Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dLcS1ZM-AHTeEh6hX5k-SSYL0Vo.roa
File: dLcS1ZM-AHTeEh6hX5k-SSYL0Vo.roa (raw, json)
Hash identifier: oBfyXZBMxBL6rg8NOa5cJW2paLkJv3V5FUKqrYl4fME=
Subject key identifier: 74:B7:12:D5:93:3E:00:74:DE:12:1E:A1:5F:99:3E:49:26:0B:D1:5A
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B25F3BA20AD652664E32C40A4E288D
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dLcS1ZM-AHTeEh6hX5k-SSYL0Vo.roa
Signing time: Wed 01 Jan 2025 11:48:45 +0000
ROA not before: Wed 01 Jan 2025 11:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42289
IP address blocks: 194.85.160.0/22 maxlen: 22
194.85.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:5f:3b:a2:0a:d6:52:66:4e:32:c4:0a:4e:28:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74b712d5933e0074de121ea15f993e49260bd15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:a8:02:d7:42:c4:c0:41:84:79:23:f7:0a:
1f:b1:e3:11:62:53:97:5b:7f:16:1b:ad:38:8d:d4:
06:89:83:a1:e0:ee:59:7f:c4:ca:38:d1:4c:7d:b3:
d4:a0:46:f0:e8:7a:e1:30:2b:3d:fd:a7:36:99:0a:
48:0e:d7:45:7c:67:41:f4:a0:d7:98:16:d1:83:50:
1d:62:74:ad:26:39:c6:9f:79:cf:ee:32:a1:92:40:
db:f4:29:98:ed:48:8e:0c:e7:c0:ca:19:87:ca:9a:
f1:46:b4:9c:6a:73:da:85:1d:57:f7:03:5f:cc:6a:
cf:f2:b4:72:40:c2:51:06:f7:b1:bd:6b:23:0f:a0:
a1:4f:6c:dd:87:9b:64:51:44:45:76:4b:d0:a6:fa:
24:df:2e:e8:88:20:45:76:28:ec:0f:4b:f4:e7:e5:
a1:7a:90:b4:45:1e:a6:13:35:fe:a8:df:5d:4c:8c:
7d:92:45:8f:f9:54:59:c5:79:3d:76:38:56:74:40:
c8:42:14:de:cd:1f:21:19:65:29:77:d5:ea:d8:2b:
a4:f9:6d:c3:a1:06:f4:1c:fd:87:c0:34:14:1d:ae:
a6:f2:4c:ff:8c:dc:64:0a:24:a9:40:d5:52:95:c9:
cf:7a:ce:df:24:73:c3:8e:d5:21:b8:3b:e7:cc:77:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B7:12:D5:93:3E:00:74:DE:12:1E:A1:5F:99:3E:49:26:0B:D1:5A
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/dLcS1ZM-AHTeEh6hX5k-SSYL0Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.160.0-194.85.165.255
Signature Algorithm: sha256WithRSAEncryption
39:0f:01:3b:f8:3a:6c:92:b4:05:5a:b9:cc:2f:80:b9:7d:8e:
a2:5d:18:06:bf:7a:4d:64:1d:ce:98:2d:f2:60:47:6e:30:26:
cf:eb:d5:46:72:79:35:e6:ba:ea:6e:34:81:0f:59:6a:5c:18:
91:37:45:5c:27:ba:d6:cb:e4:7f:c3:14:3b:ce:37:f9:72:b0:
0f:0d:aa:ac:33:20:5c:37:49:40:04:12:bf:2b:e3:45:c8:55:
51:2c:98:8b:48:9c:e3:35:fc:cc:25:ef:5c:98:f4:c6:d7:5a:
0b:97:19:be:b7:b8:ca:07:c3:8b:45:d0:43:a9:23:6e:b2:46:
7d:60:3c:80:f6:1e:c1:ed:7e:b1:f6:10:bb:eb:8c:4e:47:3f:
ad:fd:fe:fe:7a:39:74:c6:c5:b6:28:a4:8a:41:4f:0f:14:4a:
44:46:b2:9b:50:93:86:b1:e9:56:ab:62:ec:5b:df:94:80:f3:
2a:1b:20:97:bd:d0:9d:67:4c:96:c6:7b:81:36:2e:9d:c1:92:
47:fe:41:54:5e:92:33:71:85:e4:2c:62:75:d1:40:93:bb:92:
20:cf:44:42:9d:8a:ec:fc:30:80:2a:d4:5e:78:e7:60:c7:9b:
50:ca:06:56:ca:4c:37:20:9e:6b:75:08:b3:0f:6b:6a:c0:45:
36:b2:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:30:06 2025 by rpki-client