Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/oeTs3LIZlEF7d8yg6_C5w5LFbXU.roa
File: oeTs3LIZlEF7d8yg6_C5w5LFbXU.roa (raw, json)
Hash identifier: 0dSLKAReg9sFy/PdJ9YekCS9RpkrSnkTawfDxa6rahE=
Subject key identifier: A1:E4:EC:DC:B2:19:94:41:7B:77:CC:A0:EB:F0:B9:C3:92:C5:6D:75
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369A1DB5974542261AD9C94B266D7E0
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/oeTs3LIZlEF7d8yg6_C5w5LFbXU.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52159
IP address blocks: 188.241.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a1:db:59:74:54:22:61:ad:9c:94:b2:66:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1e4ecdcb21994417b77cca0ebf0b9c392c56d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:e1:c6:0d:c3:58:ec:50:52:1d:ca:62:1d:
68:17:ef:a1:04:16:ae:7c:4e:85:6c:d7:09:6f:7c:
22:14:a8:e4:62:7a:bf:a0:1d:8e:3e:b2:88:24:cf:
f4:77:dd:63:17:e8:f7:d0:48:c0:a6:b1:12:1f:42:
80:a6:58:57:7b:a1:00:a2:37:5f:29:1c:41:82:4d:
c1:ff:24:fd:33:19:1a:73:fe:1a:af:5e:ef:80:d8:
a1:d5:83:8f:08:04:f1:c1:1f:a4:6d:a7:5e:7e:62:
64:b8:78:fe:13:0e:02:8f:6a:06:b3:d7:2c:b0:bd:
c1:d0:7c:05:7b:ef:c8:cb:8d:bb:f0:0d:4f:c6:1b:
19:23:aa:f5:1f:6c:ba:de:d4:79:23:4b:42:12:8e:
29:f9:00:a7:fa:b2:77:02:fa:6d:50:e9:d7:09:27:
97:9d:31:3f:73:d0:fa:0c:b1:7c:9d:a8:ff:02:10:
f3:d2:32:2f:15:f8:1a:ce:c2:81:d5:7d:97:aa:2c:
aa:89:87:3c:18:60:4e:3f:07:3b:6f:53:31:de:a9:
0a:5b:ce:f0:65:a2:c5:78:09:39:95:9b:ab:a1:b4:
56:b2:0c:e9:36:6d:4f:2d:3a:7b:95:51:8b:87:e8:
79:0d:ac:7c:ec:01:b9:f2:f1:15:9c:df:0b:ec:8b:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E4:EC:DC:B2:19:94:41:7B:77:CC:A0:EB:F0:B9:C3:92:C5:6D:75
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/oeTs3LIZlEF7d8yg6_C5w5LFbXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.19.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:bc:71:d6:4e:b9:1b:3e:75:40:b5:33:ae:c6:2b:55:ac:57:
00:3d:d2:9e:37:b4:10:b0:5f:7b:a2:63:cb:4a:1a:3d:68:42:
37:2c:90:52:ff:9e:94:db:50:b0:5e:56:8f:e4:21:88:0f:0e:
3a:7c:97:d1:1d:9b:29:83:d6:77:3a:d4:d9:21:ac:fc:a7:0e:
82:67:ed:45:86:4b:5b:d8:63:c6:b4:31:61:0d:2d:80:d9:56:
2a:4e:83:ff:d9:93:d6:61:1a:a6:9f:96:79:19:b1:ca:c8:e5:
dd:9b:cf:7a:ee:a2:c2:e5:e7:55:7f:6e:b8:ac:55:1f:c1:ca:
fc:1d:d6:73:95:de:ee:bf:c7:3e:de:68:1e:64:fd:ea:f7:ed:
5f:0a:be:c1:a0:49:1a:e6:cc:7b:29:13:6d:01:95:6b:fc:1d:
e5:ae:04:0c:79:3e:52:8d:bc:5e:22:2d:69:f2:6b:f5:b8:47:
91:28:7e:17:95:d8:95:39:91:cd:58:7b:81:b2:92:ca:77:2c:
c7:19:52:ea:a4:e0:e9:24:6b:5c:c1:df:b2:fa:45:fe:41:51:
cc:92:88:58:d9:22:19:5b:da:bf:8b:9b:88:e2:c4:52:21:8c:
92:16:a4:bd:33:bf:15:d0:69:68:6f:74:1c:b5:08:8c:56:1d:
1a:d7:9c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:18 2025 by rpki-client