Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/o5ELM4xYmad2C_2xxSWlwJhmr5o.roa
File: o5ELM4xYmad2C_2xxSWlwJhmr5o.roa (raw, json)
Hash identifier: DRFJi1VatiJUae8GoAxelcGEqzT42Z4nJl4HxitHaE8=
Subject key identifier: A3:91:0B:33:8C:58:99:A7:76:0B:FD:B1:C5:25:A5:C0:98:66:AF:9A
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 019428238E04186B77C4CC4BBB06DA61D470
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/o5ELM4xYmad2C_2xxSWlwJhmr5o.roa
Signing time: Thu 02 Jan 2025 17:50:06 +0000
ROA not before: Thu 02 Jan 2025 17:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 286
IP address blocks: 194.151.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:8e:04:18:6b:77:c4:cc:4b:bb:06:da:61:d4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 2 17:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3910b338c5899a7760bfdb1c525a5c09866af9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:55:7b:14:63:4b:94:5c:59:e0:ef:05:46:
fe:b0:a5:f9:c9:65:3d:b0:fe:69:0d:61:72:87:2d:
7d:5a:1b:97:50:ab:1d:e4:cd:5a:cb:2d:c5:af:26:
0c:35:fa:b7:b9:c6:02:6f:2e:e4:2a:e0:71:0c:40:
db:56:a8:f4:0a:8c:e1:b4:2f:ab:8f:74:50:2a:d7:
ee:05:04:b6:42:1e:18:79:1f:10:81:c9:f7:1a:fc:
a9:e2:2b:08:1a:4b:20:b2:0c:48:fc:2c:e8:b1:d2:
ab:aa:5d:69:1a:ff:f5:84:5a:f7:2a:ee:66:e1:e4:
c1:cb:e4:3a:45:2e:76:c2:d2:b0:d1:30:ae:f7:8a:
61:0c:3f:a6:d0:3b:ee:06:f8:5a:3d:73:bd:b4:48:
e7:f1:8a:91:50:a5:b6:d8:d1:9d:a4:ec:9a:92:71:
5e:d0:ae:4f:98:70:1e:8b:76:2a:36:01:39:cd:b7:
4a:1a:8e:8c:23:be:14:2e:5e:18:23:cc:50:e9:ad:
c2:fc:cb:0c:52:44:77:95:90:b3:b5:e6:be:b1:36:
41:47:47:e6:30:b8:20:a2:eb:35:f2:35:d3:86:b8:
16:30:7f:57:b2:6b:92:cd:ba:7a:c9:4a:be:a5:52:
fc:95:25:7e:ea:4a:07:1b:6e:a3:6b:26:65:2c:c6:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:91:0B:33:8C:58:99:A7:76:0B:FD:B1:C5:25:A5:C0:98:66:AF:9A
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/o5ELM4xYmad2C_2xxSWlwJhmr5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.151.203.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ca:54:37:65:a8:d0:c3:b3:90:9f:1b:f6:5c:f3:a9:d7:4e:
39:06:e3:21:fa:62:04:c2:58:8e:57:87:3b:f6:77:1c:d8:e2:
3f:d4:02:e3:cc:a6:b1:3c:33:ca:dc:7b:f3:e4:6b:6c:81:8f:
c6:ec:5e:d1:2c:d3:82:7f:cb:e7:4c:3e:8b:aa:d2:79:db:79:
75:cf:78:4b:36:ef:4d:20:b7:a5:8f:df:53:a5:19:97:29:4a:
b5:da:e2:3b:cc:16:6d:cc:ae:06:35:e1:42:e3:61:ab:79:fe:
3c:8c:e2:5c:e2:3e:3e:62:b1:3e:5c:fa:35:ac:fd:95:71:ee:
15:2e:61:05:e4:d5:5a:e8:3b:6e:29:f9:68:88:a6:22:84:88:
fc:2f:30:36:76:67:db:3d:54:1d:60:5a:b1:db:5f:8e:af:93:
2b:cb:8f:4a:ca:29:e4:f0:cc:8b:7b:7b:0a:06:81:6e:e2:9a:
6f:e6:7f:80:74:5b:c7:35:70:05:48:40:32:b6:f9:51:00:0b:
c4:da:fa:ef:a9:fb:75:3a:0a:0a:46:d9:46:30:4a:f6:74:5d:
db:47:f0:ee:d7:67:7a:99:a4:3b:1f:e4:a4:fa:c6:e4:2b:de:
11:8a:0e:bd:8a:b8:6d:55:d2:9a:62:ae:1f:ad:b7:be:f7:70:
65:79:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:49:47 2025 by rpki-client