Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa
File: cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa (raw, json)
Hash identifier: GdluFLbgNrS7xoyapuqIK4cx1yZ3FPC1FpSx8lT9u+Y=
Subject key identifier: 70:E7:98:AD:24:2E:F8:E6:DB:43:27:D8:41:E2:E3:72:E6:1A:2D:0D
Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41
Certificate serial: 0194266C4922F66C3E07D90AE5942A6F46B2
Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa
Signing time: Thu 02 Jan 2025 09:50:18 +0000
ROA not before: Thu 02 Jan 2025 09:50:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39122
IP address blocks: 185.173.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:49:22:f6:6c:3e:07:d9:0a:e5:94:2a:6f:46:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41
Validity
Not Before: Jan 2 09:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70e798ad242ef8e6db4327d841e2e372e61a2d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:2a:19:7b:12:36:20:d2:9b:a6:36:4a:ff:
97:9e:36:31:d2:f4:23:9d:8d:26:f5:12:79:3d:70:
f7:ae:4e:12:1e:61:69:c4:2a:20:15:8d:41:42:f2:
1b:0a:91:9a:09:68:1d:f8:38:7e:56:cb:25:20:e1:
fe:79:4d:50:07:2a:76:ed:de:24:8d:76:f2:f6:c7:
d1:38:1e:d8:2d:ea:14:89:7a:d2:25:d8:9b:e4:6c:
82:56:e9:63:32:11:ca:00:d2:79:c7:02:d5:3f:67:
67:2d:b1:a1:6d:6f:30:0a:b6:5e:47:67:e0:51:cd:
2c:28:07:62:ff:5c:b3:22:fa:9c:6f:df:ee:51:86:
5e:55:45:59:ce:d5:99:6c:79:ba:0c:20:83:f9:41:
94:c6:08:d0:5f:2b:20:8d:87:c6:84:0c:4c:e8:f5:
fc:28:81:18:52:27:90:ff:50:f0:87:25:e8:f3:16:
28:03:cf:63:c8:92:67:a2:67:70:e7:38:f8:45:b4:
74:10:3f:b4:c9:bf:4c:3f:cf:6d:6a:6d:18:0f:b5:
39:f1:ac:71:0b:40:cf:cf:15:cf:79:f5:b2:02:42:
b5:14:d2:9a:b3:f6:fe:c7:63:2b:d6:df:62:27:24:
53:2a:8f:ef:32:01:2b:ed:9e:a9:19:e9:83:5c:48:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E7:98:AD:24:2E:F8:E6:DB:43:27:D8:41:E2:E3:72:E6:1A:2D:0D
X509v3 Authority Key Identifier:
keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.167.0/24
Signature Algorithm: sha256WithRSAEncryption
36:88:97:3a:14:cc:e4:5c:df:4b:9c:73:09:3e:93:a8:61:cd:
0c:d1:3e:4c:df:72:0f:53:3d:3d:67:54:a4:67:35:ae:55:3f:
f8:c2:df:63:f5:a8:bd:4c:78:c3:ab:b5:67:af:68:2e:35:77:
08:13:b7:bc:70:cd:15:d6:d2:72:08:d1:f0:93:e1:60:c1:e3:
22:91:87:45:af:07:93:3e:db:1f:96:8e:42:79:b3:d0:0b:42:
e6:d7:01:f1:c4:0b:61:c6:51:24:b7:56:c3:02:e3:80:74:f1:
ac:c0:15:ed:06:11:70:14:89:d7:a8:52:25:87:27:2b:0d:30:
0a:3b:5d:8c:93:99:89:d2:2e:a8:90:ea:e8:b0:11:a8:cd:85:
8f:41:16:66:26:d7:b7:ef:af:56:95:6f:d1:59:2b:ec:75:9c:
c5:0a:15:13:db:56:41:6f:88:8d:31:64:d5:42:aa:c6:74:74:
a7:2b:54:21:82:1e:56:79:fa:c3:ba:7c:49:89:71:b0:95:14:
83:91:30:d9:fd:6e:6a:b2:93:0f:fc:7f:28:b8:6f:3e:18:92:
a7:2e:68:4e:fc:d4:12:78:bb:ab:53:fc:46:a2:57:8c:7d:4f:
b2:0b:fd:97:ac:94:fd:ef:d7:e4:10:fb:65:ff:29:60:d0:06:
b0:61:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:05:16 2025 by rpki-client