Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O0NKVaCz0xBOuLe5kfR-J_AcV5E.roa
File: O0NKVaCz0xBOuLe5kfR-J_AcV5E.roa (raw, json)
Hash identifier: 85v2y4lWyRoM3+usF90/MaZfsqy16wOxg9RjpU/NAqk=
Subject key identifier: 3B:43:4A:55:A0:B3:D3:10:4E:B8:B7:B9:91:F4:7E:27:F0:1C:57:91
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0194228D229D7B5B92A9D94C7ECE42B32B90
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O0NKVaCz0xBOuLe5kfR-J_AcV5E.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24866
IP address blocks: 178.176.227.0/24 maxlen: 24
178.176.228.0/24 maxlen: 24
178.176.229.0/24 maxlen: 24
178.177.40.0/24 maxlen: 24
178.177.49.0/24 maxlen: 24
178.177.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:22:9d:7b:5b:92:a9:d9:4c:7e:ce:42:b3:2b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b434a55a0b3d3104eb8b7b991f47e27f01c5791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:c1:98:64:c4:2e:0b:05:c4:6e:cf:32:4b:
ad:20:96:fc:54:37:08:28:f9:bf:72:4c:c9:c5:d9:
9f:1d:55:41:56:5b:f2:3f:d1:be:e8:82:f8:4a:1c:
1a:f1:1a:66:e1:ae:23:ca:7d:da:75:36:b1:09:d7:
3f:f3:f6:07:5e:a4:e7:2d:b4:d0:2a:53:45:83:38:
4b:d3:de:28:d0:db:11:20:98:47:2e:c0:57:36:be:
27:59:30:24:19:4a:b8:db:c4:0d:ca:b7:8f:67:78:
20:6d:ee:a6:23:06:68:b7:e2:eb:69:41:b1:c0:de:
32:06:53:bf:29:17:c8:21:c7:e7:44:70:98:92:e4:
44:9d:e6:7e:49:3e:3b:8d:df:eb:47:0b:72:1d:f7:
03:fe:84:62:bd:f1:a4:2a:04:9e:25:4f:9e:6e:08:
e8:78:dd:a8:b3:06:c8:97:f5:ac:18:e4:43:47:0f:
01:9d:a7:e4:af:23:50:de:71:b2:cf:dd:0f:a1:bb:
a9:11:99:d8:2b:6c:c7:03:e5:d1:92:01:72:af:27:
68:b1:2c:2c:68:7c:f3:67:d2:4c:d6:30:b6:47:bf:
ba:27:ac:e3:49:d8:64:e9:d8:a9:76:aa:67:a5:bc:
46:04:52:3e:82:53:c9:9c:81:9d:66:37:24:ba:0c:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:4A:55:A0:B3:D3:10:4E:B8:B7:B9:91:F4:7E:27:F0:1C:57:91
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/O0NKVaCz0xBOuLe5kfR-J_AcV5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.176.227.0-178.176.229.255
178.177.40.0/24
178.177.49.0/24
178.177.60.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a7:4b:13:00:25:59:f2:e3:10:2f:a7:be:3d:b5:a4:95:89:
43:e1:23:b3:9a:bd:e9:f2:79:e4:c3:be:15:90:7b:9b:71:11:
22:33:ac:5c:87:56:6d:c1:5a:bf:15:42:25:1d:08:9f:9b:d5:
62:77:03:aa:63:5c:0f:66:e9:83:aa:f5:ff:99:36:7b:c5:3f:
c4:37:14:2e:75:8e:7d:91:b7:02:98:ae:7f:90:3f:5d:06:64:
43:04:a1:3c:05:b9:34:56:77:82:20:fd:7b:b0:2e:6f:ff:6e:
b0:f6:f3:1a:fd:6a:b7:e9:50:66:c1:e4:a6:17:6a:16:ea:4d:
61:fe:7f:e1:59:ef:78:f5:38:52:44:b7:ec:1a:40:6c:ef:b3:
a1:76:45:ab:90:db:e5:9d:66:f5:67:88:32:df:17:0f:8b:a5:
60:0c:02:f8:b8:78:eb:74:15:cf:41:be:d0:47:63:a5:54:c6:
79:b8:ea:ab:d7:c4:0b:65:66:d7:71:8a:ef:5e:d6:88:7c:9a:
17:d7:76:b7:a7:b8:fb:44:4a:d9:49:c8:7a:2a:68:d4:b9:c1:
e9:07:4e:ac:4a:ad:34:2a:49:44:93:f8:29:32:a5:96:ab:41:
9d:48:37:34:43:03:00:a7:99:4a:31:bb:31:71:17:c3:ed:3a:
64:0d:7f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:54:30 2025 by rpki-client