Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/OQo7GpnulSOExhIEm_K7r3ad-fY.roa
File: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (raw, json)
Hash identifier: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=
Subject key identifier: 39:0A:3B:1A:99:EE:95:23:84:C6:12:04:9B:F2:BB:AF:76:9D:F9:F6
Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial: 0194252227ADDA8A8E3C38B7C5C75EB3A9F6
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/OQo7GpnulSOExhIEm_K7r3ad-fY.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210748
IP address blocks: 193.163.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:27:ad:da:8a:8e:3c:38:b7:c5:c7:5e:b3:a9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=390a3b1a99ee952384c612049bf2bbaf769df9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:26:27:44:73:52:3d:28:75:b2:aa:7b:f4:
58:5a:f6:85:1c:9f:31:1a:32:dd:c6:37:47:02:2d:
89:ac:b5:f8:3a:9e:9f:87:9f:4a:4a:1f:9b:50:e1:
53:fd:cd:54:f9:18:1b:46:c5:39:b0:2e:c9:78:21:
5a:71:e0:1a:66:6c:79:19:31:5c:e0:3a:ed:54:d3:
53:bc:57:37:2e:5c:d4:93:97:72:64:7a:8b:e7:3f:
e9:4e:65:5c:38:a9:3b:d8:37:25:55:1b:b5:d4:aa:
a2:f2:86:47:11:b6:67:47:63:31:fe:62:e0:b0:02:
70:49:52:05:31:f9:af:4f:4e:20:f2:30:2e:40:22:
d3:43:d9:0b:42:e4:44:e4:bc:72:2e:6c:5d:1f:f4:
54:25:be:de:51:f1:27:ad:05:e5:93:c1:a1:e7:39:
5b:1b:7d:5a:96:9d:66:a5:16:14:a4:8a:ea:5f:5e:
8d:2c:8b:a8:11:92:5c:42:6e:8f:62:5a:b7:1a:82:
f4:f5:81:b1:33:8e:f8:80:29:f4:c2:43:68:ff:05:
1c:0b:7b:c9:82:24:5c:7e:c6:a8:41:54:b0:74:b8:
01:48:cf:19:09:08:8c:73:2a:cd:a9:a5:fd:b3:1c:
2a:86:5a:88:d8:36:fa:52:21:b8:c7:86:56:4f:f6:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0A:3B:1A:99:EE:95:23:84:C6:12:04:9B:F2:BB:AF:76:9D:F9:F6
X509v3 Authority Key Identifier:
keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/OQo7GpnulSOExhIEm_K7r3ad-fY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.91.0/24
Signature Algorithm: sha256WithRSAEncryption
43:01:47:ef:92:da:b0:64:13:dd:da:f6:9f:3e:99:cc:79:9f:
09:4d:78:02:fa:99:14:e4:25:ee:ad:ce:ee:50:83:a1:a5:95:
ec:88:35:d1:25:62:9b:f1:02:f2:ec:25:08:1d:ac:7d:40:05:
6c:81:c7:6a:b6:07:16:52:a8:96:88:e0:f9:37:b6:35:0e:be:
28:3a:05:9d:53:91:10:ff:74:30:4b:2e:1c:e5:25:a0:2d:ea:
63:97:f9:35:09:32:92:d8:8b:bf:6f:63:5a:38:4c:d8:f6:da:
41:3a:6f:fe:ee:a5:22:76:10:33:49:e3:c2:ec:fd:f9:18:23:
06:51:8e:7d:09:81:6b:87:38:a8:2e:c1:43:23:a3:aa:bf:44:
0a:36:de:53:5c:6b:82:03:80:92:e6:a9:61:19:c4:8e:4b:f3:
db:db:8d:47:ac:27:d6:2f:c2:01:a3:b5:db:60:ea:a0:63:92:
db:2a:ce:ff:78:c1:15:e0:99:af:d8:07:ef:8c:40:90:6c:b1:
e5:6c:df:85:d3:12:c4:87:34:c4:6a:7c:32:e6:49:03:81:27:
1d:f7:e0:30:95:0c:f3:67:a9:78:62:ee:06:b1:bb:be:22:27:
d2:18:98:8f:2f:e7:1c:e4:c0:92:96:69:f0:75:e6:f0:35:b9:
23:21:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:16 2025 by rpki-client