Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/OVY04NJtWOb1QjATK5euWrh4CQ8.roa
File: OVY04NJtWOb1QjATK5euWrh4CQ8.roa (raw, json)
Hash identifier: j/MgyRylmuUoLQy6OKDt9MIYFnZ2DVJgTnTK/6Q7Hwk=
Subject key identifier: 39:56:34:E0:D2:6D:58:E6:F5:42:30:13:2B:97:AE:5A:B8:78:09:0F
Certificate issuer: /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial: 0194258E7FAB36C661218D9C2EC565E56096
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/OVY04NJtWOb1QjATK5euWrh4CQ8.roa
Signing time: Thu 02 Jan 2025 05:48:03 +0000
ROA not before: Thu 02 Jan 2025 05:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41683
IP address blocks: 185.163.129.0/24 maxlen: 24
185.163.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:7f:ab:36:c6:61:21:8d:9c:2e:c5:65:e5:60:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Validity
Not Before: Jan 2 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=395634e0d26d58e6f54230132b97ae5ab878090f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:50:75:3d:9e:0d:e1:c0:1e:94:35:0a:b4:
a4:9f:78:23:32:c1:f2:03:ac:1b:b9:d5:c3:30:75:
fd:51:d1:fc:54:76:0e:ca:d5:34:85:3e:90:82:9d:
e1:36:22:68:6b:a1:9b:46:24:94:03:a8:9e:08:0f:
fe:61:17:d5:67:ff:7a:34:28:3e:6e:29:f7:6c:0f:
b1:4b:1f:29:66:7e:b7:d8:d1:eb:c8:db:8b:67:2e:
9f:67:bf:20:44:37:e1:3c:37:69:72:77:96:4a:50:
31:dd:e9:db:22:69:28:05:74:7f:82:21:8e:d2:12:
2c:2a:d6:3d:80:30:aa:3a:28:3b:03:b2:bc:23:18:
5d:1e:41:9b:93:0d:b0:c4:59:f9:8b:7a:d6:7f:17:
a3:f6:54:69:a2:74:a6:eb:ba:cc:cc:85:ae:65:ca:
ac:b8:a2:88:40:86:ab:95:c3:98:91:b6:04:ed:22:
f2:ca:25:6a:8d:f0:6a:19:9f:12:65:2d:d5:38:19:
37:fb:d7:dc:2f:37:12:31:1b:a0:a7:ab:cc:59:51:
dd:b6:63:12:a5:5c:0f:ab:35:2a:f5:1f:ee:77:fd:
f3:36:c8:26:6b:81:6f:1d:10:2e:88:4e:9b:d5:bf:
81:73:cb:4f:46:67:7c:1c:44:0c:3d:fe:a1:dd:d8:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:56:34:E0:D2:6D:58:E6:F5:42:30:13:2B:97:AE:5A:B8:78:09:0F
X509v3 Authority Key Identifier:
keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/OVY04NJtWOb1QjATK5euWrh4CQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.129.0-185.163.130.255
Signature Algorithm: sha256WithRSAEncryption
52:c2:eb:7c:b3:46:bc:ce:74:5d:65:b8:2f:89:3e:01:ce:70:
8a:6a:0f:75:c8:ca:c8:7d:f0:8d:6c:bf:a6:3d:fb:eb:01:9e:
e9:fb:d4:e7:36:ce:c1:f0:a9:1f:fa:15:98:42:ed:01:d5:84:
6b:ce:ad:0c:74:88:e2:62:d1:73:43:34:a2:65:77:61:2d:33:
6b:48:12:db:28:36:c5:52:8e:70:da:07:42:87:92:f5:26:fe:
0e:46:48:1e:20:a6:b4:27:71:24:ac:db:92:a6:ca:22:f9:37:
b6:93:e7:05:aa:68:9a:5a:b4:cc:6c:62:d6:10:2e:2d:df:5b:
86:1c:26:bd:b7:2f:60:84:47:ac:78:3b:de:f1:7c:ec:7d:dc:
d6:34:99:f9:67:68:67:59:76:aa:09:4e:17:b9:c7:26:c2:94:
cd:22:fd:ee:2d:e3:79:5c:2f:5c:95:4f:64:de:bd:14:5b:c7:
ec:f9:ee:a5:91:7a:25:26:96:f9:ac:8b:20:a1:5f:ca:72:34:
1b:5c:9c:84:6b:b4:ef:4b:92:1b:1d:4f:11:81:a2:c6:c3:f6:
2d:8e:32:8d:56:7e:24:21:b7:2e:09:61:d0:d3:90:9e:41:69:
06:d3:93:9f:e7:2b:c3:19:e1:e7:0e:14:53:bf:bb:de:48:85:
27:a4:03:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:22:49 2025 by rpki-client