Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/oCJJrRfoo8H3YgquVy_N1Ylv_zU.roa
File: oCJJrRfoo8H3YgquVy_N1Ylv_zU.roa (raw, json)
Hash identifier: Tjv7UVC3GdT2fG6/nxQ9U8W54XPlZjEYySWYZ6Q3YSo=
Subject key identifier: A0:22:49:AD:17:E8:A3:C1:F7:62:0A:AE:57:2F:CD:D5:89:6F:FF:35
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01942369CEBD5307E03A343F1E67CCD8FE8A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/oCJJrRfoo8H3YgquVy_N1Ylv_zU.roa
Signing time: Wed 01 Jan 2025 19:48:44 +0000
ROA not before: Wed 01 Jan 2025 19:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57013
IP address blocks: 185.210.138.0/24 maxlen: 24
193.42.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:ce:bd:53:07:e0:3a:34:3f:1e:67:cc:d8:fe:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 19:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a02249ad17e8a3c1f7620aae572fcdd5896fff35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:cc:be:aa:a6:6b:0e:7f:05:95:9a:d8:b0:
e4:34:b9:5c:a6:80:95:3c:87:d1:80:1a:f8:30:ea:
7b:a8:f7:2e:93:e3:54:70:8a:24:35:5a:79:a9:88:
f0:e2:7d:e1:d3:00:5e:67:6c:e7:ef:cc:82:03:09:
9c:bc:1e:67:20:0f:20:b4:5d:35:c2:a2:a6:9f:60:
1d:08:66:c9:b2:77:e5:76:c3:7c:34:13:e5:2a:f8:
b1:35:c2:97:21:f0:c8:f9:2c:2c:37:93:a1:92:cb:
0b:03:ae:34:a9:a0:34:a4:83:93:3b:c6:03:63:45:
38:d3:f1:4f:8a:37:ae:e7:d6:c0:38:d6:8f:1f:20:
36:e3:e6:f0:04:c9:e8:24:0e:96:86:d8:b8:48:a1:
30:59:9b:25:f9:e8:98:59:99:51:5e:7f:69:61:15:
70:02:e9:b7:80:d3:50:2d:5d:91:67:10:70:c9:5b:
67:26:6b:e5:31:f5:02:22:11:a0:78:d5:bd:c5:72:
59:a7:ce:46:eb:31:a3:a4:29:43:14:7d:4b:67:3e:
b4:1d:cf:d1:d9:07:ed:35:b9:bb:bc:ba:63:9c:ab:
be:62:6f:c9:d2:f2:04:86:30:34:f7:c8:84:b0:11:
5c:21:48:e3:30:9e:d7:aa:a6:71:91:6c:33:3e:f9:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:22:49:AD:17:E8:A3:C1:F7:62:0A:AE:57:2F:CD:D5:89:6F:FF:35
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/oCJJrRfoo8H3YgquVy_N1Ylv_zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.138.0/24
193.42.122.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b1:55:e8:01:c4:44:a7:fa:4f:f6:a4:7e:2d:60:55:aa:94:
fd:46:5c:bc:b2:a4:58:da:44:8a:8e:d0:1e:bf:97:c5:f8:de:
1a:b2:74:81:e5:12:50:2a:e0:ed:ee:3f:6a:cb:f7:6a:3b:27:
bb:46:ee:9b:83:99:2e:d5:2f:fe:c9:36:f4:8a:fb:aa:29:ee:
7a:ed:24:07:74:ad:1e:45:e9:36:55:4d:d6:6a:c7:57:ed:10:
43:4b:7d:b5:de:07:16:d8:89:f8:f5:88:90:53:ed:2b:75:3e:
57:65:b6:82:19:5b:4f:51:94:9f:7d:a8:8d:4c:70:3a:bc:18:
ba:0f:bf:cc:b7:44:91:e0:c8:d5:54:ea:d1:b9:b9:e1:c8:d1:
d4:08:0e:e5:9a:0a:1b:48:90:db:03:99:b6:8b:00:91:d4:33:
07:35:9f:a1:c0:03:d1:11:90:b4:b4:5e:d4:53:3a:f1:79:2d:
ac:a7:19:3c:d7:57:7e:e3:a0:d6:89:a0:7b:f3:de:2e:39:5a:
94:0e:64:1a:35:53:03:36:a6:e2:46:1f:71:ba:a0:7c:db:79:
63:a9:29:3a:d2:82:9d:9c:4c:4e:42:0f:d8:c1:f0:ad:e1:5a:
6a:33:4b:fd:b0:5d:f8:b3:2f:fa:24:7f:03:a4:b4:cb:1d:78:
9c:4b:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:00 2025 by rpki-client