Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/oz8WuNequXvsoaSrfyjDTnTQW3k.roa
File: oz8WuNequXvsoaSrfyjDTnTQW3k.roa (raw, json)
Hash identifier: xlVm6Ij0YZyImV9HgneJ0I8dGPn1CBP8GzwgQHOUY74=
Subject key identifier: A3:3F:16:B8:D7:AA:B9:7B:EC:A1:A4:AB:7F:28:C3:4E:74:D0:5B:79
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01941FFA6794F91A6BAC59938916CB5C1942
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/oz8WuNequXvsoaSrfyjDTnTQW3k.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 178.239.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:67:94:f9:1a:6b:ac:59:93:89:16:cb:5c:19:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a33f16b8d7aab97beca1a4ab7f28c34e74d05b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:e5:81:bb:62:68:a2:e7:ab:5f:32:91:38:
1a:c6:cf:7f:f2:17:2f:e4:82:3a:fe:56:8b:36:b3:
41:c4:77:8c:2d:eb:96:8b:27:a1:f1:2d:7a:50:e8:
37:64:3b:f6:08:9c:31:b3:c8:89:a1:94:a4:f7:cd:
f1:fc:71:0a:3e:11:17:dd:90:7a:39:b6:af:ed:34:
b7:48:eb:10:ce:df:e8:54:6d:5a:80:59:c3:63:cb:
9c:1e:36:c0:75:c9:f3:a1:10:a4:d2:13:3e:e0:36:
a3:e2:c3:36:0e:80:b6:e9:be:9a:99:90:9c:19:10:
09:f9:3b:92:50:33:ab:c2:91:91:7b:c5:3e:ba:74:
92:35:dd:9f:63:ff:92:32:de:56:f6:58:ce:58:f3:
f1:42:06:e7:16:49:e0:a6:15:8d:82:32:9e:1d:c2:
98:7e:cb:d5:71:99:5d:97:68:d1:3e:3b:ba:33:c2:
83:b5:54:a6:ac:58:4e:70:09:3e:d9:d6:47:ee:e5:
a8:7f:7b:92:74:17:d0:a6:99:6e:5f:7f:2a:5e:fb:
da:a2:db:52:3d:71:05:28:78:4e:aa:70:1c:96:56:
07:4b:a1:f7:a6:da:06:ba:6d:98:28:1a:89:75:1f:
49:b7:18:27:b8:c3:9b:08:70:d1:a7:32:62:ca:1d:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3F:16:B8:D7:AA:B9:7B:EC:A1:A4:AB:7F:28:C3:4E:74:D0:5B:79
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/oz8WuNequXvsoaSrfyjDTnTQW3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:0d:a0:48:8e:46:91:0d:04:5c:63:37:79:d2:a2:bb:21:aa:
19:aa:2f:24:9c:46:8b:71:50:04:21:57:0b:9c:09:54:de:91:
34:45:f2:a6:ee:45:e3:ca:a8:36:34:57:72:ee:26:9d:41:5b:
40:ed:b9:c7:fd:0e:4f:42:60:4f:45:2b:6e:34:dd:6f:40:58:
ad:2f:ee:50:12:9f:4f:93:1e:f9:27:4b:e6:1a:ca:03:2b:74:
ef:dd:e3:1a:f3:b6:b2:7d:8f:a9:35:82:8e:66:67:cd:05:8c:
ab:47:0d:c8:4e:15:19:cc:10:2b:32:d3:b9:41:4d:47:0e:9b:
9e:e4:c5:00:5b:a6:12:3c:d6:e2:d3:ef:5b:4d:ce:47:bd:68:
0c:32:0f:92:3f:e0:1c:2f:5c:e7:98:89:14:80:4b:64:5c:b4:
a0:2c:d6:80:b7:33:8f:5b:5f:b4:83:d5:19:3e:14:cf:e1:34:
bf:d1:9b:fc:23:da:4e:8f:2d:1b:42:e8:5d:52:4d:03:8e:1d:
05:b7:47:34:2c:fc:48:f5:84:e8:d8:a1:db:e9:55:14:fa:cc:
95:3f:2b:bc:8d:24:e8:03:92:48:01:ee:98:c9:a6:8e:4f:f4:
e2:73:62:d7:35:a5:e9:1e:1d:51:dd:40:9a:f4:2e:65:f0:04:
07:57:38:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:01:46 2025 by rpki-client