Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/oWZ5erikppAl-Sc-K-eOUjwwtE8.roa
File: oWZ5erikppAl-Sc-K-eOUjwwtE8.roa (raw, json)
Hash identifier: kw3UCh/tEeEoOBjpTYe2gelMNUUTh0ddiM7f8k2NeMw=
Subject key identifier: A1:66:79:7A:B8:A4:A6:90:25:F9:27:3E:2B:E7:8E:52:3C:30:B4:4F
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 019420D5B623EAAD40128B8D4BA2FE0A8A17
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/oWZ5erikppAl-Sc-K-eOUjwwtE8.roa
Signing time: Wed 01 Jan 2025 07:47:44 +0000
ROA not before: Wed 01 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198855
IP address blocks: 90.83.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 06:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b6:23:ea:ad:40:12:8b:8d:4b:a2:fe:0a:8a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a166797ab8a4a69025f9273e2be78e523c30b44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bb:ab:8a:73:06:77:65:bf:85:e0:5f:b0:32:
18:0c:03:03:82:45:31:b5:08:a7:34:23:30:42:57:
52:ff:75:9f:59:5c:16:e0:e0:c9:1c:7f:fd:02:e4:
b4:64:0b:f3:30:aa:88:0c:e3:a5:b0:75:e7:cc:84:
44:64:e2:cd:04:4d:6b:af:aa:ae:44:1e:5b:82:eb:
19:b4:0d:6e:3b:97:07:8f:aa:c8:fc:b9:a2:24:a0:
0f:50:8c:6d:97:85:ad:ec:d1:50:cf:e1:7c:1e:30:
7e:da:78:f1:72:6f:75:43:e6:5b:c3:0e:86:10:0f:
f8:46:3d:fe:7a:ce:90:27:54:51:b5:70:50:b8:3b:
57:3f:63:61:35:0d:96:2f:d2:f1:cc:19:65:10:55:
fa:7e:de:1b:a7:73:24:38:c2:61:7d:7b:1a:3e:b8:
33:3f:22:0a:82:ad:b4:52:35:1c:73:dc:ea:71:b0:
92:43:c6:00:92:f7:40:16:41:cc:74:36:b8:af:24:
0a:cf:95:80:c4:d5:28:91:ad:5b:e6:d0:5d:3f:59:
f9:dd:fd:0b:d3:52:bf:3c:0d:81:92:f5:91:4f:3c:
4f:25:e9:32:f6:73:cc:e7:f2:ee:bd:8d:13:20:08:
8a:bd:2e:b1:d4:c7:d8:cd:bf:ff:34:13:59:12:b1:
b6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:66:79:7A:B8:A4:A6:90:25:F9:27:3E:2B:E7:8E:52:3C:30:B4:4F
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/oWZ5erikppAl-Sc-K-eOUjwwtE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.83.124.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ff:41:43:7a:5c:32:7d:00:31:86:f3:8b:78:f1:ff:1d:16:
6c:30:4f:da:be:9a:83:35:da:f5:63:06:64:99:09:8e:fe:95:
ac:30:d5:68:c0:f8:69:cc:0c:a4:09:60:2c:d0:c4:8a:a7:f3:
ea:82:a7:66:04:1d:1e:5d:db:01:fa:89:3f:3f:cf:fd:49:1d:
af:0b:47:e1:d6:54:74:61:5c:13:48:73:6a:51:9a:1b:85:dd:
b6:12:4a:35:f7:e8:44:99:a5:4f:79:f4:61:a3:a0:3e:9b:91:
d7:65:75:ee:bf:d2:c2:6b:ad:e7:23:a1:64:12:3e:c0:59:dc:
ed:06:12:9f:9d:f4:2c:54:b8:ad:96:65:c0:ed:9a:05:04:d7:
36:d3:b3:c8:21:78:00:67:c0:94:47:72:c1:f3:e4:4d:11:bc:
29:94:90:ac:df:68:bc:b2:ef:77:a1:9d:05:f2:e5:f4:37:f6:
3a:0a:e7:5f:f2:9f:16:e9:21:81:01:a2:61:50:f6:b3:85:54:
52:1e:d0:03:e1:e2:73:41:df:31:66:d1:a4:08:2d:de:f6:b4:
6b:97:8e:60:38:c4:52:fc:8b:8e:a2:6d:01:17:1e:bd:cf:39:
aa:25:e2:35:66:ae:71:39:08:8b:5c:99:01:87:79:71:dd:d6:
c4:9a:53:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:29:32 2025 by rpki-client