Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa
File: OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa (raw, json)
Hash identifier: /KQ43a3fdsH0+xJZbYiIUJZNQ9G0ar1u4ierKXmEsMM=
Subject key identifier: 38:48:4B:33:08:46:B2:3F:3C:91:9E:05:A9:53:15:4D:FA:6A:CF:EF
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0194274893884E1396EF44D44B977226DF49
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22427
IP address blocks: 80.93.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:93:88:4e:13:96:ef:44:d4:4b:97:72:26:df:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38484b330846b23f3c919e05a953154dfa6acfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c9:6b:f6:46:ac:c9:2e:78:04:92:1e:e8:99:
b3:07:17:2d:a6:bc:cc:31:b4:33:1e:4d:bf:7e:da:
a4:a9:dc:d5:85:1f:86:d0:49:43:17:39:39:f8:ae:
d7:67:6f:4e:ab:cd:88:3f:7c:22:bd:72:59:9e:ff:
17:fb:e7:48:45:10:fe:e0:a5:40:8f:a2:0c:99:b9:
b9:45:5f:7a:a6:bc:db:0b:75:c7:7f:ca:d2:f4:e3:
10:21:c9:f6:ef:c8:27:3e:2a:1e:83:c6:4a:59:86:
bd:d7:62:8c:66:19:60:75:50:2e:a5:30:70:97:e6:
8a:ec:a9:da:6d:f2:29:91:8c:b1:9b:30:64:47:84:
68:85:52:67:fa:d4:84:a6:22:d3:e8:12:3c:1d:81:
d7:b0:42:57:bf:71:75:6b:b9:f3:75:6e:dc:ce:a4:
75:9f:a7:d6:e8:b9:0f:e5:45:f6:a6:62:32:50:4b:
06:1b:e0:28:e6:9e:bd:19:df:59:a6:95:6e:1a:03:
05:82:9b:25:2d:37:71:d7:23:05:67:e2:6a:56:fb:
e7:a7:94:bb:c8:6a:9f:6c:26:d1:8e:33:e3:74:fd:
ea:63:20:9c:cf:1c:8b:cf:a6:03:2e:04:1f:33:b4:
97:fc:e2:4f:6b:1d:1f:b8:32:fd:d9:b8:22:47:e9:
a4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:48:4B:33:08:46:B2:3F:3C:91:9E:05:A9:53:15:4D:FA:6A:CF:EF
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.197.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c6:c1:3b:cd:7e:68:c6:5d:35:b3:7e:49:0e:28:87:3d:14:
34:aa:1b:f7:e3:5a:b4:bf:cf:3f:a2:4a:d9:2a:ea:4f:33:6a:
ff:a9:42:03:5f:14:08:ca:dc:73:e6:20:3a:d2:4b:75:25:fa:
12:2d:6e:2b:d8:7c:3d:55:ad:e6:88:38:8a:bd:6b:e7:c0:78:
d5:05:ca:80:82:d4:60:32:c6:c3:cc:a9:11:c6:8a:be:dd:ba:
c3:1f:fc:88:5c:02:f0:7d:26:32:89:55:6d:6c:56:24:6b:b6:
c7:bc:27:b3:cb:67:be:48:91:0e:da:82:8f:7a:05:d2:b8:52:
41:b3:3f:a8:d3:21:46:fb:31:44:9e:43:21:08:f2:d9:69:32:
7c:04:3d:c1:6c:da:e7:60:45:c0:30:e5:5c:d5:33:44:07:da:
9e:c1:68:22:6c:9a:f6:ff:02:23:0e:11:03:ac:e4:5f:60:40:
4b:91:40:82:e4:90:48:a1:85:85:3c:e7:7b:80:b7:a7:45:6b:
4d:e5:40:7e:5d:6e:a8:90:c8:12:9f:39:2a:c5:59:2d:cf:16:
0f:c4:65:49:15:b1:67:1a:cb:86:ae:8e:4a:ae:fb:ce:cc:1a:
23:bd:b0:6d:a2:62:c9:c5:31:43:4d:f9:54:17:5c:c9:4c:f8:
d5:d9:87:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:01:07 2025 by rpki-client