Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/OokYUWcbSrbqH_f8HmgcmqdnhJI.roa
File: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (raw, json)
Hash identifier: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=
Subject key identifier: 3A:89:18:51:67:1B:4A:B6:EA:1F:F7:FC:1E:68:1C:9A:A7:67:84:92
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 0194266C2DCCE3C72D6C4DFF4BEBF032EA6E
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/OokYUWcbSrbqH_f8HmgcmqdnhJI.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 194.59.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2d:cc:e3:c7:2d:6c:4d:ff:4b:eb:f0:32:ea:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a891851671b4ab6ea1ff7fc1e681c9aa7678492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:03:fd:5b:40:0c:23:be:80:f0:07:e1:22:
5c:13:4f:05:89:d5:e6:d6:ab:6e:59:e7:12:c0:bc:
c6:3e:22:2a:4e:c9:69:f0:71:2f:d3:1f:a0:c8:16:
b1:33:ee:51:ed:95:f0:5f:1d:60:42:ee:74:1a:e4:
d2:25:67:9e:59:2b:c5:76:12:05:4b:e9:1f:a8:ba:
74:e7:5d:44:39:32:6c:c3:4a:16:0b:ed:cc:dd:fc:
1c:0a:36:01:2e:d2:f3:2f:d7:fd:61:09:91:aa:41:
57:7b:7c:94:08:74:95:cf:f5:d6:5e:88:dd:ec:18:
3e:8c:e2:56:00:5e:a6:6d:b6:a9:72:3d:8f:1a:ee:
f7:db:66:f9:aa:83:d8:ca:e2:b4:4e:6b:4f:38:39:
73:55:17:c0:6a:6f:af:e8:44:ae:42:4f:38:61:38:
06:5a:03:0a:ac:c8:1e:1b:e8:7b:0e:78:e8:53:e7:
a7:96:69:30:99:df:ee:d1:7e:d1:ea:c4:39:9c:0a:
aa:8f:db:c1:20:c7:c4:3a:5c:1d:cd:8f:88:ef:0d:
00:dd:aa:54:97:c4:dc:de:62:cd:54:90:3d:57:35:
60:a0:70:79:6f:36:39:a0:c3:3c:23:ff:3e:13:bf:
b0:77:6e:fb:d8:0e:a8:b7:f4:f6:2f:9b:cd:53:0e:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:89:18:51:67:1B:4A:B6:EA:1F:F7:FC:1E:68:1C:9A:A7:67:84:92
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/OokYUWcbSrbqH_f8HmgcmqdnhJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.13.0/24
Signature Algorithm: sha256WithRSAEncryption
95:69:7f:ad:a7:2e:fc:e6:85:97:31:c3:65:bd:f0:80:63:ea:
9b:bf:a1:4a:68:b9:49:5c:19:ef:2f:7e:5f:54:d5:47:2e:56:
59:ab:76:20:fa:ea:51:7e:e8:8e:f6:03:ef:ad:ae:41:a1:b5:
4d:1c:e0:fb:90:f9:69:31:86:e7:2a:f2:82:e9:60:77:12:db:
23:2f:ee:ce:5c:7c:cb:45:48:fc:2c:fe:9c:8b:92:63:5c:72:
0f:a3:76:8b:fe:d0:83:e7:ba:a5:bb:04:0c:5c:38:e4:ed:a4:
ce:cc:34:99:f8:64:44:f6:da:b7:83:ed:eb:19:7c:79:9a:29:
2a:ce:88:cc:d4:4f:dd:f4:e6:87:99:91:c8:8d:d7:48:7e:eb:
60:c2:0c:3d:bc:5f:b3:f0:0b:d4:3b:00:20:2f:e4:a7:5c:85:
4b:7a:4e:20:a2:f5:2d:d4:8b:d3:69:2b:e1:1f:2e:e8:79:33:
f0:7b:fe:10:c3:88:7a:48:a7:0e:a7:64:f2:61:9d:a5:7d:12:
9f:8c:37:a0:e0:f5:9c:e2:14:9e:2d:1e:54:93:e7:4a:09:b3:
94:bf:12:fe:fe:fb:72:0e:3d:ad:ab:94:6e:d8:1c:25:5d:c4:
ef:02:c3:b0:b4:a2:c6:92:7a:2a:cf:01:72:ca:dc:be:cf:aa:
4d:5e:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:39 2025 by rpki-client