Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa
File: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (raw, json)
Hash identifier: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=
Subject key identifier: A0:C4:6D:31:FE:3B:C8:83:F2:63:D6:5D:AD:53:E1:36:2D:C6:DD:EA
Certificate issuer: /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial: 0194266BBE70607BB3EB62AE35AD46B93143
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa
Signing time: Thu 02 Jan 2025 09:49:42 +0000
ROA not before: Thu 02 Jan 2025 09:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213072
IP address blocks: 194.60.80.0/24 maxlen: 24
2001:67c:c5c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:be:70:60:7b:b3:eb:62:ae:35:ad:46:b9:31:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
Validity
Not Before: Jan 2 09:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0c46d31fe3bc883f263d65dad53e1362dc6ddea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4d:62:a0:4b:9f:b3:d8:6c:b9:2c:80:69:65:
ad:6d:17:fb:31:37:e9:aa:e6:95:b9:c8:8c:65:4c:
57:76:a7:83:5e:ab:18:dd:42:11:b6:5a:34:5d:c0:
01:d8:9e:2a:e2:91:0a:23:e5:85:4a:a4:70:d4:84:
0e:8b:d6:5e:3d:90:eb:af:12:48:a1:58:ec:ab:e2:
5b:07:73:3a:9f:95:c3:13:6b:cb:9d:da:32:af:54:
fa:15:61:5f:70:ca:72:46:b3:a4:8b:71:7d:0c:74:
b8:48:a6:1f:ac:3f:ce:c7:da:b3:52:93:69:63:90:
28:29:c3:7b:3c:d7:27:b3:de:03:28:70:07:96:e7:
1b:a5:30:c9:b7:72:ce:d4:70:58:e9:14:23:16:5e:
9f:92:33:19:1e:f7:bc:f4:d0:c2:4c:4e:bb:18:bb:
3f:2d:42:d8:8b:7f:ae:bd:ea:12:3c:9d:d4:71:a5:
60:16:53:ab:c2:3b:02:3a:fe:ac:45:7b:6d:88:e6:
06:61:2c:23:08:25:d5:60:c3:e6:e9:0a:3f:7b:85:
10:21:20:04:2c:cc:4f:89:27:e9:a5:d0:fb:b3:d0:
0b:60:1b:e7:2f:60:08:c1:0f:bf:8d:7d:fb:5b:c8:
87:10:92:80:5c:d7:f5:65:9f:6b:60:d7:db:fb:77:
87:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C4:6D:31:FE:3B:C8:83:F2:63:D6:5D:AD:53:E1:36:2D:C6:DD:EA
X509v3 Authority Key Identifier:
keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.60.80.0/24
IPv6:
2001:67c:c5c::/48
Signature Algorithm: sha256WithRSAEncryption
ab:a7:91:7d:ac:1e:c6:27:8a:f4:05:0e:d0:7d:ad:e9:a5:db:
7f:cd:31:df:1f:9f:92:f5:9f:9e:48:ba:18:4e:b3:57:b3:24:
0d:f9:fe:dd:10:8a:b7:3c:74:5e:8a:1d:f2:6c:a9:d1:9c:1a:
94:40:24:de:09:f8:a4:9b:01:f4:67:57:6d:9a:d8:e0:bd:b1:
09:c6:0c:46:e1:49:21:53:e4:4c:35:28:bb:f2:6e:1d:78:21:
09:82:ff:9d:5d:d1:6a:41:d5:d5:05:f3:99:e5:e2:16:e5:99:
dc:c5:64:5b:9f:c6:42:f5:ad:85:47:22:51:26:cf:c8:1e:c1:
e8:6b:61:4b:ac:f6:ff:12:86:df:2d:2b:85:29:74:55:74:d6:
5c:d6:ab:d0:b4:31:4b:bf:5d:c5:95:3e:68:0f:3a:99:9d:e9:
c9:d2:a3:78:55:17:ba:5d:6a:c9:8e:c2:e9:6b:fe:c6:50:af:
97:36:14:f6:ec:11:66:53:44:f5:e9:32:90:54:6e:fc:5f:33:
51:30:36:75:76:5d:49:72:bf:f9:45:24:6a:ab:87:27:7a:0a:
da:3e:2c:a2:37:46:99:a6:0f:a9:f1:99:fb:5c:34:64:3f:87:
f9:fb:9d:02:d4:33:4b:92:a8:63:81:95:9c:9f:88:df:68:bf:
76:d6:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:03:06 2025 by rpki-client