Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/oZpGbVUpKUH0VrpNLhpu97i1M_M.roa
File: oZpGbVUpKUH0VrpNLhpu97i1M_M.roa (raw, json)
Hash identifier: oW6hkmxowE3qg/Jyo6V/wTo6z6868bLjjZkfHvalrnw=
Subject key identifier: A1:9A:46:6D:55:29:29:41:F4:56:BA:4D:2E:1A:6E:F7:B8:B5:33:F3
Certificate issuer: /CN=64c0bc594af811753dfc116af459b1b874471489
Certificate serial: 0194886065EB9878B054315BDEF26621C684
Authority key identifier: 64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/oZpGbVUpKUH0VrpNLhpu97i1M_M.roa
Signing time: Tue 21 Jan 2025 10:20:06 +0000
ROA not before: Tue 21 Jan 2025 10:20:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 185.30.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:88:60:65:eb:98:78:b0:54:31:5b:de:f2:66:21:c6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64c0bc594af811753dfc116af459b1b874471489
Validity
Not Before: Jan 21 10:20:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a19a466d55292941f456ba4d2e1a6ef7b8b533f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:67:1e:b6:e0:d1:78:fd:17:42:cb:75:bb:2b:
64:f0:d3:5a:c2:46:27:6d:0d:8a:9e:30:a8:ad:c7:
87:b4:3d:57:ba:cc:f1:bd:f3:03:9e:98:4c:5c:7c:
20:5d:f9:78:56:c3:49:a0:d5:70:20:d3:df:70:86:
c7:79:c2:1c:ce:23:73:28:6b:95:68:80:b2:41:e0:
a9:2c:56:47:dd:21:d9:49:4d:35:93:47:bd:ad:4d:
10:47:d1:df:3f:49:65:11:69:24:f7:15:4d:20:5a:
93:a0:9d:58:bd:7b:10:55:01:16:e0:0d:38:11:dc:
9a:69:0e:30:c1:4d:3c:d5:f2:31:eb:ca:2f:59:6b:
0a:ad:d6:0b:9c:bb:be:f9:da:96:4a:59:8a:66:25:
6c:48:03:76:c2:57:ef:35:bc:d6:b4:c8:4a:74:af:
cf:b1:73:2a:fe:d2:27:da:f1:7e:90:82:0b:70:56:
40:51:d5:c6:ae:31:71:d6:59:8b:19:0e:6b:5c:32:
52:e1:0c:6f:ab:a7:40:df:f6:10:0c:80:0b:b3:a5:
43:18:0f:a4:49:6b:d2:53:49:72:82:9f:05:23:de:
b3:8a:30:dc:49:7a:f7:e4:29:7f:78:1d:c1:60:c1:
d4:14:2a:ca:a4:6a:a6:88:1a:8e:13:69:eb:0d:a8:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:46:6D:55:29:29:41:F4:56:BA:4D:2E:1A:6E:F7:B8:B5:33:F3
X509v3 Authority Key Identifier:
keyid:64:C0:BC:59:4A:F8:11:75:3D:FC:11:6A:F4:59:B1:B8:74:47:14:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/oZpGbVUpKUH0VrpNLhpu97i1M_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b48bfd-797d-47a9-8a62-44313b43e594/1/ZMC8WUr4EXU9_BFq9FmxuHRHFIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.214.0/23
Signature Algorithm: sha256WithRSAEncryption
62:7b:a4:50:eb:32:b7:11:22:f4:70:a4:eb:46:41:5e:24:72:
60:c0:a0:fe:64:0e:7a:cb:3a:eb:3d:48:fc:a9:d3:19:4f:37:
93:eb:0a:f9:90:43:98:50:4d:f3:93:b9:e0:45:49:3d:9f:f5:
20:4d:0c:61:1c:9e:49:de:4e:7b:90:df:d3:4b:30:62:12:31:
90:a6:61:4b:2e:25:03:6e:a0:d9:c7:0c:96:63:5f:28:d0:ef:
7c:7d:9e:14:60:79:59:fe:cc:ed:c4:c2:3f:4d:17:90:b6:6b:
e7:b7:85:ce:a2:bc:df:df:5f:ad:9f:c7:95:5f:54:3e:bc:1b:
a7:64:20:22:33:10:ad:68:bf:0b:70:d4:56:ab:2f:f8:16:5a:
54:c7:81:9c:ce:0b:c9:78:46:9f:ac:ef:70:d4:ab:fe:6d:a2:
9d:e7:93:2c:aa:67:0f:e8:a7:1d:8e:9b:31:71:34:98:8c:1c:
82:f8:5c:eb:b4:a0:13:d4:cc:02:a3:17:b6:df:55:97:b0:e2:
73:c5:65:22:91:5a:2a:4b:f2:22:78:9c:22:a1:58:19:a3:9d:
bd:58:58:60:09:15:a9:f9:5a:fc:2f:05:9f:1c:b6:e0:e6:98:
d9:9f:26:b2:01:c6:47:b5:42:3b:d2:8a:e9:09:e9:86:44:47:
b2:8e:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:07 2025 by rpki-client