Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/OcUAdk27zQERJiG1ES11t0jbx40.roa
File: OcUAdk27zQERJiG1ES11t0jbx40.roa (raw, json)
Hash identifier: G/z2CQj1gUn0HMua9E3wJQ0HyTWhulxJTYdAIClZCUg=
Subject key identifier: 39:C5:00:76:4D:BB:CD:01:11:26:21:B5:11:2D:75:B7:48:DB:C7:8D
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 0196F39CAEA8918DAD40003220B15870256D
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/OcUAdk27zQERJiG1ES11t0jbx40.roa
Signing time: Wed 21 May 2025 16:10:53 +0000
ROA not before: Wed 21 May 2025 16:10:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 194.179.192.0/19 maxlen: 24
194.179.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:9c:ae:a8:91:8d:ad:40:00:32:20:b1:58:70:25:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: May 21 16:10:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c500764dbbcd01112621b5112d75b748dbc78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:e1:4a:1d:86:c4:7d:e3:e2:78:3c:04:31:
ac:ee:6f:f9:40:7d:bd:02:af:c8:0f:76:83:de:c7:
69:2b:fa:f9:31:cd:ec:ab:82:b2:8e:79:d6:7d:77:
12:48:4b:c5:5b:94:93:f9:f2:b0:8d:30:39:97:a2:
0b:76:9c:fd:ce:0d:b3:34:98:d1:33:10:7d:d1:40:
0a:7a:19:f3:8d:06:b2:39:2a:ae:e5:e7:44:c1:ae:
7c:9b:dc:dc:f4:60:74:69:6e:b3:ca:a1:52:f1:09:
c6:7b:de:4f:82:2a:d4:b3:92:18:64:88:08:5c:01:
36:f9:8a:ee:f6:4f:27:6e:72:00:89:33:4e:e5:5a:
f6:c8:6f:f9:16:45:0a:ec:b7:bb:a3:e4:f6:22:a3:
d5:53:f3:f3:6d:94:38:e0:c6:07:01:10:1e:fc:84:
0a:13:00:00:42:a3:a8:e4:87:07:33:8b:4c:14:68:
48:cc:b7:dc:45:c0:e6:0d:4e:5d:58:fc:a4:5b:f3:
17:78:39:22:6e:6e:cd:54:cf:1d:ad:bc:c9:e6:df:
d6:d7:a4:d7:d6:53:f5:91:52:a5:a2:0b:31:cd:79:
04:87:49:6e:24:da:79:8a:3f:60:af:b7:8c:d6:4a:
2e:5b:27:9a:42:bb:97:22:ea:85:b2:30:7b:7d:a7:
78:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C5:00:76:4D:BB:CD:01:11:26:21:B5:11:2D:75:B7:48:DB:C7:8D
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/OcUAdk27zQERJiG1ES11t0jbx40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.192.0/18
Signature Algorithm: sha256WithRSAEncryption
10:de:bc:2d:81:b5:58:3c:1b:b0:7c:34:f2:56:ce:21:b2:52:
9c:2d:e7:b8:3f:7d:b6:d4:e2:f3:7d:0f:49:e8:46:5b:cc:23:
d4:01:d0:29:b8:f2:d6:d1:b1:47:82:e9:03:6a:12:30:09:44:
78:66:52:2b:48:d6:77:b9:9c:b2:36:07:a0:c9:aa:dc:2c:66:
bd:8b:43:27:23:7e:09:b4:cc:19:99:26:9a:3d:80:80:f9:88:
57:05:0e:4e:ec:e2:4e:a6:e2:59:c9:a1:f6:74:4d:9d:b0:71:
69:b4:f9:fc:51:3f:5b:11:23:1d:36:2c:1b:97:29:55:ea:fa:
57:68:e3:1e:02:66:36:c2:76:b3:49:2c:8a:47:15:8a:09:21:
91:41:37:59:45:84:0c:b0:e0:5d:a6:c8:2e:bd:24:ff:e6:45:
ba:80:35:45:40:2b:04:c5:06:5b:61:2e:c6:fa:e5:4d:6d:66:
fd:de:f6:e0:36:df:fb:f9:6a:af:e4:c0:2d:4b:f4:4e:e9:e6:
bd:1d:da:e6:25:43:7e:8c:ff:eb:bb:0c:fa:30:53:0f:d7:cd:
59:34:75:fa:55:bb:c8:8d:9a:94:71:1c:d3:3f:3d:cb:6a:d7:
2b:d4:f5:89:3e:60:be:b0:3e:94:20:19:05:a2:d4:5a:3b:44:
3f:6d:66:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:19:52 2025 by rpki-client