Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/OcYqxTzrKk51o7UzflMDq0IEkmU.roa
File: OcYqxTzrKk51o7UzflMDq0IEkmU.roa (raw, json)
Hash identifier: r3dK9LV9mG8s5RFEYjKSnWAnYTPlW4DqfejV7eJjGtw=
Subject key identifier: 39:C6:2A:C5:3C:EB:2A:4E:75:A3:B5:33:7E:53:03:AB:42:04:92:65
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 019420D62B5CDA0C54BEB823E338FC643C7E
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/OcYqxTzrKk51o7UzflMDq0IEkmU.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 194.4.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2b:5c:da:0c:54:be:b8:23:e3:38:fc:64:3c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c62ac53ceb2a4e75a3b5337e5303ab42049265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:eb:d0:28:a2:db:b7:53:f7:41:8a:72:36:
6e:af:2e:00:55:28:c2:82:9e:33:1a:0f:60:a4:44:
77:20:0a:f1:4f:24:ef:ec:ca:4c:91:b3:7f:04:79:
3c:d1:eb:2d:86:f7:99:6b:e1:f8:af:47:84:01:70:
06:7a:95:7f:80:9c:2c:b8:4d:f3:3e:f1:85:17:82:
64:9c:66:1f:1a:c3:d1:cb:ca:ad:3d:a0:67:fe:83:
06:34:9c:5a:20:d7:cf:9d:c2:a0:60:6a:98:37:cc:
92:03:ab:a9:7b:9d:40:e6:d4:c3:19:34:45:c7:72:
a0:3e:46:3d:d5:ba:f4:bf:18:98:b6:4c:65:ec:72:
41:00:d2:45:04:b4:6e:ff:86:f8:07:99:64:5c:bc:
a5:bc:62:71:0b:b6:8d:62:6e:33:0b:1a:d9:c3:f1:
83:d9:bd:16:c7:e8:a9:87:18:e5:be:7b:01:bf:df:
4c:7f:54:97:8b:fe:23:2f:9d:f3:23:ce:7d:fb:46:
24:26:09:67:95:a4:6c:22:26:e5:b2:fd:72:b9:d8:
8b:91:4d:12:88:58:6b:1c:f8:14:e9:8a:26:59:77:
05:86:b5:f8:b8:e3:25:aa:d0:b3:45:04:02:b2:c4:
cc:8c:59:f0:dc:d0:4c:96:b8:e8:b4:9e:21:3a:d3:
35:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:2A:C5:3C:EB:2A:4E:75:A3:B5:33:7E:53:03:AB:42:04:92:65
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/OcYqxTzrKk51o7UzflMDq0IEkmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.54.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e7:e2:e6:85:d9:39:b9:62:df:81:84:29:9b:e1:8d:5c:e3:
ab:15:3a:44:9a:55:9f:23:a9:61:84:41:ed:47:7d:e0:d7:95:
cf:33:95:e1:2b:a5:97:a3:d6:9f:71:16:89:2d:b5:5d:52:88:
e2:be:9d:cc:c3:d2:ec:f7:74:4d:95:5c:71:84:a9:14:92:66:
1d:e5:50:51:c1:24:11:0e:8b:a6:7d:fb:06:ec:24:02:54:b4:
ce:7c:f0:00:90:f6:50:9d:4d:af:25:b5:c9:66:43:23:74:b2:
82:a6:66:ba:5c:fd:69:2b:94:04:04:1f:f7:0b:23:68:d9:40:
c5:31:0a:48:e2:6c:68:35:20:48:89:ba:f4:7b:3e:d2:c3:e8:
ca:89:ce:16:82:29:ae:ce:69:7d:d6:f6:95:e8:3d:3e:b0:99:
97:8c:ad:7c:d0:34:f5:db:63:ea:a8:96:0e:58:e8:17:83:21:
82:f4:42:d6:44:61:94:15:16:05:a9:ca:32:95:a8:b3:93:3f:
95:50:56:c9:47:8e:15:2d:50:f8:db:6f:1d:5c:95:d1:87:a8:
2e:6d:17:13:a9:d8:70:82:35:7c:7b:ef:ed:0b:d7:41:12:83:
1e:c8:d4:ec:18:aa:aa:38:a5:36:82:07:66:6f:73:aa:82:16:
c5:80:11:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:49:02 2025 by rpki-client