Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/oaN4yOuUZWer1oyAv42pNEmS1lA.roa
File: oaN4yOuUZWer1oyAv42pNEmS1lA.roa (raw, json)
Hash identifier: bWawtvN5Aloht1XArh7hv9uyzbYN+7dK/0yLZKjk+2o=
Subject key identifier: A1:A3:78:C8:EB:94:65:67:AB:D6:8C:80:BF:8D:A9:34:49:92:D6:50
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B3A9482AD339B53D99837F80123549
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/oaN4yOuUZWer1oyAv42pNEmS1lA.roa
Signing time: Thu 02 Jan 2025 15:47:53 +0000
ROA not before: Thu 02 Jan 2025 15:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201814
IP address blocks: 45.138.16.0/24 maxlen: 24
91.206.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:a9:48:2a:d3:39:b5:3d:99:83:7f:80:12:35:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1a378c8eb946567abd68c80bf8da9344992d650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0b:58:ec:ef:7f:90:ca:9f:ed:97:fe:56:af:
78:af:8a:de:d0:5c:1c:ba:54:2d:10:55:cc:3e:42:
2b:d5:9a:e4:1b:a9:b8:4b:9c:33:52:33:7e:96:aa:
1f:67:ae:d8:4b:83:4f:13:20:82:f1:bb:27:e0:b6:
fb:76:83:4d:1d:ae:7a:f5:1f:e5:0e:4e:49:b1:47:
e6:0d:81:75:c2:b2:92:8a:ce:75:08:40:b6:7f:0f:
88:48:c0:f9:b5:b5:83:f7:be:be:06:8d:1c:df:c9:
97:74:e8:66:1c:a9:f6:40:78:06:f0:29:e3:34:4d:
46:55:e2:4b:0c:5b:a6:b7:d9:1b:e1:31:f8:73:43:
78:b5:2b:c7:ea:94:5d:96:53:59:80:19:c3:2a:f7:
03:95:a3:f1:b1:cc:d6:e7:54:22:c1:ab:80:d6:dc:
70:49:b4:c8:e8:27:80:a4:58:38:bf:24:7d:1f:87:
7a:30:4b:e2:af:40:89:cf:f0:05:c8:bd:39:d0:c1:
2e:26:72:43:31:b1:8f:24:9d:e3:14:16:38:7a:e8:
9e:4c:96:ef:b3:ee:ee:26:da:dd:36:26:64:a0:58:
1c:5c:81:e0:1c:8e:e6:d4:4c:33:00:69:20:3b:46:
32:cd:5a:10:b7:75:8c:4b:d6:b8:9b:8a:4f:d5:01:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A3:78:C8:EB:94:65:67:AB:D6:8C:80:BF:8D:A9:34:49:92:D6:50
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/oaN4yOuUZWer1oyAv42pNEmS1lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.16.0/24
91.206.169.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c0:fb:1c:36:f7:d5:cf:5c:40:f3:93:08:f6:b6:0b:1d:51:
b1:db:dc:23:82:ab:a7:18:9f:d6:61:e3:e4:ce:59:94:93:b9:
7f:f3:4f:08:98:6f:23:a9:0c:f1:0c:c5:d4:46:52:ff:83:21:
b9:3f:1d:f0:a3:51:3a:f3:5f:6e:75:9b:ad:f6:65:73:34:99:
83:84:9e:c4:01:ad:05:71:d5:d5:dd:6c:d7:99:34:37:d4:b7:
35:c4:83:76:0d:84:ce:f9:6b:f6:12:73:ed:0b:ed:9a:d7:e3:
2c:cf:10:53:8f:c6:2d:f8:d3:02:5f:94:52:92:ef:8e:a1:29:
62:3d:ed:b4:7c:70:3d:82:e2:8e:74:bc:9c:9e:8d:d9:71:5d:
98:e5:19:e2:e2:a1:58:36:56:5e:a4:b1:96:c6:10:a3:82:e5:
4e:1f:1c:89:8a:8c:8e:de:ae:54:f1:d5:d7:0d:2b:a8:17:e6:
37:88:1d:f3:64:35:0e:48:49:d7:ad:1e:4d:8d:48:61:10:57:
8a:7d:af:3b:54:fa:2f:7c:c1:26:4b:3d:a5:c3:0b:f4:76:7c:
81:6d:09:9e:7b:a5:b1:c7:93:2f:12:ee:ce:1a:c2:dd:2e:88:
48:3b:44:e5:be:5f:fb:9c:56:db:c3:9d:ac:72:d3:4d:d9:07:
b5:27:7d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:38:33 2025 by rpki-client