Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/OLwYzj-fOtPupeVPjMakvIdCk14.roa
File: OLwYzj-fOtPupeVPjMakvIdCk14.roa (raw, json)
Hash identifier: w82sMMgD2hDeR96YGrYPpR7eSx7BTygOkVtPfhR7sSk=
Subject key identifier: 38:BC:18:CE:3F:9F:3A:D3:EE:A5:E5:4F:8C:C6:A4:BC:87:42:93:5E
Certificate issuer: /CN=1c344f11597594882853a79581dd2bf789eeb31f
Certificate serial: 019420D59FBE135D51D3394359E3883DA0E4
Authority key identifier: 1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/OLwYzj-fOtPupeVPjMakvIdCk14.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24641
IP address blocks: 185.50.228.0/22 maxlen: 22
2a01:ade0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9f:be:13:5d:51:d3:39:43:59:e3:88:3d:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c344f11597594882853a79581dd2bf789eeb31f
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38bc18ce3f9f3ad3eea5e54f8cc6a4bc8742935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:72:39:f9:0f:0a:df:d2:47:e0:63:00:03:
4d:b5:fc:02:27:f8:1d:4c:97:1e:7f:ec:ac:c0:3b:
33:f6:b7:92:d9:2a:4d:80:89:94:b6:30:5b:9b:7e:
76:6d:cb:35:98:15:e3:d7:ae:58:95:47:55:06:00:
c4:c8:43:45:ff:5b:42:26:d3:ff:38:ff:34:65:eb:
a6:fc:9a:c1:44:a6:70:2d:a5:66:28:ed:7e:90:54:
aa:3c:2e:52:a7:67:cd:e5:b6:62:55:03:ce:95:02:
c2:60:c1:4f:fd:25:34:96:80:d8:2a:6a:2b:72:de:
40:11:4f:88:d8:bc:af:b6:46:a4:90:74:9d:3b:df:
b4:ef:5e:86:98:2d:e0:2e:63:26:11:62:90:27:e6:
6a:26:e4:13:56:0e:90:49:33:06:8f:c0:da:20:a2:
2a:c6:76:71:00:14:5b:79:3f:cf:01:8d:f8:d6:a8:
68:3c:0a:cb:fd:7c:14:97:a1:88:6c:f0:f0:30:63:
32:b4:d4:bc:67:6f:dd:85:02:05:8b:3a:75:5a:8e:
f8:78:09:82:8c:10:12:a8:12:57:61:00:8a:70:77:
b1:79:af:b2:6a:dc:8d:2a:a7:a8:a0:0b:97:6d:da:
ba:8c:2c:aa:b1:ca:5c:3f:be:bd:53:b5:ae:b6:54:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:18:CE:3F:9F:3A:D3:EE:A5:E5:4F:8C:C6:A4:BC:87:42:93:5E
X509v3 Authority Key Identifier:
keyid:1C:34:4F:11:59:75:94:88:28:53:A7:95:81:DD:2B:F7:89:EE:B3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDRPEVl1lIgoU6eVgd0r94nusx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/OLwYzj-fOtPupeVPjMakvIdCk14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f06191-b0a8-4950-b027-deec6fcf2d95/1/HDRPEVl1lIgoU6eVgd0r94nusx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.228.0/22
IPv6:
2a01:ade0::/32
Signature Algorithm: sha256WithRSAEncryption
17:44:e4:af:bd:43:af:17:15:87:5c:f7:07:fe:8e:ba:f3:e2:
9f:23:d9:a8:22:1d:8e:c6:66:27:09:a8:de:02:0c:c8:58:8b:
2d:b0:66:a2:c4:42:80:3d:e5:60:6d:4d:83:d2:e7:01:ec:39:
05:46:a5:79:60:26:11:21:c3:f9:ae:3b:84:1b:11:1c:62:9f:
6f:03:26:5e:d9:66:af:20:1c:0b:91:5d:b9:57:9b:cd:d3:9e:
df:34:c1:07:6f:d7:a5:45:50:c3:4d:ac:c7:ae:d8:5e:82:00:
db:da:7e:91:a9:5b:19:39:79:61:51:42:a1:d8:65:02:02:ea:
d5:33:21:db:5a:ae:6a:36:df:97:7a:67:82:10:b1:00:e3:da:
ea:1b:ce:46:85:81:80:8b:3e:b4:a4:8a:70:4d:82:5c:ca:1f:
d7:bb:f4:02:60:89:83:ea:97:4f:95:79:7d:69:da:83:94:05:
8a:72:af:ea:06:60:f9:88:a3:ee:44:72:2c:00:a6:c7:fc:69:
7b:92:ca:a1:35:6f:c5:ac:2c:4f:42:4b:7c:01:74:21:cd:fb:
9a:5e:f3:84:89:2a:c4:4d:1d:23:f8:a6:d8:e8:f0:4d:a6:f9:
91:b9:25:6c:a6:b2:fb:1d:98:08:c7:51:72:7f:29:57:87:75:
47:bf:7c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:31 2025 by rpki-client