Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oxSeYyQ_iJYKWpN8DjIMNFnfRdc.roa
File: oxSeYyQ_iJYKWpN8DjIMNFnfRdc.roa (raw, json)
Hash identifier: VdU2ck7Mg5XK47CYbvFKpOjuX/lOc0lBIGTIWvm+TP4=
Subject key identifier: A3:14:9E:63:24:3F:88:96:0A:5A:93:7C:0E:32:0C:34:59:DF:45:D7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274885033448976B00DEBE60B320E4DB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oxSeYyQ_iJYKWpN8DjIMNFnfRdc.roa
Signing time: Thu 02 Jan 2025 13:50:51 +0000
ROA not before: Thu 02 Jan 2025 13:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214251
IP address blocks: 194.14.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:85:03:34:48:97:6b:00:de:be:60:b3:20:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3149e63243f88960a5a937c0e320c3459df45d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:9e:41:f6:1a:d7:94:b5:ba:3a:8d:7e:94:
22:95:b2:5d:b2:94:2c:65:48:6b:34:84:dd:10:c5:
4f:11:1a:82:09:7e:70:c3:12:48:20:fb:ca:00:8a:
ec:a3:ea:5d:8d:47:8b:5c:7d:74:15:a1:48:22:c5:
ae:5e:fc:db:53:a2:a4:7e:1f:0b:ed:65:7d:1e:59:
05:27:b5:e7:5b:39:1e:8c:09:5e:25:10:c8:10:fc:
0a:eb:9b:18:68:00:d1:33:6d:a3:84:9a:54:86:d4:
33:8a:c4:30:90:3b:d8:9c:59:4c:02:92:48:9a:ab:
2a:82:b2:2d:9e:65:19:18:81:dd:eb:66:e4:3c:12:
38:76:20:7f:14:43:2a:53:7a:37:28:36:d3:be:f8:
2c:b4:80:ef:95:da:65:30:f0:a4:b9:00:9f:aa:57:
c1:aa:63:c4:df:56:b8:05:14:65:1f:83:af:ea:83:
58:2c:25:27:fe:62:9c:42:c4:93:1c:96:6a:f7:28:
89:9a:dc:42:c1:73:6a:49:f9:04:aa:ae:60:f3:a4:
1f:a3:c8:d8:ed:33:af:73:4f:af:af:23:c7:56:1b:
db:24:97:6c:66:44:7f:0a:32:d8:5a:5e:4e:87:bc:
de:be:8f:8d:b3:11:86:d4:03:58:9e:7b:52:cd:4f:
c0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:14:9E:63:24:3F:88:96:0A:5A:93:7C:0E:32:0C:34:59:DF:45:D7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/oxSeYyQ_iJYKWpN8DjIMNFnfRdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.133.0/24
Signature Algorithm: sha256WithRSAEncryption
85:92:c0:6b:f6:ce:4b:a1:ac:04:24:ce:2a:04:8d:dd:b9:46:
73:3d:9c:45:8f:d9:8e:90:c8:07:d6:aa:3c:0f:d1:f2:1d:fb:
25:70:3d:8d:6e:00:d2:76:c9:2b:8f:89:82:b5:66:16:c6:18:
de:a9:82:20:3e:cb:36:d4:e5:32:41:e4:d3:1b:2e:a2:54:44:
8b:e9:06:36:bc:4d:37:33:7a:0d:c5:88:c8:52:33:a1:9a:41:
d9:a5:6f:28:14:fb:4b:92:c0:ac:bd:67:6c:ac:07:e5:d8:3f:
b2:43:71:03:62:67:fc:19:3f:65:67:12:8c:ac:12:2d:3e:a7:
7d:53:4c:98:39:1e:b1:2e:b6:46:1e:2d:54:cd:52:df:a6:34:
4d:a1:67:19:8b:4c:65:05:04:4d:51:03:36:39:62:7a:7c:a7:
72:ea:bc:d6:40:d2:52:98:b7:5a:e8:57:cf:df:bd:60:2b:ee:
75:a3:a4:6c:59:60:7f:ea:9f:cd:e7:49:3e:20:a9:3d:33:b2:
a3:e0:3e:59:13:3c:3c:88:68:03:4c:f0:08:99:f9:b9:3b:bd:
08:ed:9c:d4:5b:0c:33:34:f2:cc:ff:a7:36:ea:5d:6f:9e:f7:
8e:47:51:d9:73:4d:51:87:32:86:31:45:00:b0:b0:22:28:eb:
05:91:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:58 2025 by rpki-client