18:bd:30:74:eb:ef:a7:0f:fc:fa:
65:27:97:f8:5d:64:b9:1d:d6:58:5b:8d:f5:36:67:ff:56:87:
9c:08:f9:4b:42:36:36:2b:e5:ad:b8:00:a0:5e:fe:66:4d:bd:
f1:0f:c8:6d:c1:1a:68:ce:ab:e0:1a:7a:6e:63:ec:15:fa:32:
f1:b3:29:c9:6c:0b:95:de:20:5c:9a:12:24:8d:d5:a9:4b:02:
43:f6:12:95:20:08:68:6a:3a:33:d1:dd:59:b3:7a:6f:e3:e2:
5a:1b:c6:c7:52:f9:c6:d0:a3:68:c2:36:03:f8:44:e7:ff:4e:
44:1d:c6:c3:88:84:d3:09:7d:a7:40:d6:56:8e:78:15:56:6e:
51:0a:96:79:3e:0e:b6:ad:d6:f3:c5:59:de:8d:12:8c:42:1c:
2e:ad:f8:b7:d1:58:0b:36:96:a8:0a:01:55:d1:e9:55:26:8b:
35:79:d1:06:06:d4:b1:dd:22:08:e4:33:df:36:93:dc:4c:85:
fe:04:9e:7d:4d:b6:04:6c:35:6d:3a:f1:f6:28:c8:51:2c:1d:
e2:a8:46:9d:43:dd:56:a8:ff:da:24:7e:dd:92:4f:f7:8f:ff:
a4:2c:69:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:41 2025 by rpki-client