Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/OE686EGR1IVKz-bx67_ZsH11lHQ.roa
File: OE686EGR1IVKz-bx67_ZsH11lHQ.roa (raw, json)
Hash identifier: S5Z4RalwztbreTYazKn4Yw+ySxhuT6+PltCXQ/y03p0=
Subject key identifier: 38:4E:BC:E8:41:91:D4:85:4A:CF:E6:F1:EB:BF:D9:B0:7D:75:94:74
Certificate issuer: /CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Certificate serial: 019422FB5148B2907EB9EF369035BE93AD43
Authority key identifier: 96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/OE686EGR1IVKz-bx67_ZsH11lHQ.roa
Signing time: Wed 01 Jan 2025 17:48:03 +0000
ROA not before: Wed 01 Jan 2025 17:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44909
IP address blocks: 195.66.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:51:48:b2:90:7e:b9:ef:36:90:35:be:93:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=966015578c948f31bf74a1e1fffd7fa3e3460206
Validity
Not Before: Jan 1 17:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=384ebce84191d4854acfe6f1ebbfd9b07d759474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:07:30:60:55:32:63:4b:05:9c:95:94:e7:
f2:cf:d1:51:ef:f8:36:a0:14:ce:52:cd:35:f9:c2:
a9:ee:3f:85:e8:ee:a1:bf:5b:d5:1b:a0:55:a5:d1:
25:60:98:7a:3a:e0:5f:02:dd:61:ba:f3:9a:5d:f5:
cd:1c:f6:d0:b5:c5:7b:0f:a6:e8:b7:45:f0:55:2b:
d1:2a:f7:62:5e:5f:50:29:fc:a5:3d:42:cf:e4:81:
e6:39:04:12:8b:8f:48:df:31:90:dd:70:22:4f:ff:
e6:b0:0d:bd:18:ec:8b:3f:52:59:f6:ab:00:6d:82:
21:47:4a:c6:e4:e0:37:6f:0e:d2:b4:0e:1f:bf:92:
29:d1:0b:4d:13:58:95:2f:ba:04:85:03:74:70:ee:
9f:ff:2a:be:e5:5e:96:43:20:96:dc:e8:2e:82:88:
c6:71:5c:7f:e1:11:be:28:86:52:92:96:eb:af:27:
a4:72:6b:55:df:33:de:2d:72:02:e0:e8:4b:e6:ef:
b6:c0:f5:f2:93:c1:79:52:8d:0c:53:41:9f:37:f7:
5a:16:6a:ed:17:3e:97:b7:33:d3:86:11:a7:48:35:
b3:c3:36:fe:0b:17:cf:c7:a6:8a:00:99:f1:bd:b1:
06:aa:9f:33:02:e6:fa:5f:d7:e7:c9:c9:56:1c:53:
c5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:BC:E8:41:91:D4:85:4A:CF:E6:F1:EB:BF:D9:B0:7D:75:94:74
X509v3 Authority Key Identifier:
keyid:96:60:15:57:8C:94:8F:31:BF:74:A1:E1:FF:FD:7F:A3:E3:46:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lmAVV4yUjzG_dKHh__1_o-NGAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/OE686EGR1IVKz-bx67_ZsH11lHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b50110-02b0-4235-984f-2d80cb25579a/1/lmAVV4yUjzG_dKHh__1_o-NGAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.124.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ee:01:ac:af:a8:6c:cd:cc:bc:be:7e:9e:33:fc:a1:c1:0d:
fb:7a:1e:d5:a9:ec:77:2c:2f:e5:68:6e:7a:04:74:ca:60:b0:
f0:90:74:89:de:5f:14:24:8c:5b:e3:52:0a:c3:cb:ee:ad:3f:
e2:b3:b5:ec:b1:e1:cf:02:23:4a:4d:cc:aa:33:95:d3:83:6c:
d8:45:44:c3:82:e1:48:e4:a5:ca:50:c1:eb:fa:33:78:e3:d8:
8b:1d:4e:02:50:ea:d9:5f:6f:62:a9:b4:50:16:3e:0d:34:e5:
9d:4e:22:e7:ee:e3:c6:ff:26:7d:32:3a:14:64:97:b4:21:3b:
2a:f5:d2:93:53:c8:47:6f:b4:fe:9c:39:d6:3c:1f:50:94:bd:
59:d8:b1:d2:43:03:ea:4f:85:ad:3e:42:7a:db:ac:29:73:aa:
c8:b6:a2:ec:2f:bd:c3:29:6b:da:a9:ad:37:0f:bc:1b:dc:72:
ad:3c:27:b1:54:db:3d:fe:af:67:dd:8b:25:47:00:35:5a:1c:
b3:16:85:e5:3b:be:f7:ac:a0:bf:05:e9:c3:ce:e3:2d:a2:77:
b6:e1:7d:d0:fc:75:3c:02:25:ae:12:83:3d:bb:cc:70:a2:7c:
d8:bf:9d:42:29:4d:af:89:53:58:3f:08:d4:cb:80:bc:f8:ed:
0d:9b:dc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:45:07 2025 by rpki-client