Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa
File: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (raw, json)
Hash identifier: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=
Subject key identifier: A0:11:11:ED:75:A7:66:07:52:6E:3D:C2:CE:FF:6E:69:41:51:DA:C4
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BC7AD298C7BEED493043237681EB0
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61091
IP address blocks: 185.11.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c7:ad:29:8c:7b:ee:d4:93:04:32:37:68:1e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a01111ed75a76607526e3dc2ceff6e694151dac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ed:49:e7:1a:31:14:ca:83:17:1e:18:d8:26:
3f:95:55:18:8c:60:fc:e5:4a:32:4a:90:ff:62:03:
40:67:c5:55:52:60:27:0f:39:22:5e:f1:4d:7c:7e:
ec:99:fc:93:54:cf:30:aa:26:58:f9:09:f5:8e:77:
37:71:4a:c7:3e:ad:ee:02:c0:26:ed:0b:8d:6f:8d:
5d:0c:b9:53:a4:3b:0e:61:dd:23:59:72:25:c9:7f:
37:80:d9:72:e2:ca:22:05:11:8f:4c:6a:9c:0d:cf:
71:57:05:c3:19:32:4c:87:b7:18:6d:2b:ea:67:09:
39:f3:9a:41:1b:90:6b:1e:33:2b:5d:2c:0d:28:e3:
bb:aa:8e:2c:28:97:04:58:d9:c1:ef:7d:c8:21:f4:
1c:af:69:bc:3f:cf:39:c2:2e:7b:76:98:e3:5a:e7:
9f:9c:68:ee:21:66:f7:0e:57:60:22:16:f8:bc:3c:
73:9a:92:d9:87:99:de:2d:66:e2:2d:ff:f6:81:7d:
c8:f3:8e:47:e5:c8:6f:d1:c6:3a:fd:bc:53:48:81:
70:2c:45:03:dc:89:a3:fc:87:75:f0:fe:1c:dd:5b:
60:8a:16:d9:f1:53:10:0e:82:bb:b3:48:fa:47:a7:
01:cf:fc:2a:47:af:fd:f8:33:a6:89:74:49:4c:75:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:11:11:ED:75:A7:66:07:52:6E:3D:C2:CE:FF:6E:69:41:51:DA:C4
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5a:66:f5:76:6d:59:1a:49:cf:14:58:2e:1a:3f:72:75:b5:
0d:6e:13:bb:05:79:54:22:8d:4e:3f:57:57:65:6e:df:33:b7:
13:44:c8:98:e9:bc:b9:b5:70:17:b6:d0:c4:4c:0c:8b:6d:0e:
f3:3d:32:0f:e5:9e:f9:1b:f4:a1:8b:e5:25:f1:37:2a:24:2c:
1c:5e:20:1c:85:26:70:b8:e9:c7:11:4d:ed:c0:05:ad:2b:8b:
43:7f:f8:87:a1:10:0c:97:1d:78:a8:93:2c:b5:e5:48:5b:29:
aa:fa:06:5a:73:1d:f6:c8:1f:78:3b:0e:d3:11:05:f1:2e:ba:
ec:b1:63:48:24:e8:ae:65:70:ae:ca:1a:f2:3f:16:b5:75:3d:
19:f4:5f:83:16:21:db:49:9c:5e:62:49:d7:3a:3b:58:ca:50:
7d:26:a4:b1:d0:a0:57:a3:14:73:23:51:ac:d3:1c:9a:ac:f5:
57:ea:43:25:ee:ef:e3:b0:cb:a2:a6:25:9c:4f:4f:c5:10:d9:
42:1d:b4:97:8a:60:a1:fb:b9:eb:18:65:b1:e4:45:cd:38:4a:
1c:32:3a:d9:80:f8:16:ac:ee:82:ea:6d:3b:57:5f:56:d2:d5:
fe:62:6a:97:11:16:d4:0b:17:2b:45:29:9d:db:bb:84:f1:ff:
a5:ca:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:48 2025 by rpki-client