Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/oelP10O0hKN0MJjmizXtRBBnIm0.roa
File: oelP10O0hKN0MJjmizXtRBBnIm0.roa (raw, json)
Hash identifier: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=
Subject key identifier: A1:E9:4F:D7:43:B4:84:A3:74:30:98:E6:8B:35:ED:44:10:67:22:6D
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 019424B3C6BE510F5FCA79BAE4C1FE705C7C
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/oelP10O0hKN0MJjmizXtRBBnIm0.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20249
IP address blocks: 185.55.132.0/22 maxlen: 22
185.55.132.0/23 maxlen: 23
185.55.134.0/23 maxlen: 23
185.55.134.0/24 maxlen: 24
185.55.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c6:be:51:0f:5f:ca:79:ba:e4:c1:fe:70:5c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1e94fd743b484a3743098e68b35ed441067226d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:cc:38:88:0a:c6:a4:71:2d:a0:22:a6:a0:
c1:cb:e7:6b:a9:ae:81:24:c6:99:cd:1a:6c:16:9b:
b6:7c:dd:a2:2c:89:cb:8d:7a:35:6a:18:cc:a0:24:
e4:5e:13:b9:1f:04:8b:ad:95:b4:36:26:70:25:96:
a7:99:c6:e0:0a:3b:5d:d1:be:20:2b:3f:84:da:4f:
2a:26:ef:c4:32:0f:34:55:ce:7d:dc:a1:04:1f:23:
37:ce:0b:7c:bf:bb:57:ec:5d:b9:76:49:4a:fd:62:
dc:aa:12:6b:8e:ec:eb:08:78:35:05:ee:0a:44:3c:
8d:a3:d2:bb:de:94:31:43:93:f1:96:73:a6:79:b9:
62:a7:33:5e:e8:be:46:58:1b:8d:32:70:e8:77:d7:
66:74:ac:ff:c4:a5:65:7a:a7:1b:0d:af:b9:68:38:
27:76:77:cb:55:32:f4:4e:3c:af:1a:53:f6:e4:47:
21:bc:f1:35:05:fb:4c:c3:f8:89:b5:78:5f:1e:8f:
95:26:08:d2:7f:5b:cd:32:f3:c7:1b:d4:83:1c:1d:
e9:aa:bb:6e:1d:48:08:05:70:e6:40:a4:29:a3:3e:
32:0d:aa:49:d8:0b:95:04:fc:63:70:37:6e:82:58:
53:5a:67:62:63:3d:a6:19:2f:80:f7:cb:f0:2c:55:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E9:4F:D7:43:B4:84:A3:74:30:98:E6:8B:35:ED:44:10:67:22:6D
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/oelP10O0hKN0MJjmizXtRBBnIm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.132.0/22
Signature Algorithm: sha256WithRSAEncryption
92:73:ed:d5:4e:13:a8:5b:c9:49:0a:9b:bd:b1:5b:94:90:56:
8c:2b:cc:80:45:69:78:ec:23:25:2b:6d:20:26:c5:8c:6a:f3:
ff:a5:96:38:0a:4c:2a:cf:3e:83:64:a8:8b:4f:9a:f4:57:92:
7d:7b:a2:56:34:a8:fd:37:61:a6:ed:eb:af:a1:a9:36:2f:9c:
4a:d0:ce:87:5e:34:f3:0c:1d:6c:94:dd:ba:e1:08:c9:a6:dc:
6a:f7:be:4e:79:8e:64:35:eb:43:ef:60:2a:61:4c:56:37:3c:
7c:90:70:96:69:eb:62:25:80:6c:0f:1f:e9:79:b2:78:aa:b6:
b5:92:17:49:d8:50:14:4a:cf:52:6b:36:99:3f:c0:a6:e9:c5:
97:da:90:61:09:67:62:ce:0c:18:0e:09:3c:94:67:12:f3:9a:
01:a6:29:17:a9:2b:15:5e:2e:59:8f:b4:ac:77:f2:4a:73:f8:
e9:3a:6c:da:0d:f0:c8:42:15:a3:8d:47:bb:15:37:f5:0c:20:
c9:7e:fd:98:72:32:01:4f:b4:d8:43:8a:2a:79:20:1d:37:40:
73:22:09:b9:4e:63:51:e7:11:80:ac:94:e1:83:2c:f5:a3:c8:
30:25:a0:29:9f:2c:e1:4b:42:a1:cf:4c:c7:a1:2f:25:24:85:
2e:be:03:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:27 2025 by rpki-client