Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/Om_TmuMO8XG3pBM8gxAFde2dWMw.roa
File: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (raw, json)
Hash identifier: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=
Subject key identifier: 3A:6F:D3:9A:E3:0E:F1:71:B7:A4:13:3C:83:10:05:75:ED:9D:58:CC
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 01942444C5E9C9845267DF8FDE433E7B800D
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/Om_TmuMO8XG3pBM8gxAFde2dWMw.roa
Signing time: Wed 01 Jan 2025 23:47:54 +0000
ROA not before: Wed 01 Jan 2025 23:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39402
IP address blocks: 185.118.24.0/24 maxlen: 24
185.118.25.0/24 maxlen: 24
185.118.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c5:e9:c9:84:52:67:df:8f:de:43:3e:7b:80:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a6fd39ae30ef171b7a4133c83100575ed9d58cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:d7:32:cd:be:7d:3c:55:27:f9:07:ed:22:
77:b9:69:27:71:26:2a:77:6f:d4:d0:5b:fb:5d:ac:
d4:33:51:74:ee:42:2a:2a:6a:cc:db:9b:1f:77:aa:
07:34:c2:4d:ca:35:ff:42:ea:1a:fc:1c:d9:68:be:
29:a6:b9:58:7d:50:82:36:65:44:d8:91:39:0b:72:
23:25:01:9a:4e:ab:3d:dd:55:33:11:73:13:6f:97:
75:cb:a0:85:45:d5:c1:2c:33:65:e5:0d:d5:71:b2:
00:38:34:c2:07:c1:d0:ec:5d:e9:8b:e6:da:d9:b8:
2f:ff:d8:e1:28:18:ec:a3:e4:1e:93:35:60:1f:4e:
31:f9:4b:13:63:5b:88:2c:89:2f:01:0e:32:11:e3:
3c:4a:54:06:04:96:14:8d:83:55:93:ce:62:b6:fd:
4a:c7:f5:9b:f8:5d:e0:03:1a:e7:e6:d6:b9:c9:cd:
57:fb:22:c6:aa:7c:43:5a:00:8b:03:5b:2b:26:35:
34:a9:ca:a0:f5:5c:6e:cd:7b:27:e4:b8:ac:93:cc:
dd:14:85:bd:61:7e:c1:1e:be:e9:1e:ff:1d:99:55:
a9:bd:f2:43:6d:fc:7c:af:57:3f:ae:92:ae:a6:3d:
9e:91:bb:55:bf:c9:8a:74:f5:4e:c1:e8:f1:4b:77:
6b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6F:D3:9A:E3:0E:F1:71:B7:A4:13:3C:83:10:05:75:ED:9D:58:CC
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/Om_TmuMO8XG3pBM8gxAFde2dWMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.24.0/23
185.118.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fb:16:fc:d1:89:9e:01:31:24:f6:00:84:e1:e4:da:f7:64:
64:b5:9e:f5:36:76:71:0d:b2:4e:0c:d4:49:e1:47:36:eb:75:
f0:8a:f6:0b:1b:f1:8d:7e:c9:2b:60:88:e2:b4:3e:a1:64:e8:
e7:17:70:fd:12:7d:d4:5d:3e:18:fc:d6:bf:1d:0b:e5:e5:e9:
22:48:79:55:38:99:e3:bb:49:17:a2:e9:bb:bb:23:1c:1a:44:
a4:b3:e6:af:e8:60:ef:6c:91:51:af:3c:2a:be:94:b8:e6:4e:
d1:90:ea:ad:e5:52:bc:b1:08:12:33:d6:7e:9e:49:18:df:f1:
d3:73:77:25:91:27:a7:72:1f:97:62:79:6a:ff:fe:74:1f:0a:
af:4b:16:b6:15:83:f4:5c:76:0e:8e:b0:f5:06:92:ab:75:23:
d1:a2:0e:79:21:a9:a4:1f:e6:9e:0e:7a:ea:8c:e2:88:f3:3b:
59:a3:d3:25:15:7a:54:35:6f:39:ae:00:f6:d7:7f:58:1a:d5:
fe:b7:cb:5b:9a:4f:cd:77:4f:69:43:65:59:db:f9:fc:5a:a7:
bb:dc:9c:d7:2e:d1:e1:b9:5e:c0:36:ee:23:cf:6c:a1:7a:7b:
fa:24:95:b6:3a:86:b5:49:b5:96:1a:e8:ff:90:02:7d:38:61:
24:16:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:44:07 2025 by rpki-client