Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OBZvDkkuox53fs2xzREvl3uDEiI.roa
File: OBZvDkkuox53fs2xzREvl3uDEiI.roa (raw, json)
Hash identifier: TTY3rDgyjpybC3KLaAEyisnxwMlPsr4Y8GC3cmG8rCc=
Subject key identifier: 38:16:6F:0E:49:2E:A3:1E:77:7E:CD:B1:CD:11:2F:97:7B:83:12:22
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01973F784CD13BFCDC5751AA6770EABEF829
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OBZvDkkuox53fs2xzREvl3uDEiI.roa
Signing time: Thu 05 Jun 2025 09:42:18 +0000
ROA not before: Thu 05 Jun 2025 09:42:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 94.177.145.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:78:4c:d1:3b:fc:dc:57:51:aa:67:70:ea:be:f8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 5 09:42:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38166f0e492ea31e777ecdb1cd112f977b831222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:a1:12:0f:38:7a:98:d2:d7:44:a1:20:c7:
59:a2:78:6a:67:7e:fe:bc:d7:5e:d5:81:e8:e3:af:
e6:a4:5b:67:d1:27:08:c4:31:fd:9d:76:82:a1:fe:
20:02:cd:56:92:d1:e2:dc:1d:a5:dd:f0:92:4c:fb:
2e:b3:21:dc:61:33:3d:12:1a:28:8c:03:d4:83:f4:
5a:95:a2:ae:5e:25:00:95:c3:a9:38:05:87:98:48:
ab:b9:0d:ea:0f:82:5b:9b:12:6e:e3:ea:22:49:c4:
0d:d4:77:cb:ba:0e:b4:bd:37:5e:09:52:7f:5e:84:
81:88:bf:8f:c5:09:be:f3:44:0c:c9:43:a0:8b:07:
dd:4f:21:09:bd:b2:8b:ae:72:e9:af:bf:38:11:06:
5e:92:a6:15:15:19:0f:87:a0:0e:22:9c:52:90:9a:
00:c0:e3:e4:69:a4:b9:77:5d:11:42:3d:46:dc:05:
15:8f:0e:46:a2:a7:c3:d3:eb:97:49:fb:5a:d3:d6:
77:5d:33:b0:94:58:63:cc:a3:da:1b:8e:03:8c:60:
6c:dd:fd:5a:e4:82:0d:c0:25:64:e0:8c:f5:98:8d:
43:39:b7:db:34:17:b6:5a:82:ce:ea:e3:ad:3e:0a:
66:9b:fe:64:9a:15:99:b3:d4:8e:7b:60:5d:e5:44:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:16:6F:0E:49:2E:A3:1E:77:7E:CD:B1:CD:11:2F:97:7B:83:12:22
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/OBZvDkkuox53fs2xzREvl3uDEiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.145.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.225.0/24
194.85.249.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3a:07:23:32:aa:cb:3e:ab:fe:5d:58:31:2f:dd:b8:ab:1d:
09:5d:d7:1a:c8:42:99:ca:72:51:5b:41:5e:ec:b2:be:f8:0a:
37:5d:e7:36:bd:66:ae:78:d2:e4:b8:2d:be:5a:89:a5:fa:e6:
42:d2:9b:ce:a8:90:bf:64:1b:8f:7d:90:17:7a:d9:9b:c8:51:
8b:a8:44:53:74:c0:b2:f2:3c:50:59:08:93:47:77:29:4f:4c:
73:28:bf:43:c2:08:62:b6:67:dd:f3:56:c9:45:bc:03:b8:16:
42:c9:7d:1d:9e:2a:0d:cf:61:97:fa:23:d4:3d:8b:85:6c:b0:
cc:f4:10:4f:82:5f:c5:7b:ae:d3:7d:e9:aa:4c:1c:59:f3:44:
28:65:00:80:12:12:82:da:72:ec:38:bb:f8:8c:4d:3b:45:37:
82:16:4b:b9:ad:f0:41:3a:09:aa:81:05:35:81:28:d3:93:b6:
c2:22:e5:27:2a:1a:15:72:6b:83:ba:90:86:95:11:f0:92:59:
13:e5:0e:98:e0:c2:29:cf:cc:a8:d6:19:14:23:37:d7:f3:26:
0e:46:47:43:8c:3d:a9:60:6b:f9:46:2c:56:ed:85:0c:8a:70:
96:7c:90:80:5e:42:e6:38:6b:92:37:fa:67:61:ba:c7:73:52:
b3:c4:b5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:51:23 2025 by rpki-client