Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/oxEuvUfcJ-buwPGzC9O9kYsePss.roa
File: oxEuvUfcJ-buwPGzC9O9kYsePss.roa (raw, json)
Hash identifier: CDgIKWYLWk0SZTYTZrPpXT0JXuPlKzi9XhIJznqGoHY=
Subject key identifier: A3:11:2E:BD:47:DC:27:E6:EE:C0:F1:B3:0B:D3:BD:91:8B:1E:3E:CB
Certificate issuer: /CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Certificate serial: 019421B21F57A7B76DAC0458FFCF2A297E9D
Authority key identifier: E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/oxEuvUfcJ-buwPGzC9O9kYsePss.roa
Signing time: Wed 01 Jan 2025 11:48:29 +0000
ROA not before: Wed 01 Jan 2025 11:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42876
IP address blocks: 193.47.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1f:57:a7:b7:6d:ac:04:58:ff:cf:2a:29:7e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e675da09cd3aeb4c937c63f535f33fd57d0c2191
Validity
Not Before: Jan 1 11:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3112ebd47dc27e6eec0f1b30bd3bd918b1e3ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:94:09:20:8b:ed:72:f0:9a:45:a5:0e:6a:
2e:5d:f3:93:90:2d:0a:1d:32:77:9c:1f:0e:d4:0b:
a7:58:29:3b:9d:e6:51:22:02:32:70:86:3f:3f:a9:
73:d2:7f:d7:20:2e:7e:c0:b8:0a:b1:5e:48:84:e8:
b5:46:e2:7f:1f:ac:9d:6d:64:6e:af:4b:16:3b:76:
f3:1a:02:15:67:19:75:1d:23:d4:7a:ce:41:3b:e7:
67:b2:92:ed:93:8b:60:19:cc:ce:84:b0:5f:f4:f3:
7d:19:34:27:37:47:26:c3:43:1c:e2:07:b2:22:b8:
c9:86:f5:86:49:09:16:7a:1e:26:2e:68:e0:06:b8:
77:af:81:57:8a:f3:77:5d:1e:6e:9f:c9:fd:76:f3:
9a:ad:6c:10:35:06:ad:b6:6d:a5:9e:3f:50:62:e5:
7f:bf:76:6b:05:57:6d:e2:b1:01:6c:f2:e3:36:d5:
1c:c2:3b:98:ac:73:d9:3b:9e:67:a8:9b:13:4c:fc:
12:17:d6:8b:81:2f:f7:68:e8:bc:16:f1:54:85:5e:
21:cd:2a:19:b2:60:88:e1:e9:5e:78:df:e0:03:58:
c1:20:94:c4:27:79:18:bf:3b:48:6a:d4:45:e8:88:
7f:5b:af:5a:b0:52:cc:07:c1:00:75:b2:55:1b:66:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:11:2E:BD:47:DC:27:E6:EE:C0:F1:B3:0B:D3:BD:91:8B:1E:3E:CB
X509v3 Authority Key Identifier:
keyid:E6:75:DA:09:CD:3A:EB:4C:93:7C:63:F5:35:F3:3F:D5:7D:0C:21:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nXaCc0660yTfGP1NfM_1X0MIZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/oxEuvUfcJ-buwPGzC9O9kYsePss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ca2a80-1d90-4823-b3f1-4e284cff0799/1/5nXaCc0660yTfGP1NfM_1X0MIZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.186.0/24
Signature Algorithm: sha256WithRSAEncryption
34:5c:62:26:e4:55:40:83:ef:53:5d:a2:f8:bc:49:ff:9d:8b:
94:07:3a:60:19:bd:ba:cd:1e:f5:bb:3e:ac:15:e8:c6:60:43:
2a:8f:c4:6b:73:03:d0:4d:ea:17:cd:da:02:18:e9:4e:24:11:
fd:81:4e:b8:fb:42:29:34:e6:63:0f:2b:de:9e:4c:a1:81:eb:
1c:68:72:97:39:13:ac:4d:60:03:b7:94:c1:2b:e3:ad:67:63:
0a:3a:af:37:a3:7c:45:e6:2f:b4:74:f6:3a:5a:13:07:9b:26:
5d:31:ff:bd:70:c1:c2:b7:ce:da:11:64:10:13:cc:a7:78:78:
ab:24:12:07:17:2d:45:9f:53:38:d5:b3:d0:5e:87:e6:c6:b6:
24:57:a7:6d:fb:10:ee:10:39:9a:9c:eb:18:9a:be:66:39:b7:
68:61:0d:86:20:19:b2:3a:2a:8f:50:3b:ec:5b:d7:f8:ed:95:
34:58:1d:4a:49:7a:5c:59:ec:70:52:b4:40:a4:35:34:00:d7:
b2:d6:1d:4c:c4:0b:48:5e:bc:7a:f1:5f:5a:95:3f:fb:b3:27:
36:7f:05:4d:06:92:f6:5a:6f:ea:a9:85:a4:0e:58:19:39:40:
5a:8f:e2:2a:1c:a8:ca:76:2d:1f:3c:e9:f6:05:5c:94:58:78:
f0:2f:1c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:56:22 2025 by rpki-client