Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa
File: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (raw, json)
Hash identifier: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=
Subject key identifier: 3B:3F:8E:17:B4:14:85:FF:4E:91:83:98:E8:4A:F9:67:92:FF:7A:E7
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 0194222030BF46627C6FC8AC116CD03F0D2F
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35435
IP address blocks: 194.187.84.0/24 maxlen: 24
194.187.85.0/24 maxlen: 24
194.187.86.0/24 maxlen: 24
194.187.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:30:bf:46:62:7c:6f:c8:ac:11:6c:d0:3f:0d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b3f8e17b41485ff4e918398e84af96792ff7ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5b:27:fa:0a:85:2c:35:90:fe:06:f0:21:dc:
f1:81:81:bc:d8:f9:e4:44:d0:62:8c:45:ab:3a:b5:
dd:55:3a:47:e5:c1:02:cd:34:63:7b:a1:3b:ef:99:
ed:25:8c:37:73:f7:de:f5:80:b3:ce:d0:46:d3:97:
a0:20:17:32:42:c4:ba:34:82:32:8d:5a:0c:7b:37:
1f:46:19:ce:6d:f5:53:47:a1:cd:2f:9e:36:7c:ee:
22:31:62:1d:ec:d1:84:c7:10:ff:aa:b8:53:8a:eb:
82:2a:f3:72:89:a1:d5:93:f4:a2:bb:31:cf:2f:7b:
f0:21:85:1b:c9:79:a5:36:fb:41:f9:0e:75:0f:ad:
73:29:71:87:54:8f:6d:62:8f:37:b6:11:bf:54:78:
85:27:a0:70:e2:29:e1:32:19:2d:1e:59:bd:d4:af:
53:0c:24:5a:33:a9:87:f0:3a:f0:cf:7e:5c:c3:a6:
09:02:2a:bf:9d:71:22:97:20:55:c3:99:2a:18:6b:
ea:30:d3:b9:d4:da:41:0c:f8:b3:8c:55:e4:5b:d6:
8f:e7:24:16:9a:f8:1f:ef:73:9b:3f:d5:9e:54:2d:
f6:44:5d:e1:0a:1f:8d:1b:25:82:4f:06:6c:37:e0:
69:22:9b:4a:a8:c3:6c:fd:5c:d3:1f:98:1c:7f:5b:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:8E:17:B4:14:85:FF:4E:91:83:98:E8:4A:F9:67:92:FF:7A:E7
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.84.0/22
Signature Algorithm: sha256WithRSAEncryption
15:20:af:26:78:bd:07:68:59:97:95:79:27:bc:10:c0:4c:b4:
f6:63:6a:54:07:e5:e7:dd:76:75:4b:50:d5:1c:96:e7:6d:7e:
36:57:74:fe:55:2c:0b:60:27:9d:60:36:82:9e:ca:55:f9:ef:
04:2e:1c:7e:d7:6d:47:a0:20:40:65:bf:9b:b2:ca:17:f7:27:
54:2e:e3:4c:99:37:e6:0b:c0:da:20:da:ea:cf:2d:ee:38:c8:
d3:89:b6:ff:17:d7:c9:70:de:e3:87:70:77:76:00:4a:c7:dd:
40:5d:6e:3f:0d:77:df:a7:d5:a4:83:fe:f6:8a:c2:1e:86:cb:
89:08:cf:25:cb:f3:15:dd:4e:31:2b:0d:48:ec:61:ba:7c:7a:
6b:69:89:74:9c:2c:ce:e7:02:01:d0:38:05:72:77:5f:65:dd:
85:ad:20:0f:70:66:cb:3a:65:9e:d6:c7:bf:39:8d:41:44:4a:
09:fd:57:43:5a:24:83:bf:9c:e7:78:6d:23:2a:43:96:99:c4:
49:56:38:d8:0c:dc:b7:08:87:68:e6:3c:1e:da:cd:db:7e:5a:
50:c3:e6:ec:39:8d:76:ea:9a:b8:86:16:ca:5b:14:3e:e7:7c:
ae:68:a9:b1:80:03:3a:ff:3e:08:43:06:6f:20:c6:0f:3d:25:
ca:db:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:43:40 2025 by rpki-client