Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ONh2oEqou6RD-y_iTrg8KINYvOk.roa
File: ONh2oEqou6RD-y_iTrg8KINYvOk.roa (raw, json)
Hash identifier: uIegQeYEe/YJs3ytzc0q6ySm74vwELrFCeay/R5mSoI=
Subject key identifier: 38:D8:76:A0:4A:A8:BB:A4:43:FB:2F:E2:4E:B8:3C:28:83:58:BC:E9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214410496A7D7AB5E9B23ACDB1202312
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ONh2oEqou6RD-y_iTrg8KINYvOk.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211061
IP address blocks: 185.49.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:10:49:6a:7d:7a:b5:e9:b2:3a:cd:b1:20:23:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38d876a04aa8bba443fb2fe24eb83c288358bce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:23:2c:5b:3b:0e:22:14:0e:2b:af:c5:34:
bb:99:a1:25:3a:64:84:87:3c:3b:b4:bb:08:4c:33:
04:96:d5:e8:c6:f5:b4:b8:ea:b8:f6:af:07:85:a6:
5d:92:bc:5c:92:a6:62:7a:94:99:b4:bb:bc:6e:a8:
45:2a:08:79:1e:fb:4b:d0:24:4d:ee:e8:84:b7:5b:
de:70:95:f6:64:9b:fa:cb:18:35:20:9a:0e:95:25:
3b:de:5f:2c:18:05:86:4a:d4:d1:d7:27:3f:7a:98:
af:ab:f5:72:7c:59:82:5b:b3:e1:f1:05:94:54:72:
56:46:5e:5b:c8:0b:22:2f:2e:cf:24:34:2f:ff:e0:
72:a1:b9:eb:b9:a8:48:5f:ee:f7:68:f3:aa:d4:7d:
66:a2:c7:ca:71:2d:0a:25:12:27:3e:18:b6:81:1c:
5e:be:9b:00:eb:6a:77:4d:1c:f8:3b:f1:a3:25:de:
f4:3c:58:0b:cb:0b:2e:13:2a:03:85:db:74:a1:b8:
10:79:87:2a:86:fd:a0:9d:3b:e3:30:cd:59:9d:5b:
e9:3f:fe:ce:86:8f:72:34:11:36:ff:42:7b:94:92:
17:3a:92:4d:0a:28:f3:85:8d:6e:88:55:5f:83:ce:
ca:c7:2e:39:7e:f4:df:2d:58:54:dc:9c:1b:e8:a0:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:76:A0:4A:A8:BB:A4:43:FB:2F:E2:4E:B8:3C:28:83:58:BC:E9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ONh2oEqou6RD-y_iTrg8KINYvOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.127.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:cb:88:6a:ae:d5:8f:c8:43:13:6d:20:18:32:78:59:a1:89:
3b:a8:8e:3d:d5:fc:7d:26:56:67:2d:96:fc:a6:34:b5:20:37:
ac:d3:2d:d8:e9:a9:8e:8a:c6:98:2c:2b:a3:66:22:8c:4c:c8:
22:ff:e9:72:eb:27:2a:09:f8:45:b3:7b:64:e6:b6:b0:6e:a3:
93:7a:1c:53:b9:cf:72:03:de:35:fa:23:a2:94:4e:24:1f:05:
68:2d:d3:ef:81:fd:03:4b:81:2c:72:07:79:78:31:09:9f:47:
b7:96:16:22:a3:d5:23:03:7c:d2:00:f5:7b:82:3b:ce:ca:8b:
d5:9d:1a:f5:1c:31:67:ac:c2:99:e4:58:0a:d6:5e:35:b0:d8:
2a:fc:58:0f:95:57:6d:74:e7:10:b0:a1:fd:f9:5e:65:2f:74:
88:b2:8c:d5:9f:48:22:48:b7:90:c5:d5:1d:13:f4:2d:82:65:
80:30:c3:b8:b3:25:54:b1:e5:07:e8:d5:c0:f1:c3:ae:d2:a2:
c5:70:27:bf:42:3a:63:f6:00:19:a7:91:f5:c7:11:4b:1d:5d:
cc:18:7c:8c:e8:0c:62:8b:59:97:2e:78:bf:58:81:05:ba:81:
bd:4e:c1:b5:92:ae:4e:cd:5a:8f:fc:69:ce:f8:e2:79:a5:05:
ca:a3:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:40:04 2025 by rpki-client