Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/o5qKOTRfTPnYThdIYO9xUeKi2sc.roa
File: o5qKOTRfTPnYThdIYO9xUeKi2sc.roa (raw, json)
Hash identifier: EOStnDBrp4FRFcFGDjBhhWwMtuAGb36N8+2XArtelwE=
Subject key identifier: A3:9A:8A:39:34:5F:4C:F9:D8:4E:17:48:60:EF:71:51:E2:A2:DA:C7
Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Certificate serial: 01941FFA9FD82B5FBE7B0D1D7911F2F44AE7
Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/o5qKOTRfTPnYThdIYO9xUeKi2sc.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211084
IP address blocks: 185.201.255.0/24 maxlen: 24
2a11:7c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9f:d8:2b:5f:be:7b:0d:1d:79:11:f2:f4:4a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a39a8a39345f4cf9d84e174860ef7151e2a2dac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:de:8b:05:28:e1:ff:d5:24:ce:24:98:09:
8c:e5:b5:52:3b:23:66:36:70:3a:54:ad:d8:8c:76:
d0:9b:6b:57:11:c2:d0:9f:23:e3:dd:17:1f:2b:fc:
89:83:ae:87:db:53:0b:30:31:9b:f7:8c:1f:45:ef:
64:38:0b:c5:d7:e0:8c:56:67:ac:12:7a:9f:89:80:
a4:af:bd:c3:ab:38:03:b1:7d:c5:fd:7e:e2:7c:21:
4b:41:d0:22:8c:52:bc:eb:0e:02:8e:33:d5:95:59:
4c:40:3c:01:69:8a:b7:39:9d:68:61:8f:2c:d3:65:
b6:41:e0:03:e4:e6:31:6a:43:7e:4f:35:ef:84:e4:
ff:bd:59:a5:b4:43:10:97:cc:a9:1d:58:f3:20:d9:
d8:82:ae:6d:9f:d2:ba:08:86:17:a3:05:a4:21:99:
ba:c7:0c:0d:ca:30:b6:fc:af:53:29:31:16:d9:0b:
48:43:ff:20:4f:cd:58:c7:6b:f5:a6:77:12:32:cc:
79:20:46:52:57:18:7b:57:e5:4b:11:1b:6c:b3:55:
cf:8e:bc:fa:fe:b7:df:76:2a:ca:02:69:dc:1e:2d:
97:10:26:eb:59:5d:05:7a:57:32:87:10:f8:6f:30:
b7:cf:12:c7:82:dc:3c:a3:b5:ca:b9:0d:86:ec:ee:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9A:8A:39:34:5F:4C:F9:D8:4E:17:48:60:EF:71:51:E2:A2:DA:C7
X509v3 Authority Key Identifier:
keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/o5qKOTRfTPnYThdIYO9xUeKi2sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.255.0/24
IPv6:
2a11:7c0::/29
Signature Algorithm: sha256WithRSAEncryption
37:86:c9:4c:5f:a3:6e:91:a4:96:c7:d0:cf:55:2d:98:f8:10:
0e:f2:b6:5d:07:e8:c5:02:4c:74:90:b0:a3:71:33:0c:10:42:
cd:8e:ed:ab:44:02:c8:5f:a2:49:91:c6:a5:4b:b9:cb:d2:40:
11:7c:ca:3b:c8:1c:01:f4:2c:95:34:df:6c:61:d5:a1:65:b8:
ef:51:0d:47:01:d3:85:b1:b0:5e:39:30:74:28:bb:71:c8:81:
96:37:6e:4a:39:06:8d:47:e8:33:1e:33:ab:33:82:d8:16:ef:
65:dc:6e:c2:97:7f:53:23:7e:d0:b4:41:08:53:8d:a7:67:f9:
68:02:bc:86:f5:ff:4c:15:0b:4a:8a:87:bd:2f:89:70:87:17:
af:d9:53:c8:c2:e4:c1:44:14:b3:c1:04:3e:7e:df:8f:77:ab:
15:98:30:fa:d6:39:59:ee:71:bd:60:cb:6e:c3:d9:4c:14:bf:
f9:3d:5f:65:d4:94:d5:44:f5:62:69:4d:50:06:b9:a0:e5:51:
dc:d7:36:3f:6f:ee:da:b3:ba:34:26:b0:df:d9:97:b3:5b:35:
d7:f1:0f:22:d8:00:8e:a8:e9:37:05:4b:a6:0b:b5:21:9d:bd:
7d:e8:59:56:04:d5:35:3b:99:45:71:3a:5b:e2:2f:09:45:1a:
44:ea:22:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:58 2025 by rpki-client