Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/s0dnfCPWYTjuzu_OVVM_6-Gymdw.roa
File: s0dnfCPWYTjuzu_OVVM_6-Gymdw.roa (raw, json)
Hash identifier: YoVftLI/79Af4m/npvkhtiAc33rFuOcAe6GhNoCDVVk=
Subject key identifier: B3:47:67:7C:23:D6:61:38:EE:CE:EF:CE:55:53:3F:EB:E1:B2:99:DC
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427483EDF401F4EE0DBE2F45C8FB3CE32
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/s0dnfCPWYTjuzu_OVVM_6-Gymdw.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52451
IP address blocks: 141.136.58.0/24 maxlen: 24
141.136.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3e:df:40:1f:4e:e0:db:e2:f4:5c:8f:b3:ce:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b347677c23d66138eeceefce55533febe1b299dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:4f:12:b4:de:b9:b3:60:41:f8:47:d6:c2:
d8:d1:64:c6:0d:f5:f4:58:1e:74:22:89:5c:2d:5a:
a5:fb:db:8f:21:26:7e:38:22:a6:92:9b:e0:ba:39:
aa:48:d7:16:e8:86:df:bf:fd:3c:05:ae:ea:b5:ca:
a5:64:36:31:20:a8:7c:63:a9:4a:3c:6d:d0:9a:86:
eb:40:e4:73:9f:b4:98:6d:44:90:5c:b4:d9:2d:83:
e6:a8:06:a8:cb:7e:0b:c7:4a:7f:8d:70:3a:21:69:
9a:38:8e:6f:e9:a3:b5:46:86:17:fa:75:f1:5e:12:
8d:cd:89:98:c6:cf:d1:de:97:b5:88:58:96:6c:0b:
f3:22:69:9b:77:97:31:83:51:a1:f2:d0:42:cd:b3:
18:cd:77:ae:0a:6d:37:c7:4c:43:42:80:c0:65:40:
bd:7c:0e:e7:e9:b3:a2:df:04:f5:06:c1:c1:aa:eb:
ae:14:83:fe:e3:c7:d6:99:29:6e:ee:88:fd:ad:51:
c0:79:e7:ed:1a:8b:79:69:c0:1e:12:e1:50:20:eb:
7c:93:6c:0e:b1:7b:95:f7:d8:3a:7a:45:bf:92:0e:
48:f3:1c:91:38:13:41:d7:ef:2e:0a:85:af:f1:24:
89:ba:f1:f4:c3:44:ae:2b:1e:56:37:ca:37:96:38:
6f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:47:67:7C:23:D6:61:38:EE:CE:EF:CE:55:53:3F:EB:E1:B2:99:DC
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/s0dnfCPWYTjuzu_OVVM_6-Gymdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.58.0/24
141.136.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b3:0f:1d:bb:8e:39:25:b5:40:1f:02:91:d6:1e:3e:53:69:
a9:9d:94:e7:64:7a:82:63:d8:69:ce:1c:8d:76:aa:69:27:52:
30:ca:1b:28:66:fc:5c:08:b7:ac:d9:36:10:13:32:e5:c6:e0:
6a:88:27:08:63:1e:5c:05:ee:53:01:99:1b:29:e2:9d:f5:04:
d5:07:08:7b:b5:45:38:4a:dc:86:1b:f9:ed:3b:18:91:d9:7f:
68:1c:0d:6b:f3:2e:40:fc:14:b1:02:05:48:21:04:0f:cc:c6:
c8:72:23:5f:30:57:29:1d:12:3b:ee:01:ff:99:69:3c:a7:f9:
a4:40:30:23:16:f3:55:b5:a7:24:0a:3d:ab:07:b6:6a:f7:62:
3e:7d:0f:53:6d:25:12:f9:b5:cf:3a:e4:ac:44:2c:b8:45:fc:
cd:cb:f7:c5:ea:48:b5:1b:3f:4e:a5:d4:04:3b:48:aa:3e:76:
0e:94:28:bc:39:25:9f:9c:a0:08:6b:47:32:53:e3:19:a7:1a:
19:9c:0c:53:5c:fe:01:ee:c8:26:37:cd:e1:96:6f:d8:a9:84:
01:83:db:85:d5:41:f2:01:ff:82:74:3f:d6:87:ea:41:3b:21:
ad:37:48:75:de:ea:2f:4d:43:90:bf:b3:84:02:5a:ad:b9:4c:
4c:e5:c9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:58 2025 by rpki-client