Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa
File: ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa (raw, json)
Hash identifier: B2U5jkd3tbLDGtZHWekj2Yva7wWVjyZDFNXj9MRShj4=
Subject key identifier: A2:0C:71:8F:3F:DE:18:B0:E7:EC:B6:29:1C:7B:AF:0A:8F:71:E6:78
Certificate issuer: /CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Certificate serial: 0194258F60E9B024F2C3255B0D6733AFCCE4
Authority key identifier: 0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa
Signing time: Thu 02 Jan 2025 05:49:00 +0000
ROA not before: Thu 02 Jan 2025 05:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 171.25.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:60:e9:b0:24:f2:c3:25:5b:0d:67:33:af:cc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb1bd30d3191a87c7d0a462e67932431633dd1e
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a20c718f3fde18b0e7ecb6291c7baf0a8f71e678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:77:ee:18:58:50:5f:f0:d0:0d:f8:46:db:
3a:08:07:30:60:99:9e:4c:de:dc:b8:2a:84:41:58:
05:79:ab:63:eb:6a:c2:6e:df:01:e6:94:85:1b:2e:
8a:a2:07:97:c4:19:e4:ea:c0:16:7a:96:0d:66:7d:
ed:6e:0e:15:bf:4f:d5:65:c5:fb:44:ec:c4:5f:ea:
93:85:26:18:87:60:25:d4:b7:1b:7d:4d:70:23:15:
5b:d3:ab:f9:0f:e4:5e:9e:87:d4:77:e1:a8:49:22:
d2:35:03:02:20:ce:b5:d5:dc:32:3b:3e:32:0f:3d:
a2:60:05:c5:b3:b2:8d:a5:d6:b2:cf:8f:e3:71:00:
b0:f2:73:24:f6:a3:a0:11:ab:0d:21:f9:ce:cc:5f:
7c:03:63:56:9c:44:ec:5c:03:c7:1c:02:70:89:5e:
76:b5:e4:af:0f:65:74:dd:9c:a2:80:67:96:15:43:
ff:3c:db:e7:5b:4d:ad:a8:34:d9:8b:df:0b:93:5b:
b9:77:7b:ee:96:6e:b8:74:f1:a2:0b:a2:1b:75:cc:
6c:e5:c8:75:12:ae:02:fa:1d:15:1c:62:21:86:f5:
0d:db:45:7d:32:41:ce:05:dc:23:92:56:30:56:44:
42:41:29:8e:d0:22:f6:b5:8b:1e:41:b4:cd:62:ad:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0C:71:8F:3F:DE:18:B0:E7:EC:B6:29:1C:7B:AF:0A:8F:71:E6:78
X509v3 Authority Key Identifier:
keyid:0E:B1:BD:30:D3:19:1A:87:C7:D0:A4:62:E6:79:32:43:16:33:DD:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrG9MNMZGofH0KRi5nkyQxYz3R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/ogxxjz_eGLDn7LYpHHuvCo9x5ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/72e91a-014f-483a-a544-4e33427f734e/1/DrG9MNMZGofH0KRi5nkyQxYz3R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.228.0/24
Signature Algorithm: sha256WithRSAEncryption
06:66:f0:14:53:14:3d:3d:3d:53:39:bb:19:55:b9:09:2f:dd:
11:6b:8f:74:7f:f3:c5:71:5c:53:54:81:3c:ae:99:0b:82:0e:
94:b3:61:61:5f:d2:41:10:13:15:5e:c5:94:60:d9:7e:9a:57:
72:47:26:fa:6a:4d:13:1f:86:fc:84:e4:52:62:07:08:ef:84:
8d:56:07:13:6b:cb:aa:f0:e6:39:c1:10:ee:b8:3e:df:f2:30:
5c:22:e3:e6:8b:3c:d7:8b:75:ea:53:e8:1c:b4:a3:94:a2:43:
aa:ca:3e:83:81:bb:fe:e5:b2:75:c1:f3:8c:3a:60:90:76:4a:
20:5f:aa:d9:9b:f7:da:61:01:66:23:4a:1c:9f:5c:03:4e:bd:
49:20:84:27:36:0d:6e:87:0c:9f:4b:2b:44:d0:11:fa:2a:5f:
fb:dd:3f:bb:75:53:e5:7d:b0:51:5a:06:65:1a:3a:28:28:d7:
b0:07:9b:c1:c9:90:c4:c5:77:86:4a:cb:14:36:24:f4:40:0c:
e7:ba:fb:9a:d7:48:f0:f4:d2:c6:38:13:59:bb:8e:15:79:91:
17:21:6d:d5:d2:47:83:86:ca:36:22:90:be:99:40:2e:f4:47:
8a:b4:1e:82:36:a9:0e:c3:28:02:bb:89:10:ce:1c:fb:ec:76:
36:37:00:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:11:03 2025 by rpki-client