Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OXE9IhkR1IPZnP1OjgxxGDw4Wu8.roa
File: OXE9IhkR1IPZnP1OjgxxGDw4Wu8.roa (raw, json)
Hash identifier: 0G/jJImX/YO9xfenQAogF0S0K2M6+/15nlYOYmQH8c4=
Subject key identifier: 39:71:3D:22:19:11:D4:83:D9:9C:FD:4E:8E:0C:71:18:3C:38:5A:EF
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019421441916C2DF44B42F889D8D66ECD53E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OXE9IhkR1IPZnP1OjgxxGDw4Wu8.roa
Signing time: Wed 01 Jan 2025 09:48:18 +0000
ROA not before: Wed 01 Jan 2025 09:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212504
IP address blocks: 213.218.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:19:16:c2:df:44:b4:2f:88:9d:8d:66:ec:d5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39713d221911d483d99cfd4e8e0c71183c385aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8b:c3:4d:65:7d:89:23:5a:b7:6c:56:38:21:
ee:1b:87:01:c2:1d:91:58:3c:06:59:ea:1e:99:51:
ef:a5:9c:44:fe:5c:8e:90:2d:52:ec:2c:d0:aa:39:
c7:f6:4a:5c:4f:59:43:42:64:2b:44:b7:21:72:6b:
a8:2b:f4:de:f8:ba:f9:fd:c5:49:f2:e7:a8:2d:0a:
b9:ad:a6:3d:14:3a:37:7f:21:af:fc:c4:88:04:e5:
a0:04:9d:56:a9:b7:60:3f:29:3f:32:87:e5:e5:83:
a7:50:ad:a7:81:c0:26:6b:83:22:43:39:cf:bd:5f:
1a:56:3c:4d:20:e3:da:5e:77:f6:d8:8e:e5:b2:7c:
21:71:ad:34:8c:4e:b4:de:6d:1b:80:59:22:e7:87:
a2:58:73:10:db:10:9a:da:1a:98:31:31:21:4d:68:
68:16:15:b3:db:7e:68:e2:c2:59:34:b0:93:62:23:
7e:ff:13:0f:76:c7:09:c2:b2:32:e0:72:bc:85:c0:
b5:72:ba:8b:f4:9c:a4:db:50:80:42:c0:24:fe:43:
47:1e:d8:ae:49:32:2f:c9:d0:b0:0f:13:02:b1:ba:
b0:c1:61:12:62:1a:d7:6a:94:ed:fd:2b:1b:66:1a:
bc:12:c1:34:30:aa:71:e6:00:ef:85:c6:1c:61:d8:
aa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:71:3D:22:19:11:D4:83:D9:9C:FD:4E:8E:0C:71:18:3C:38:5A:EF
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/OXE9IhkR1IPZnP1OjgxxGDw4Wu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.236.0/24
Signature Algorithm: sha256WithRSAEncryption
26:20:be:ee:f9:d9:1d:ab:70:6b:89:28:90:d6:cb:7f:4b:94:
b1:57:78:a8:bd:9c:41:09:56:19:e3:53:75:74:79:c6:a5:9a:
06:2c:61:5c:7b:de:58:2e:0d:c5:2e:e7:75:d8:bd:56:3a:2b:
c4:ca:7f:de:8b:75:b3:b2:a8:08:86:05:40:cf:3a:94:c2:b3:
d0:6b:f1:a8:4c:36:ce:34:f5:2a:c4:a3:27:53:61:b0:d7:01:
a1:11:64:38:b1:0a:bb:d3:2e:c1:cb:13:a4:2b:8f:34:c3:f4:
54:1b:22:f4:26:a1:0e:bf:6d:4e:78:63:ff:1b:5d:3e:5d:8c:
2e:2d:cd:82:85:65:35:8c:c6:ee:6d:86:3a:8a:fa:19:67:9a:
b3:30:83:7b:05:04:4d:24:bf:76:d4:72:6e:f0:4a:df:49:68:
24:0c:eb:66:16:9b:48:f7:9f:a6:f0:fb:3d:2b:5a:1e:24:27:
b5:f7:22:62:1e:3a:98:af:c2:00:0b:e0:4f:d6:48:34:51:37:
cd:67:23:7b:87:1f:65:26:99:d6:6e:89:86:30:c0:bf:8c:77:
93:ed:1b:0a:7f:8c:5f:bf:5d:9f:bf:65:62:45:10:2a:a1:91:
86:58:0d:a3:fb:6a:95:b4:b4:83:8b:f0:ea:7e:22:c0:e7:f2:
18:44:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:40:26 2025 by rpki-client