Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/0ufOZEMITlMuQPOWjAAk2LvJghs.roa
File: 0ufOZEMITlMuQPOWjAAk2LvJghs.roa (raw, json)
Hash identifier: xP12jKE1V4RO3oQ5ezlGvDhxG9HEAukHlNGj5WwZcps=
Subject key identifier: D2:E7:CE:64:43:08:4E:53:2E:40:F3:96:8C:00:24:D8:BB:C9:82:1B
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5AF0FC2A4D23BF82EC253875D96C3
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/0ufOZEMITlMuQPOWjAAk2LvJghs.roa
Signing time: Wed 01 Jan 2025 07:47:42 +0000
ROA not before: Wed 01 Jan 2025 07:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38926
IP address blocks: 212.234.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:af:0f:c2:a4:d2:3b:f8:2e:c2:53:87:5d:96:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2e7ce6443084e532e40f3968c0024d8bbc9821b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:87:82:f1:a3:ad:e5:1a:53:44:5a:ff:d8:e3:
65:f8:d0:12:0b:57:4b:61:ba:27:22:f3:2e:ea:a7:
78:68:16:cd:53:33:d6:05:91:36:ef:26:27:f1:39:
03:0a:37:ae:97:7a:2e:20:ba:fd:18:c3:dd:36:5c:
44:49:44:ac:2f:a8:f7:37:26:ac:6b:68:34:a5:66:
b2:ce:b0:94:ac:42:8d:ee:52:6a:69:60:2d:36:20:
a2:58:d1:f5:47:f5:6d:f8:3d:0d:e5:cd:ac:f0:24:
9a:ae:56:5c:74:7d:f2:94:1b:3b:13:66:1b:4e:59:
70:95:a6:16:47:5c:c9:35:ac:1f:41:e2:de:af:52:
b6:30:ab:a5:55:a6:5a:e1:d2:22:1a:74:1d:4b:ed:
c1:78:29:c4:0e:a1:dc:da:54:6f:f3:d0:a0:92:46:
16:f6:68:23:ed:d1:ab:87:2d:de:47:08:46:7b:ce:
61:b4:24:d2:a5:38:5d:22:d6:a3:e6:ca:dd:f5:0c:
8a:0c:ec:4a:03:f1:e0:00:47:25:5c:f9:67:df:be:
e3:7e:45:02:c8:a1:a8:6a:8c:37:eb:9a:69:7f:bd:
54:40:fa:c7:52:b8:d2:d3:01:2e:34:c2:96:e2:7f:
d6:07:ca:6b:31:f2:2e:09:7d:21:77:2e:21:01:26:
03:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:CE:64:43:08:4E:53:2E:40:F3:96:8C:00:24:D8:BB:C9:82:1B
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/0ufOZEMITlMuQPOWjAAk2LvJghs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.234.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:02:4c:79:c2:d2:52:32:a1:ec:20:dc:19:54:4d:00:82:27:
1e:95:e3:48:07:96:4f:52:db:39:a2:7c:c1:08:b4:f9:52:71:
7b:df:7c:dd:13:55:d8:ad:c1:3c:12:9c:a2:c6:4b:57:95:e5:
e3:ac:21:3b:f8:8c:f2:01:63:2d:35:f2:b6:60:6b:06:8b:c1:
ef:28:27:8c:37:e9:81:80:4c:dd:b4:86:1f:53:fe:2c:70:10:
1d:d5:14:47:25:24:e3:54:e5:56:a7:2e:86:72:c7:85:9b:11:
de:0d:03:c7:51:76:7a:ab:47:38:eb:52:fb:db:e5:d0:23:58:
b4:48:f3:46:02:f2:8e:cd:e4:63:bc:bd:8a:18:52:b9:bc:66:
85:11:d1:42:a4:7a:a9:e0:ce:36:1d:a0:57:66:b5:1d:56:34:
21:94:0f:aa:e9:f1:5b:65:79:52:b6:10:27:38:8e:7f:8b:cf:
17:5a:99:bf:09:a9:50:0c:5d:4f:8b:db:d0:16:dc:b6:a5:5a:
9a:3c:3a:db:cf:37:c8:f2:04:a1:29:da:d4:db:ca:f4:c1:a3:
8c:9f:1e:bd:33:bf:c2:62:10:1a:a8:90:5f:53:40:42:c7:e5:
2a:3a:35:3a:e8:54:12:72:d5:84:3d:c9:f0:03:9f:c7:3b:ad:
8b:de:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:33:39 2025 by rpki-client