Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa
File: Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa (raw, json)
Hash identifier: hR4K2IN0h854R5KFI9PRtJJgGILNncSrA/6ie+JyY0U=
Subject key identifier: 3A:1E:4C:06:B4:8D:40:BF:8C:21:03:3B:9A:F7:13:4A:5E:01:C6:5C
Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial: 019421B1F4061A24D33A64993B35EF401BF9
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa
Signing time: Wed 01 Jan 2025 11:48:17 +0000
ROA not before: Wed 01 Jan 2025 11:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47432
IP address blocks: 195.182.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 23:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f4:06:1a:24:d3:3a:64:99:3b:35:ef:40:1b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Validity
Not Before: Jan 1 11:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a1e4c06b48d40bf8c21033b9af7134a5e01c65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b2:77:2b:f7:36:1f:4e:a9:21:a5:4f:14:8f:
88:1c:40:f1:c9:de:41:12:e1:1d:77:45:37:42:10:
aa:03:0c:66:2c:c1:12:32:ba:17:a3:da:82:d4:09:
3e:08:02:46:35:f5:c3:a8:19:9e:16:2f:ad:3a:95:
f1:98:f3:0c:2e:fb:b7:8c:35:4d:72:da:d3:67:9c:
6a:fb:80:5a:d5:79:c8:fd:01:0e:af:36:86:d2:90:
4d:cb:2f:1e:24:70:f7:37:41:2e:3f:fb:15:dc:79:
ed:e2:de:de:a9:1b:d8:50:92:81:b7:21:a8:6f:2d:
58:86:cc:c7:de:53:5f:df:e5:0b:ea:fd:e8:37:4f:
de:17:5b:25:7c:14:46:eb:4b:55:a5:1b:c0:d2:0d:
d4:cf:18:b3:60:be:33:79:50:ef:71:56:3c:5d:e5:
a9:d9:39:77:1d:57:a7:f3:3f:e0:55:99:95:75:ea:
19:61:63:53:90:16:82:05:8c:99:84:66:e7:da:ef:
f6:84:85:cc:c9:4b:a9:0a:f9:92:a3:d7:6a:32:37:
4b:28:0e:81:31:5d:c9:b9:d8:de:27:e3:38:69:1f:
7f:59:90:a3:d7:8c:fc:64:7f:f8:f8:f2:0f:02:fc:
7f:bf:de:cc:5e:69:29:e3:d8:87:c7:82:b8:5d:e7:
e2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1E:4C:06:B4:8D:40:BF:8C:21:03:3B:9A:F7:13:4A:5E:01:C6:5C
X509v3 Authority Key Identifier:
keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.18.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b0:4c:3c:8b:c7:c6:00:35:f4:34:c4:cf:f3:63:ab:e7:4c:
96:13:32:03:84:a6:32:aa:f3:75:18:7a:3c:33:a5:79:a9:72:
cc:46:63:1d:e8:1a:84:7d:44:2a:f0:6f:9a:35:66:d5:c1:39:
4d:00:b2:39:a5:22:e3:d3:02:c4:5f:b3:25:e1:68:74:0a:3d:
7b:a2:2b:56:cc:d2:48:95:06:63:c9:f9:07:86:42:65:b3:00:
15:57:d5:7e:a0:86:9d:b4:77:0a:5d:c5:bb:ad:11:e1:1b:f6:
3d:05:97:83:14:00:98:94:e2:73:00:74:fb:60:aa:31:0a:5a:
a0:c1:d4:ff:bd:d9:b2:ec:b1:b1:b5:50:ba:d0:7b:78:12:56:
07:1c:91:d4:98:69:ba:ff:4b:14:fc:6b:af:3c:9f:a4:80:0d:
98:d2:9f:c1:01:02:79:5b:72:2e:eb:ba:b7:70:7b:13:98:dd:
f9:52:d9:83:83:aa:7a:02:f4:52:1a:63:9c:b0:65:09:57:cb:
9b:b3:29:7c:08:1f:8a:6a:ed:c7:0e:09:59:8f:73:d4:5b:4a:
ff:68:83:59:d0:69:00:57:a6:5f:67:44:9f:dc:60:be:13:8c:
61:d3:84:19:eb:ed:07:6a:9a:44:d8:56:54:54:d0:1b:83:b9:
95:9d:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:53 2025 by rpki-client