Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/OoYqylkHzmwaVAMQUI6VbW19fUY.roa
File: OoYqylkHzmwaVAMQUI6VbW19fUY.roa (raw, json)
Hash identifier: GTuWmeM87GVOh1bcDtRCfkyFY8mWiN9eSfyMgGPB+zE=
Subject key identifier: 3A:86:2A:CA:59:07:CE:6C:1A:54:03:10:50:8E:95:6D:6D:7D:7D:46
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424456CEDD559FE29A81F734C619F258D
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/OoYqylkHzmwaVAMQUI6VbW19fUY.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209774
IP address blocks: 194.179.123.0/24 maxlen: 24
212.170.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 11:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6c:ed:d5:59:fe:29:a8:1f:73:4c:61:9f:25:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a862aca5907ce6c1a540310508e956d6d7d7d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:00:6c:2b:eb:2b:04:4e:12:82:ce:a2:79:
67:23:00:7d:bd:4b:e4:0f:19:c2:27:87:f8:32:89:
72:58:6f:e8:47:62:69:d6:31:40:a2:c6:5a:78:a5:
52:3c:14:76:dc:fb:a9:10:c7:c9:21:2a:51:86:14:
43:17:3f:e3:01:ec:ba:74:50:9b:65:25:e3:15:a4:
da:ec:cf:fe:7a:45:29:0d:ac:75:fa:92:25:9f:92:
4c:76:30:1c:9c:3b:02:9b:9d:bf:83:11:60:87:76:
3a:17:8a:d1:01:08:59:c4:d0:37:bc:2b:4d:85:c2:
85:a8:55:fe:84:8a:7a:73:54:f2:e5:56:da:38:2e:
69:f6:b8:5c:87:66:e5:77:3f:aa:d5:68:02:f7:78:
1e:12:09:b1:31:91:2e:06:3a:70:13:c3:37:15:25:
04:ef:7f:25:36:59:7a:37:6c:4b:62:f8:a8:d7:74:
85:24:e1:10:d4:2d:c7:80:14:6e:9e:9c:20:e1:c0:
36:79:84:39:1f:4d:3b:0b:5c:76:18:4f:47:43:fd:
73:ab:46:4a:65:1a:d5:36:2d:8c:98:fc:03:6b:28:
ca:6d:ae:c7:6e:f2:a9:90:49:9b:b3:8d:1b:c0:ae:
86:61:59:87:15:ef:80:61:03:bc:fc:af:b5:19:ca:
43:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:2A:CA:59:07:CE:6C:1A:54:03:10:50:8E:95:6D:6D:7D:7D:46
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/OoYqylkHzmwaVAMQUI6VbW19fUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.123.0/24
212.170.158.0/24
Signature Algorithm: sha256WithRSAEncryption
93:de:8a:db:fc:a4:f3:a1:78:ec:f3:29:a8:ba:9f:bf:9c:e1:
10:f2:9c:92:ca:aa:01:9c:e2:3b:1f:44:2f:95:dc:12:b0:e1:
ba:fe:1a:01:77:98:86:5d:47:21:dd:e0:02:ae:9c:58:f0:be:
da:c5:40:6d:ae:3c:b9:ca:f8:49:a5:e5:3d:d5:fa:ec:96:ab:
88:99:0a:b6:b6:dc:66:14:6a:c9:bd:b2:db:79:8d:06:4a:4a:
d6:2e:1c:5e:65:ed:df:7b:f0:38:5d:de:ea:91:cd:5b:97:af:
25:82:92:d6:61:34:cb:09:4c:50:5c:23:d8:39:ee:92:27:59:
a8:90:06:37:13:1d:31:53:84:d3:ca:ad:c1:63:68:a9:74:03:
e2:52:a8:5d:54:c5:9f:84:43:88:09:4a:53:7c:45:6e:81:bc:
c1:d6:c5:93:f3:05:39:8c:ba:dc:f0:f0:9a:44:ce:4e:f4:d1:
b3:ab:53:15:f7:05:8e:2e:ad:77:0e:53:6e:c7:12:9c:ce:89:
ce:6f:b7:29:06:cf:b9:83:1c:63:9e:53:ac:fc:a0:cd:bc:2a:
31:f8:37:91:36:a7:bd:18:57:81:a3:3a:9a:54:a8:41:d4:e4:
50:f1:66:1c:9e:7d:94:7e:88:c9:7d:6e:00:0b:cf:aa:b8:c0:
4b:a6:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:38:28 2025 by rpki-client