Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/oFSSiFC3Vzphxz9KorzB0pMi8q0.roa
File: oFSSiFC3Vzphxz9KorzB0pMi8q0.roa (raw, json)
Hash identifier: TQSnPR7Rlvrd62e7kQsHyRbc3iccQgnfslp/ytEFEMY=
Subject key identifier: A0:54:92:88:50:B7:57:3A:61:C7:3F:4A:A2:BC:C1:D2:93:22:F2:AD
Certificate issuer: /CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Certificate serial: 0194258E203ECCDC3BD77902F0A3B50DD6B1
Authority key identifier: 4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/oFSSiFC3Vzphxz9KorzB0pMi8q0.roa
Signing time: Thu 02 Jan 2025 05:47:38 +0000
ROA not before: Thu 02 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15576
IP address blocks: 185.75.153.0/24 maxlen: 24
193.104.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:20:3e:cc:dc:3b:d7:79:02:f0:a3:b5:0d:d6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4da09fbbe90fb79f0f08b207f835f0f0da29fe
Validity
Not Before: Jan 2 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a054928850b7573a61c73f4aa2bcc1d29322f2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:da:8e:f7:e0:ee:aa:81:04:6c:4a:4f:4f:
bd:94:c1:d9:7e:c0:b9:92:8e:c6:95:1d:5b:71:1f:
9e:e4:58:12:00:04:69:78:8c:5c:0a:75:83:2e:1f:
2e:b1:9e:b4:ee:41:da:00:42:85:44:b3:2e:eb:1a:
52:ce:47:cd:65:c0:b6:61:a9:9a:5b:5d:34:a6:42:
7c:ef:92:bb:5b:42:f4:85:ae:85:24:c2:53:ae:fa:
00:9a:94:38:4b:08:99:29:d9:2b:64:ac:55:b5:81:
a0:45:d1:c2:da:b5:4c:71:03:fd:7e:84:30:dd:57:
12:d8:cf:50:12:7d:02:99:1c:15:f6:64:19:a9:75:
5e:a9:5a:71:09:d6:e1:12:91:a6:1a:f8:be:7b:57:
2f:97:e8:84:bc:8c:e7:b9:e7:87:b2:6b:27:c5:7e:
7d:4b:3f:b4:01:21:c5:01:e4:9e:db:03:fc:9a:06:
7f:fa:69:b8:91:c1:62:60:5d:1b:db:52:66:68:42:
c8:c9:4b:a5:d3:d8:34:5a:c9:59:81:da:27:33:09:
4a:7f:c2:1b:61:87:16:da:02:47:e1:63:53:63:33:
b5:62:24:4d:cc:8e:1b:81:04:6c:26:1d:4e:d9:59:
ce:ca:49:f8:5e:9a:9d:6e:d1:d0:c4:b6:3e:58:2a:
16:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:54:92:88:50:B7:57:3A:61:C7:3F:4A:A2:BC:C1:D2:93:22:F2:AD
X509v3 Authority Key Identifier:
keyid:4F:4D:A0:9F:BB:E9:0F:B7:9F:0F:08:B2:07:F8:35:F0:F0:DA:29:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T02gn7vpD7efDwiyB_g18PDaKf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/oFSSiFC3Vzphxz9KorzB0pMi8q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/66bd3a-5121-490d-8c92-6ea94a961d4c/1/T02gn7vpD7efDwiyB_g18PDaKf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.153.0/24
193.104.116.0/24
Signature Algorithm: sha256WithRSAEncryption
20:5a:c8:86:67:85:7c:e0:01:81:0f:e5:94:1e:d9:33:64:87:
8e:ec:9d:fe:d3:0d:d4:f3:63:3e:8c:2c:40:38:63:59:78:37:
11:fe:13:20:a9:41:cb:ab:59:4f:89:a0:0d:00:2e:a1:32:e1:
7c:c3:89:af:38:ee:8f:ce:68:ab:6e:80:e7:0a:39:8c:8b:af:
35:f3:7c:77:f1:6c:64:10:fd:38:40:5b:c2:4a:0b:0a:0e:37:
49:e6:27:3b:4b:75:f6:57:7a:d2:e6:17:53:ed:4f:85:81:88:
81:9c:fb:4f:48:8b:ad:9e:d6:25:23:6e:d7:99:f7:d5:0f:b6:
39:ac:25:33:54:9b:1c:2d:24:eb:0c:fd:e3:7f:c3:8a:b5:28:
d8:2b:6d:a9:28:5c:f1:7d:db:09:8b:72:6b:e5:e1:0b:60:6d:
3b:87:19:c1:dd:9c:f1:d4:38:f8:57:83:f7:4a:f5:c3:b4:6e:
02:69:37:50:f5:ec:1a:0f:f3:67:b8:93:0c:19:65:21:a6:24:
41:28:d2:dc:f8:79:e7:63:45:43:02:2e:22:cc:8b:cc:67:99:
2f:1c:56:35:90:fe:b3:fa:d7:1e:80:83:8f:4c:88:1a:58:cf:
37:07:62:1d:28:fc:68:0a:a9:70:9f:60:3b:e0:c5:48:18:b4:
26:60:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:38:49 2025 by rpki-client