Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/OcTgY_TxJBbWYUXl-r4CTTXUle0.roa
File: OcTgY_TxJBbWYUXl-r4CTTXUle0.roa (raw, json)
Hash identifier: 1c7PjEo1UgZPDis6XvL/mHlYibhzZZ7MfR0yuK8HcsA=
Subject key identifier: 39:C4:E0:63:F4:F1:24:16:D6:61:45:E5:FA:BE:02:4D:35:D4:95:ED
Certificate issuer: /CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Certificate serial: 01942143DDEAA878204A48CF5B1CC34C96D3
Authority key identifier: 74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/OcTgY_TxJBbWYUXl-r4CTTXUle0.roa
Signing time: Wed 01 Jan 2025 09:48:03 +0000
ROA not before: Wed 01 Jan 2025 09:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197301
IP address blocks: 80.71.128.0/20 maxlen: 21
194.62.168.0/22 maxlen: 23
2a01:7a80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:dd:ea:a8:78:20:4a:48:cf:5b:1c:c3:4c:96:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744aea53ef60f8a8a9345e582982a9a59bc13767
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c4e063f4f12416d66145e5fabe024d35d495ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:f6:c2:5a:b7:ee:1f:a9:6d:62:8b:8c:ee:
75:69:f1:5c:a2:76:a5:55:d2:d6:71:88:76:91:27:
22:3f:2c:76:01:f3:7d:6d:88:de:b0:35:2a:24:58:
4e:7a:0f:5e:af:31:10:49:4f:65:3f:23:c1:a3:c5:
06:22:b6:04:cd:32:2f:ed:8d:77:c6:0e:2c:03:45:
2f:1a:3f:e6:13:4e:a1:db:10:83:0e:8d:eb:45:2a:
b0:8f:47:63:86:3a:9b:1d:3b:50:44:60:57:35:cf:
72:07:eb:a8:01:1a:15:51:02:6f:4f:86:0a:1f:4a:
59:0e:6d:e7:72:88:fe:71:db:e2:d1:a3:f6:42:8d:
47:5b:4e:4a:3e:44:30:74:a0:28:bf:e8:65:44:e0:
0a:13:fe:e5:82:38:60:f2:50:8c:d7:3e:75:8a:40:
57:97:93:69:dc:33:f9:f5:dd:6f:d7:33:75:fe:9f:
ff:a2:03:c1:4a:e4:9a:ff:f1:8c:7d:b6:44:a1:e3:
54:fb:85:0e:5f:70:18:77:76:44:52:6b:91:71:61:
3a:f9:88:4f:78:72:1e:0c:c1:1e:78:fa:23:76:0d:
2d:88:c9:33:98:22:19:62:20:1a:56:f5:e4:e1:1b:
6b:02:64:23:dd:f6:dd:9b:16:18:17:e2:82:ac:d4:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:E0:63:F4:F1:24:16:D6:61:45:E5:FA:BE:02:4D:35:D4:95:ED
X509v3 Authority Key Identifier:
keyid:74:4A:EA:53:EF:60:F8:A8:A9:34:5E:58:29:82:A9:A5:9B:C1:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dErqU-9g-KipNF5YKYKppZvBN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/OcTgY_TxJBbWYUXl-r4CTTXUle0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6d38cc-c0f6-4018-b929-9b64c25156b9/1/dErqU-9g-KipNF5YKYKppZvBN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.128.0/20
194.62.168.0/22
IPv6:
2a01:7a80::/29
Signature Algorithm: sha256WithRSAEncryption
2f:6f:f9:85:9f:a0:df:87:6f:59:d3:e4:d2:22:7f:0e:02:f9:
76:a6:61:d6:a5:8c:b4:a6:3d:bc:f7:4b:b2:19:1c:22:14:fb:
31:9d:99:9a:26:cf:e8:f8:2c:5b:dd:88:ac:2d:cb:9b:82:8a:
ad:c1:ce:3a:5d:1f:91:ec:1b:21:2b:5f:45:c9:a5:9c:e5:08:
60:5f:a5:78:b6:ef:52:4d:e1:3e:5d:5d:66:b6:6f:86:82:6d:
d3:e8:0f:26:85:15:99:47:66:96:78:13:d1:d3:5b:fd:bc:e1:
a8:db:fe:8a:06:0e:1d:a1:51:1c:14:81:45:92:dc:9b:86:78:
d5:b5:b8:5d:2f:28:a3:0b:46:ab:16:33:8e:b9:66:d6:5f:7a:
12:84:30:bf:16:b1:db:5d:ae:43:1a:11:ef:32:c5:c2:62:eb:
e7:f7:f3:a0:2f:3b:a9:84:24:3a:c0:6c:e6:fe:79:0f:bd:6c:
55:bd:31:87:08:3a:7f:f6:e6:3b:21:c3:db:3a:07:7d:a4:8e:
fd:d1:b7:5a:2a:0b:45:8a:df:2a:a5:90:80:02:27:67:04:75:
2f:e8:de:a1:5b:07:06:34:96:d4:eb:7b:11:59:5a:5b:53:dc:
3e:5d:5a:de:9c:10:cc:24:7f:db:53:50:a0:49:ac:6e:bc:86:
b3:70:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:14 2025 by rpki-client