Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/occ86qiOIs73r7C894le5tLORUc.roa
File: occ86qiOIs73r7C894le5tLORUc.roa (raw, json)
Hash identifier: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=
Subject key identifier: A1:C7:3C:EA:A8:8E:22:CE:F7:AF:B0:BC:F7:89:5E:E6:D2:CE:45:47
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 0194228D4675941B446B53C58B48F7EFDC0E
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/occ86qiOIs73r7C894le5tLORUc.roa
Signing time: Wed 01 Jan 2025 15:47:51 +0000
ROA not before: Wed 01 Jan 2025 15:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197404
IP address blocks: 194.150.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:46:75:94:1b:44:6b:53:c5:8b:48:f7:ef:dc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Jan 1 15:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1c73ceaa88e22cef7afb0bcf7895ee6d2ce4547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:90:2e:cc:bf:c4:d4:8c:cb:3b:5a:d6:fc:
01:1b:3f:1c:54:c1:04:96:e3:45:e8:84:ca:9c:ba:
6a:1b:10:28:e6:ba:65:33:dc:b8:ab:89:52:05:0d:
a0:1f:95:62:cb:f7:e4:90:36:d1:70:53:23:e9:46:
99:b6:4e:4d:61:5b:2f:58:1d:9e:bc:9c:53:ba:40:
a9:a1:6a:7b:e3:4a:0c:4f:71:d0:81:a2:d8:ad:2e:
51:c7:8a:d0:de:33:eb:31:b2:bb:88:92:79:fa:58:
40:22:86:c2:c2:29:f9:6a:c1:ea:d3:b3:4e:a0:6f:
cd:4c:06:f9:ac:8e:b1:4f:35:d0:56:1e:e0:6c:ed:
02:b1:73:bd:ee:4e:c7:f0:24:e3:09:1f:38:9d:87:
24:ef:60:80:41:7d:5e:0b:48:b1:4b:0a:e0:8a:43:
5b:2a:37:63:01:6d:fc:c2:90:e2:cc:4b:c5:99:13:
77:54:c9:01:e8:9d:c1:3d:a4:49:2a:c0:f5:dd:09:
e0:b9:bc:37:ca:f7:a1:d3:ab:9b:cc:2b:d2:01:1f:
45:92:aa:a9:94:27:9a:5e:ed:e7:0d:2a:43:5f:11:
db:01:1e:09:a4:33:a6:9a:a8:3e:24:80:8a:61:2a:
e5:42:d9:49:46:3f:2e:8f:d1:33:04:cc:eb:2c:3a:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C7:3C:EA:A8:8E:22:CE:F7:AF:B0:BC:F7:89:5E:E6:D2:CE:45:47
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/occ86qiOIs73r7C894le5tLORUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:46:13:4d:57:2e:eb:46:7e:ed:f3:6c:9d:b7:e3:1b:0e:75:
e3:19:7f:d8:90:53:d1:fd:11:d6:38:18:62:25:fb:a4:a0:ba:
da:c5:f7:f9:c1:fa:c3:35:26:cb:b5:fb:2b:68:2f:a5:a1:a6:
b1:9b:00:52:2c:99:16:60:40:c2:1b:3b:75:99:e1:f7:89:44:
91:18:5e:b5:2c:92:0d:df:77:08:68:cc:5b:9c:70:6b:24:ef:
0f:26:a9:12:2b:2e:96:27:b8:24:19:ea:d5:92:33:50:a3:f2:
c1:51:61:27:41:ba:67:bc:58:63:e9:20:ee:20:7e:29:53:ca:
2e:ae:95:39:a8:bf:2a:0f:73:4c:fd:f8:0c:5b:23:e7:19:20:
8a:5c:c7:8d:2a:24:ac:9d:db:e5:fd:96:03:ff:c6:20:a5:8d:
8e:61:e0:3b:9d:4a:32:c9:76:14:f8:92:a8:f9:f8:48:b6:14:
0b:14:dd:5e:3e:63:5e:40:2c:06:f5:74:b4:57:93:ba:a1:a4:
2f:c6:9a:56:03:5a:2c:27:2d:d4:c6:0f:33:d0:82:17:37:b8:
45:65:34:a9:96:fc:c0:f8:12:15:33:d3:c6:b6:3d:bf:ae:97:
ed:ae:b9:d2:91:8b:b8:0c:f9:c7:48:57:c2:10:02:03:0c:e2:
84:22:01:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:37:16 2025 by rpki-client