Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa
File: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (raw, json)
Hash identifier: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=
Subject key identifier: 38:9D:52:D1:34:82:D2:E9:4A:90:54:28:7B:16:5D:7B:20:E3:FD:5A
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D62F83FB06D58A548A5F5DBE410748
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa
Signing time: Wed 01 Jan 2025 07:48:15 +0000
ROA not before: Wed 01 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211030
IP address blocks: 195.5.115.0/24 maxlen: 24
2a0d:f407:1030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2f:83:fb:06:d5:8a:54:8a:5f:5d:be:41:07:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=389d52d13482d2e94a9054287b165d7b20e3fd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:ea:79:e8:14:1b:60:fa:be:fe:81:77:f8:
f5:79:ab:3f:2e:ee:ac:8e:ad:3e:e1:20:b8:11:22:
37:96:c2:0f:b9:a2:7b:85:e5:8f:0a:09:51:4c:06:
58:0a:c0:74:1f:ab:a8:df:89:ec:5e:26:4c:ec:e3:
2b:db:a4:77:02:07:b4:a0:b8:e1:e0:13:b8:1b:00:
6c:40:70:6c:26:93:c0:a1:21:79:33:d2:9a:8e:54:
04:15:48:b5:13:c7:e4:bd:36:4c:b4:ed:2f:82:c2:
c9:4c:a5:c1:2a:90:e0:c7:c0:c8:84:a7:52:f4:7e:
af:66:b1:7e:c9:62:c1:9b:25:2b:29:89:29:7f:23:
4c:40:0d:b5:c0:cc:e3:3d:a2:be:4c:c7:a9:a9:42:
45:50:32:21:86:83:b5:a0:f7:d3:c8:88:fa:ea:da:
4f:7e:dd:3f:46:f1:75:22:1e:b1:fd:3e:a1:c8:ea:
89:c5:6d:21:e9:1d:a4:a6:13:39:a7:58:2b:3c:23:
62:7e:74:84:ed:76:60:a6:4c:e7:df:c8:b5:93:2b:
d1:60:2c:1d:e4:bb:c9:26:83:bb:1a:36:3f:0a:df:
6a:4a:dc:94:9f:11:97:9b:a8:ac:c2:d3:c3:91:b3:
9e:a6:58:a7:aa:2a:f9:46:ed:54:80:a5:76:38:70:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:52:D1:34:82:D2:E9:4A:90:54:28:7B:16:5D:7B:20:E3:FD:5A
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.115.0/24
IPv6:
2a0d:f407:1030::/48
Signature Algorithm: sha256WithRSAEncryption
59:e5:ec:f2:15:46:2d:10:73:98:b8:45:ee:26:ba:06:25:1d:
2f:c9:6e:1a:b3:03:a8:6e:d1:37:6b:0c:21:2f:c7:98:6c:e9:
20:d9:49:17:fa:85:60:dd:95:c0:b7:ef:ef:b1:b5:61:9f:77:
78:08:05:fe:73:6b:0a:12:6b:67:10:92:de:bd:ab:7e:9f:90:
48:93:cd:c3:20:f7:7d:a2:29:69:2c:12:71:b5:7d:9e:82:3b:
77:e8:41:a5:cd:e9:8d:b4:59:f5:40:1b:c2:d6:97:3d:a2:01:
cf:5c:5e:96:71:72:1c:db:13:9f:a9:1f:0e:df:60:88:79:4c:
9c:1c:da:61:d8:50:02:d5:ae:31:56:06:e4:9b:2a:59:d0:be:
cd:10:1e:e4:90:c7:8f:6d:0c:be:74:78:8e:fa:96:68:4c:4d:
6e:4d:24:24:23:e5:b2:34:2f:ca:54:91:81:ff:f2:83:06:eb:
42:cd:6c:1b:4b:9d:97:bf:be:9c:43:3b:ae:84:13:f1:1c:77:
9e:84:80:5e:6a:7f:7d:1c:cc:d4:df:83:09:7a:12:36:80:07:
0a:a9:39:e6:a2:db:59:cd:52:f3:89:85:0f:7e:76:fe:9f:df:
a8:9e:a5:f8:e4:df:e0:28:17:84:e7:27:58:56:ba:0a:29:13:
d9:ca:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:31 2025 by rpki-client