Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OcQCjz_2j5-3zIdWknPabUasku4.roa
File: OcQCjz_2j5-3zIdWknPabUasku4.roa (raw, json)
Hash identifier: S+G5z/shZ7XQ2JilLHC18cGs84sY46ye+KJbm+8hnQs=
Subject key identifier: 39:C4:02:8F:3F:F6:8F:9F:B7:CC:87:56:92:73:DA:6D:46:AC:92:EE
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B25DA8F96F96C781B3BF8BF413D95C
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OcQCjz_2j5-3zIdWknPabUasku4.roa
Signing time: Wed 01 Jan 2025 11:48:44 +0000
ROA not before: Wed 01 Jan 2025 11:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34849
IP address blocks: 80.250.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5d:a8:f9:6f:96:c7:81:b3:bf:8b:f4:13:d9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c4028f3ff68f9fb7cc87569273da6d46ac92ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6d:21:cd:8b:4e:86:7e:03:c3:5d:19:9b:55:
a7:14:92:83:6a:e7:63:1c:c9:be:50:51:b3:ed:3c:
bf:a1:f1:28:53:a1:ac:b8:a4:7f:8c:da:7f:7a:c9:
86:73:ae:a7:50:21:95:65:68:6a:5e:a0:25:78:65:
71:86:dc:59:26:3f:a5:09:d3:81:d3:ae:a4:da:2c:
39:e4:08:49:a0:d0:1d:14:87:04:9a:81:b4:e5:e9:
a0:7a:f4:c4:16:b3:d0:3d:0f:f5:7e:eb:87:39:b0:
a2:56:5e:b4:78:4b:26:dc:ea:75:98:4c:f8:8f:be:
3b:24:aa:59:e5:82:73:77:52:68:84:39:33:0d:4f:
af:c1:4b:79:c7:fb:19:ae:d9:84:39:c2:9e:e6:62:
c0:e7:89:6b:0b:10:24:bb:28:1b:2f:04:f1:ac:b5:
98:fe:8c:70:9d:45:6e:f8:0b:30:bb:21:5b:b6:d1:
21:c2:34:b6:4d:49:b0:51:91:d0:db:8c:66:cf:d9:
89:35:3a:0b:05:6f:55:d9:71:87:b4:63:bf:35:6f:
8e:9c:dc:31:d1:7a:9b:da:bd:6a:57:0e:08:4f:2f:
28:f8:11:c5:bf:0d:2b:0a:57:67:b9:3b:3f:86:77:
26:a2:5a:da:ff:a5:33:00:f1:f1:0d:7b:b6:04:fe:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:02:8F:3F:F6:8F:9F:B7:CC:87:56:92:73:DA:6D:46:AC:92:EE
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OcQCjz_2j5-3zIdWknPabUasku4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.250.174.0/24
Signature Algorithm: sha256WithRSAEncryption
05:2a:97:47:0c:86:66:a8:0d:2c:e7:db:c6:15:c6:18:84:85:
e2:32:be:ec:db:64:e8:23:d2:d5:99:70:a0:a1:96:f3:d1:87:
2c:73:9f:0b:b7:bf:39:18:fe:a5:c5:f4:bc:f6:23:7f:53:7a:
8d:99:6e:63:9f:63:af:78:e0:88:81:0a:bd:21:8c:7a:00:b6:
eb:f1:d9:7a:2c:95:db:87:6e:f5:2a:8b:22:c4:01:1e:5d:58:
2c:be:f3:f3:61:0a:3e:d7:10:bd:bc:79:71:b8:a0:88:51:b8:
fe:3a:1b:7e:2d:7f:ce:99:5a:e7:7d:93:0c:6d:a0:3d:0e:1d:
2c:f3:90:e7:4e:3f:85:e2:03:90:1f:2e:0f:30:25:04:63:4f:
c8:64:0f:18:5f:98:40:f3:54:09:74:38:64:c5:bf:c1:43:22:
10:5e:9b:52:85:a2:f1:fe:6f:78:eb:b7:42:b5:dd:25:e2:02:
40:2b:03:2a:3b:bb:45:47:de:47:c3:d0:2f:a0:ac:bf:24:9f:
84:92:af:39:06:aa:52:84:f3:43:94:b7:c2:da:8a:ca:d9:3a:
ff:ea:be:89:55:1e:01:a2:11:92:2b:33:80:f2:0e:f7:82:49:
e3:d5:33:71:bf:ca:8f:14:be:10:61:ba:9c:46:d3:be:3f:75:
98:75:23:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:45:33 2025 by rpki-client