Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/OdWvB1tzlHuezmOiK21E-034390.roa
File: OdWvB1tzlHuezmOiK21E-034390.roa (raw, json)
Hash identifier: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=
Subject key identifier: 39:D5:AF:07:5B:73:94:7B:9E:CE:63:A2:2B:6D:44:FB:4D:F8:DF:DD
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 01941F8C1725D3E3F49A90E1800F9754A216
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/OdWvB1tzlHuezmOiK21E-034390.roa
Signing time: Wed 01 Jan 2025 01:47:42 +0000
ROA not before: Wed 01 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51910
IP address blocks: 46.17.72.0/21 maxlen: 22
46.17.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:17:25:d3:e3:f4:9a:90:e1:80:0f:97:54:a2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39d5af075b73947b9ece63a22b6d44fb4df8dfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:76:45:b8:47:31:e6:52:f8:f4:66:e1:39:
aa:cf:3d:78:63:bc:a0:85:17:17:1d:ed:f0:1b:07:
5a:43:b0:4c:94:b1:63:98:2c:42:2f:b0:14:8c:b0:
05:68:18:a0:94:8e:8a:e8:51:77:a6:b3:b6:3e:76:
f7:61:02:d2:60:ab:84:83:f3:2e:6d:23:b6:a8:50:
d8:93:9a:c6:9a:d3:b8:d1:18:52:e4:f5:12:6f:76:
d1:cd:3d:c9:23:b7:5d:70:01:a6:4e:f8:da:65:40:
7b:1e:c8:a8:ba:af:08:54:37:0b:bc:fb:06:4e:e2:
c8:42:69:e8:fb:d0:52:96:c2:16:bf:c8:19:d5:a5:
1e:ff:8b:73:49:65:07:a1:69:0b:ee:cb:5b:60:8e:
f4:5f:cc:6e:8b:a7:49:37:ef:cf:67:20:c7:fc:3c:
35:eb:d3:33:2b:d8:64:ad:05:d1:19:b7:3b:87:89:
80:6d:a3:ea:4f:44:79:85:1e:b3:8e:ca:5a:c2:bb:
4e:57:7d:f9:d9:8b:83:b3:92:7c:9f:95:20:e1:9e:
34:4a:70:f8:cb:aa:14:ff:8d:69:56:20:21:11:a3:
50:14:70:99:ed:c9:2a:a5:61:a2:3c:69:47:07:93:
9a:d8:8b:21:b0:42:c3:94:36:54:90:fb:78:92:54:
df:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D5:AF:07:5B:73:94:7B:9E:CE:63:A2:2B:6D:44:FB:4D:F8:DF:DD
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/OdWvB1tzlHuezmOiK21E-034390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:84:b1:a0:ad:03:92:9d:60:1f:1d:f9:de:86:0e:c6:cc:99:
ed:19:be:51:12:dc:62:d5:72:db:18:f5:12:f9:f0:4b:99:11:
a1:3a:ca:40:78:fd:b0:0c:c9:2a:34:ba:98:6c:24:3e:23:5a:
a6:1c:3c:f9:bc:6c:43:0e:5e:c2:70:44:31:a1:5c:4f:b4:40:
3e:40:9e:ae:1f:65:64:b8:b5:81:38:ce:5c:8c:53:cb:65:da:
ee:cd:5a:ce:e4:d5:c5:1a:6b:aa:93:a4:24:bc:fc:9a:b4:5e:
60:05:6c:76:1e:ff:a3:b5:21:28:79:46:d9:df:87:49:5b:26:
6e:23:7c:c1:2a:4a:b2:40:15:3c:fd:8d:f4:0e:8f:7d:ea:0a:
75:14:d7:8f:5f:b9:ca:ea:48:2c:83:fe:85:62:db:30:8e:98:
e5:ac:b3:89:33:1a:ba:3d:e4:e1:46:05:50:fb:2a:54:bf:cf:
cc:c8:67:d9:a3:53:18:92:ac:a6:79:c5:ed:87:da:8d:fe:f2:
f6:a1:29:19:67:08:28:54:3d:b8:cf:41:a4:83:83:d6:ce:f4:
59:1f:ab:f5:70:a9:46:42:10:f0:99:59:dc:cc:7d:85:ed:fa:
c7:16:a7:78:2d:5c:2e:84:4e:b6:58:50:da:6e:a3:84:8d:e6:
5f:0a:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:51:14 2025 by rpki-client