Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa
File: xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa (raw, json)
Hash identifier: HPp2kSbUasPwNyhN/FOSH9olW8dRjUen+6wuAaVDD8Y=
Subject key identifier: C6:C2:7F:F3:E1:E3:80:EA:CD:5D:7D:02:8F:83:E6:C4:BE:D6:9B:0C
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 019426D95D1E6961A533FE323AF2ADF3A871
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55195
IP address blocks: 194.0.46.0/24 maxlen: 24
2001:678:74::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5d:1e:69:61:a5:33:fe:32:3a:f2:ad:f3:a8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c6c27ff3e1e380eacd5d7d028f83e6c4bed69b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:72:46:b9:dd:50:f4:76:0d:ce:3c:f6:5c:
d8:09:a0:98:a3:6a:95:99:23:79:c8:2c:9d:aa:fe:
b8:95:3f:56:11:26:cf:f4:36:b5:6f:3e:ef:0b:8b:
13:85:11:58:21:43:79:28:17:ea:7a:36:5c:bb:22:
34:ac:7f:c2:8d:80:d4:99:99:52:2b:4d:b1:40:e0:
cc:a9:49:3c:d4:25:2b:4d:3e:5a:c7:57:75:db:d1:
c0:8e:da:e2:c7:3b:81:87:5e:a2:c2:25:f5:b2:61:
92:dd:28:f8:33:41:73:63:cf:43:36:14:bb:ea:3f:
85:0c:2d:83:ba:88:c9:8d:5a:3d:1f:fa:32:38:e0:
85:c0:dd:71:db:2c:d6:92:10:11:78:fb:36:53:53:
d1:cf:e7:79:76:9a:83:87:3a:0b:e0:36:71:4b:af:
ea:1f:98:72:51:40:64:69:82:b9:d8:2a:fa:fc:b5:
83:42:30:9e:25:3d:2f:d9:17:8a:cc:9f:d0:17:19:
b6:26:e1:5a:d0:1e:37:10:24:68:ea:ea:c4:62:e9:
6a:51:f1:6d:db:60:45:49:05:a6:84:be:26:65:0d:
8f:0e:e6:7a:df:42:5b:22:09:91:fc:73:f2:6d:49:
72:30:d3:f3:5b:fb:db:78:c3:be:9d:1d:ed:67:eb:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C2:7F:F3:E1:E3:80:EA:CD:5D:7D:02:8F:83:E6:C4:BE:D6:9B:0C
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.46.0/24
IPv6:
2001:678:74::/48
Signature Algorithm: sha256WithRSAEncryption
b2:1e:c2:9f:8a:af:85:f3:85:f6:26:f8:a6:19:46:c2:08:6d:
23:f7:e9:29:2e:60:52:a0:aa:3c:a8:82:9d:6b:46:24:5e:7f:
4e:3a:55:77:01:c5:77:43:01:98:64:1e:66:e6:cb:7b:9b:b0:
ea:2e:7d:51:2f:cb:67:a8:87:08:84:3f:4d:87:82:29:17:6e:
ce:81:bc:d8:ac:c4:f4:df:6c:73:53:5e:e8:2c:2c:f1:c6:c4:
03:ac:0b:46:0f:11:2f:e6:82:73:bf:79:d3:d4:a1:c3:49:31:
42:e0:54:b8:c3:a0:bd:52:a2:9b:61:8c:92:35:b1:12:88:80:
70:c6:b9:48:36:aa:61:b4:40:af:e5:5a:fe:de:0f:58:dd:96:
17:68:b0:eb:08:be:15:54:29:3f:55:22:5b:11:d9:af:bb:3f:
4c:81:97:ad:44:fa:a2:c9:4b:20:31:01:02:11:3d:c9:45:6a:
54:a0:0c:56:28:58:09:4d:e9:b6:a4:7e:e3:76:a2:b1:12:d9:
54:52:f9:37:e3:85:fd:0f:f9:cd:dd:80:80:a7:31:80:04:42:
a2:c2:ef:2f:c9:f5:7d:ac:89:17:26:b6:18:d6:7c:be:5b:79:
a6:b2:a3:0a:6c:33:5d:06:1b:9d:62:36:8d:15:c6:9a:b4:61:
53:de:a8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:00:30 2025 by rpki-client