Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/oKawKDRW99ecPddWpJpV3NByPbc.roa
File: oKawKDRW99ecPddWpJpV3NByPbc.roa (raw, json)
Hash identifier: dNHJ04+eWNwCTGIgJhffAyviemR8lQpQ5Tj3/DY96rQ=
Subject key identifier: A0:A6:B0:28:34:56:F7:D7:9C:3D:D7:56:A4:9A:55:DC:D0:72:3D:B7
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D71A2226F43B4D7C62130149A29A84
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/oKawKDRW99ecPddWpJpV3NByPbc.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200195
IP address blocks: 185.40.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1a:22:26:f4:3b:4d:7c:62:13:01:49:a2:9a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0a6b0283456f7d79c3dd756a49a55dcd0723db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:8f:71:3a:a6:69:57:98:b1:2f:40:a9:d4:
33:72:4a:21:fe:dc:4f:32:89:70:69:e4:2a:54:0a:
08:b0:ec:6c:98:81:12:73:76:73:42:32:6e:9b:78:
73:ba:2f:71:23:72:b4:43:1c:f0:4f:b0:bc:3e:32:
4c:1c:c9:17:14:bf:99:9a:dc:e4:bd:d4:14:e1:9c:
0c:5a:e1:b2:5b:65:fa:49:39:9a:a2:0a:02:b5:4a:
bf:d4:7b:ee:cd:98:5e:01:fd:d2:54:23:89:f2:ae:
87:93:97:ed:37:6c:4a:9c:89:5c:c8:62:4c:cf:87:
56:a4:10:f2:94:31:d0:90:93:44:47:bd:29:ac:19:
31:85:6e:56:9f:86:7a:16:9f:7c:5b:23:52:ec:34:
79:3d:7e:ad:14:68:40:69:6a:1c:8d:65:7b:6f:fb:
d8:8c:40:43:a1:9f:91:1e:4f:36:56:c9:cf:fd:7e:
82:8f:a1:37:b9:ba:f0:7a:f8:2d:24:ec:57:30:23:
41:52:35:03:37:94:4e:24:10:0d:ca:74:8f:aa:d0:
e3:94:9f:ce:c5:85:b7:ed:8a:d8:f6:70:aa:e0:c5:
b0:6d:c4:95:27:0f:12:c1:8b:c8:8d:dd:c0:3e:a6:
10:2b:d1:d2:c3:fa:bf:3a:0a:e6:bd:1b:fc:66:21:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A6:B0:28:34:56:F7:D7:9C:3D:D7:56:A4:9A:55:DC:D0:72:3D:B7
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/oKawKDRW99ecPddWpJpV3NByPbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.4.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:32:cc:55:5c:37:8a:3b:d4:60:71:01:91:64:9d:7b:c9:af:
ae:5e:cd:16:e2:d9:de:81:fd:12:e0:b2:b4:8a:0b:33:91:12:
28:d0:13:45:04:d8:2d:f8:4d:ae:32:1f:3f:80:e4:d9:6b:20:
3a:1c:76:cc:e6:10:5c:b5:3d:76:cc:f3:80:3c:6e:00:0f:d8:
79:f1:60:3f:0e:85:96:11:32:b9:6c:0b:ab:8b:89:2f:f0:4a:
11:13:71:88:12:d2:c0:51:cd:2f:2d:c1:77:b6:0d:65:3e:ae:
8a:81:db:6a:8c:51:78:c3:09:12:9a:df:f3:53:21:30:45:b7:
9b:20:34:19:6b:01:cc:7c:f8:2b:5b:01:f1:56:17:ad:ed:fa:
42:a1:2a:85:a3:2e:ab:10:f0:41:d0:02:f0:b0:75:01:19:85:
2f:3e:87:9e:ea:9d:a4:82:2d:4c:3f:15:6f:9c:cd:96:ce:82:
55:56:18:92:68:cb:1f:28:49:7f:6e:ff:0a:da:02:9f:7b:5a:
d5:51:8d:ed:13:9e:b0:f3:5e:a6:2c:a7:3b:01:d5:5f:00:fa:
d7:8c:f3:45:c1:07:89:58:61:e1:13:99:04:6c:02:ef:19:03:
38:e3:1e:9e:d6:86:be:06:d0:b5:2e:53:5d:80:f2:39:eb:55:
56:3f:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:07:58 2025 by rpki-client