Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa
File: OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa (raw, json)
Hash identifier: zWfEvQNj+A4de5/9KNnrm0AaQsSkvDWrbOwMvnTm49M=
Subject key identifier: 3B:12:7E:90:93:73:66:8F:16:BC:4C:A8:7B:63:43:1B:40:24:22:EC
Certificate issuer: /CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Certificate serial: 019427B3891D1A154672C221D5F9971171BB
Authority key identifier: CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa
Signing time: Thu 02 Jan 2025 15:47:45 +0000
ROA not before: Thu 02 Jan 2025 15:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52165
IP address blocks: 185.185.184.0/24 maxlen: 24
185.185.185.0/24 maxlen: 24
185.185.186.0/24 maxlen: 24
185.185.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:89:1d:1a:15:46:72:c2:21:d5:f9:97:11:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9f02dbd972595a31cabeab0cd95d706a8cdd31
Validity
Not Before: Jan 2 15:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b127e909373668f16bc4ca87b63431b402422ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:01:e3:ca:bf:13:6f:dd:f9:d1:05:28:15:
ea:bf:5b:39:ce:9b:f1:14:86:bd:28:fc:27:21:fd:
50:e3:30:7a:b6:de:d6:4e:82:71:3b:0b:2d:85:e0:
94:1f:7b:81:0a:d9:41:5c:df:4b:de:97:95:37:35:
75:79:dd:92:6e:80:59:5b:ae:c4:90:60:1d:37:51:
6e:6c:6f:6c:ee:61:05:02:83:2c:2b:22:12:7a:64:
fb:a4:fe:a5:26:4b:7c:5a:d6:7b:99:dc:4a:65:35:
6b:82:3d:6d:ef:7e:d9:04:f8:e3:e4:f8:84:61:f4:
4b:13:3e:24:bc:fa:e2:b2:2a:ff:5c:50:85:b0:d1:
12:21:9f:0a:10:b1:fc:82:eb:fe:0f:8d:ae:4d:af:
00:8e:c6:6b:30:7b:38:55:fc:68:3a:42:3f:00:be:
6c:cd:11:1d:0f:02:0a:b1:98:ec:26:74:ed:b0:e6:
8e:3f:02:43:2d:e0:da:af:a5:9e:4b:fe:4a:35:96:
b6:df:e0:11:05:25:78:72:35:b9:2e:99:2c:ef:06:
c1:6f:13:fa:ea:77:9a:3c:c2:08:65:a5:fe:e7:4b:
59:60:36:2b:00:4e:74:c0:2e:39:18:82:aa:1f:64:
37:ff:e5:17:04:8a:5d:75:8b:54:ef:2c:39:e3:91:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:7E:90:93:73:66:8F:16:BC:4C:A8:7B:63:43:1B:40:24:22:EC
X509v3 Authority Key Identifier:
keyid:CF:9F:02:DB:D9:72:59:5A:31:CA:BE:AB:0C:D9:5D:70:6A:8C:DD:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z58C29lyWVoxyr6rDNldcGqM3TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/OxJ-kJNzZo8WvEyoe2NDG0AkIuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4e7cf9-a9df-4ba3-af77-e2707e197541/1/z58C29lyWVoxyr6rDNldcGqM3TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.184.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:d4:4a:ee:77:4f:d9:1f:7c:92:57:99:cb:da:0d:e7:dc:a1:
ea:89:52:97:8e:10:0c:3e:89:2d:3c:50:3b:a7:4b:e9:96:e1:
52:48:11:ed:3b:86:1b:d4:6e:3a:07:f1:00:e9:cd:db:cf:bf:
14:7d:bb:88:f0:4d:c3:85:d7:cb:98:88:db:d8:91:6b:d5:02:
83:ae:e9:94:0b:81:80:e7:87:81:e1:8b:f1:83:44:11:7b:f1:
7c:14:24:b2:8d:5e:a9:16:64:a7:fa:82:28:a3:72:6e:7d:4b:
ab:b2:fd:81:d6:63:b0:16:91:7b:71:5d:5c:26:d1:da:d3:76:
66:b2:2e:93:65:97:e5:ad:13:38:aa:44:b2:7a:f7:88:60:ae:
ad:41:e1:55:c7:f8:b7:35:65:7f:bf:76:e6:6d:e5:4d:6b:29:
b8:7f:6a:4f:ff:fd:96:57:c1:7d:cf:10:93:e0:ab:52:c2:f4:
98:b4:fa:f0:1c:ec:a4:ef:dd:ba:9c:39:25:52:a5:cb:e6:cf:
7d:cf:cb:5a:67:44:02:f0:c4:ad:b2:36:d6:5c:37:f6:7b:d4:
fa:ee:c9:ab:92:18:e5:2a:50:d2:5b:c5:59:f4:c3:fd:5a:d5:
5f:40:98:30:b3:4d:2e:67:d2:c3:c9:d3:fc:43:bb:ea:b7:fc:
c8:a9:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:07:08 2025 by rpki-client