Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/ozhROBFdVytrD3TpvGqAgnW-fDw.roa
File: ozhROBFdVytrD3TpvGqAgnW-fDw.roa (raw, json)
Hash identifier: 4VtjPfNgZjp68d8isA/cFQEHicpTsWLTQUKQfDvxm2Y=
Subject key identifier: A3:38:51:38:11:5D:57:2B:6B:0F:74:E9:BC:6A:80:82:75:BE:7C:3C
Certificate issuer: /CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Certificate serial: 01941FFA1195635B4E82D13BBB087759B440
Authority key identifier: CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/ozhROBFdVytrD3TpvGqAgnW-fDw.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 213.156.248.0/24 maxlen: 24
213.156.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:11:95:63:5b:4e:82:d1:3b:bb:08:77:59:b4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca34b13387fab1dcf8b67f16a0a437608600c4c2
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3385138115d572b6b0f74e9bc6a808275be7c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ac:06:cb:25:03:7f:db:6f:eb:79:16:5e:a0:
a8:86:0f:30:cf:c6:31:23:0d:d8:31:ac:7a:ed:05:
84:07:c1:8f:bb:5d:31:25:21:0b:45:af:30:e8:27:
86:c9:f6:47:08:2c:7f:07:e7:eb:6b:85:f4:1f:5f:
1b:91:d1:3c:d5:15:e1:d0:19:37:df:65:fa:5e:d1:
42:70:99:e2:fd:d2:c2:de:ca:ad:85:c5:10:c7:9e:
58:b5:b8:a0:cb:70:96:41:84:2a:e3:88:1c:91:22:
6f:d5:8b:80:66:63:a7:0f:83:16:2d:fb:e2:48:23:
54:2b:52:65:4f:9e:8f:c9:ee:e3:80:62:3e:81:91:
d6:0a:80:01:23:fa:77:35:d1:78:96:57:f2:84:56:
ed:10:4b:5f:a6:0c:b8:9f:84:09:ad:94:24:c2:c1:
2e:62:5f:a5:04:c0:cf:b8:f0:9a:14:90:19:81:af:
d6:65:6e:ab:4e:83:02:cd:8b:f2:a6:85:27:6d:25:
2a:6b:97:71:d1:bd:d3:4e:71:99:4d:d1:d3:4f:5b:
34:db:9e:90:69:70:8c:f3:45:b9:4b:27:25:68:e6:
51:44:85:db:95:70:4c:f7:85:a7:fd:f8:70:af:36:
f7:3c:76:52:37:82:89:b7:c3:31:e6:ab:46:55:03:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:38:51:38:11:5D:57:2B:6B:0F:74:E9:BC:6A:80:82:75:BE:7C:3C
X509v3 Authority Key Identifier:
keyid:CA:34:B1:33:87:FA:B1:DC:F8:B6:7F:16:A0:A4:37:60:86:00:C4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/ozhROBFdVytrD3TpvGqAgnW-fDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/117ca3-b603-4db8-9626-0405234ab3f1/1/yjSxM4f6sdz4tn8WoKQ3YIYAxMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.156.248.0/23
Signature Algorithm: sha256WithRSAEncryption
35:10:e7:3a:d9:9a:cb:f5:d8:4a:92:5b:47:6a:c5:d4:48:eb:
af:5d:6e:7b:b3:8e:44:01:4d:c9:b0:26:05:1d:db:4b:1a:84:
e3:53:28:3c:0a:0d:c8:c8:7b:32:40:9f:a0:62:13:0b:a3:85:
51:39:cc:d8:d2:f5:aa:80:d5:20:03:10:8b:cc:ba:05:08:91:
96:0e:d9:40:12:95:6f:c5:f9:67:e1:80:5e:c4:a1:61:3a:3c:
2e:71:9e:ed:d3:e5:d3:ac:13:a0:68:3b:44:ec:d4:36:1a:45:
8e:2b:d2:b2:53:e3:1e:8f:07:8f:b5:8a:cb:c4:fe:e4:da:45:
eb:18:43:62:f6:f5:d9:1f:5e:70:ae:99:28:48:8d:49:45:bf:
73:cf:80:fd:fc:f2:dd:1d:e6:cd:1d:29:d9:d5:f1:db:71:e7:
1b:21:9d:13:e0:cc:0e:43:c1:60:b8:18:2e:30:7b:6a:17:1a:
ab:68:d6:60:07:28:a0:18:7c:04:15:3f:74:fd:51:6f:93:5a:
51:74:6e:e2:f4:f1:9d:24:85:61:21:08:2f:48:18:a8:64:02:
f2:ba:7a:60:61:c9:37:c7:51:91:95:9e:6b:a6:14:42:48:b3:
23:70:4d:f4:de:60:e7:d8:cb:91:2e:d3:d6:af:c1:9b:9e:9f:
93:2f:72:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:49:52 2025 by rpki-client