Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/OZdY9tsN8gFkESVtIbXza917_a0.roa
File: OZdY9tsN8gFkESVtIbXza917_a0.roa (raw, json)
Hash identifier: izbPKaAtrUogn7SQSKm/hKiliCifOlraqF2HZIB4lps=
Subject key identifier: 39:97:58:F6:DB:0D:F2:01:64:11:25:6D:21:B5:F3:6B:DD:7B:FD:AD
Certificate issuer: /CN=c115f1341a87140a122dc8f96502b72449057e60
Certificate serial: 01942067F2421AC03498BEF787BDA5D8C74A
Authority key identifier: C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/OZdY9tsN8gFkESVtIbXza917_a0.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212991
IP address blocks: 185.158.206.0/24 maxlen: 24
2a0c:8d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f2:42:1a:c0:34:98:be:f7:87:bd:a5:d8:c7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115f1341a87140a122dc8f96502b72449057e60
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=399758f6db0df2016411256d21b5f36bdd7bfdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:2f:99:3f:d9:de:89:01:de:3f:67:b9:b0:
5c:e3:65:fe:6b:c6:00:b9:0f:78:af:af:6f:ca:cf:
1a:dc:1c:d3:32:af:d2:54:13:df:4d:25:1a:f6:d0:
cb:34:d2:ab:d5:ec:ca:07:9a:6a:d6:92:68:40:91:
c3:16:53:5c:e1:87:cd:4a:e3:fe:69:a2:74:e5:77:
ab:a0:3e:cf:3a:bb:85:f6:db:fb:b6:dd:6d:2c:42:
44:7e:23:4f:d2:ae:06:72:7d:48:39:9e:3a:0e:75:
96:2f:88:cd:b2:e3:5c:f4:b6:68:b9:28:4d:22:0e:
21:27:74:06:d7:2d:59:69:b4:15:95:24:98:ef:1b:
55:f7:3f:76:61:d8:4f:ca:f0:46:b8:2b:8c:0b:31:
e4:98:df:3f:56:ee:4b:cc:2c:c7:b5:10:6e:8a:85:
e1:88:5c:56:4b:4f:8a:ef:b6:40:ec:86:76:4d:25:
87:03:c9:6b:b7:d4:80:34:78:9f:28:a3:49:b9:e2:
d2:f5:f0:42:32:13:a9:d9:8d:11:fe:c2:d3:48:9e:
bf:c1:a0:9b:c9:66:1e:fe:16:50:0b:7e:c3:b8:fd:
b6:53:67:88:9e:7c:f5:e7:52:1d:ec:8c:fa:b1:e6:
a1:ef:c5:a0:e7:52:e5:80:d0:34:26:34:c7:c6:4c:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:97:58:F6:DB:0D:F2:01:64:11:25:6D:21:B5:F3:6B:DD:7B:FD:AD
X509v3 Authority Key Identifier:
keyid:C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/OZdY9tsN8gFkESVtIbXza917_a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.206.0/24
IPv6:
2a0c:8d80::/29
Signature Algorithm: sha256WithRSAEncryption
86:3c:2b:a6:21:cf:06:d7:86:30:6c:35:1d:5e:12:6e:df:0b:
7b:4d:ef:65:8a:08:1a:fd:d4:1a:70:d0:b4:04:bf:40:9e:74:
7f:56:c4:67:64:85:e8:a5:b9:37:49:1c:c4:01:48:19:ba:01:
e5:b0:a2:87:bf:bd:8c:4e:e4:ed:ff:a8:64:f9:b1:3b:e7:3f:
3a:76:85:ac:03:83:fb:6c:8f:59:9e:60:85:59:0f:8b:40:3b:
44:13:f8:8d:b5:66:3a:66:e4:bc:c8:83:05:56:82:17:06:5d:
1a:29:40:a6:01:e0:53:3a:8f:5d:8c:8d:d4:e2:1f:55:c9:db:
fa:fa:2b:f6:d4:eb:e5:de:14:31:6c:5f:24:c7:34:21:5e:46:
0b:35:b0:26:e1:8a:1b:92:98:dc:a7:37:bf:71:b0:97:c2:b8:
96:f6:aa:75:bf:f3:f8:14:45:17:e4:73:f5:7b:fd:2e:ca:10:
b2:0b:63:4c:13:04:8d:09:93:57:5d:bf:8f:5a:ec:1b:8a:d9:
1d:9b:cd:36:53:46:ae:ed:7d:4c:30:b2:1b:70:67:3f:1a:db:
5b:a4:4b:e8:54:da:04:d2:dd:f6:f8:2f:3e:2d:d3:47:bb:6a:
4b:1e:cd:d6:88:11:4c:86:4e:3b:38:c2:87:79:89:ff:78:b2:
e2:6b:b2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:03 2025 by rpki-client