Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/OQtVR-cBTyQL6VvIXAOtawOW2cA.roa
File: OQtVR-cBTyQL6VvIXAOtawOW2cA.roa (raw, json)
Hash identifier: Y4JxghrLsZ564AFIbmlJP5QHypmTlarb7NM9FNTmN7A=
Subject key identifier: 39:0B:55:47:E7:01:4F:24:0B:E9:5B:C8:5C:03:AD:6B:03:96:D9:C0
Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial: 019425FC567BDDB1B45C9FC3D6A11723EFC7
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/OQtVR-cBTyQL6VvIXAOtawOW2cA.roa
Signing time: Thu 02 Jan 2025 07:48:01 +0000
ROA not before: Thu 02 Jan 2025 07:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49176
IP address blocks: 185.117.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:56:7b:dd:b1:b4:5c:9f:c3:d6:a1:17:23:ef:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Validity
Not Before: Jan 2 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=390b5547e7014f240be95bc85c03ad6b0396d9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:4e:19:19:1b:97:4a:c9:b5:06:cf:fa:40:
76:16:b8:36:6c:24:28:ab:f1:26:5a:a1:5c:ac:ab:
ab:d1:10:64:f8:1b:50:0a:f9:8e:ef:a9:a3:79:c4:
9f:71:b5:ab:4c:2c:1d:1d:a1:cb:57:e3:f5:ce:aa:
96:bc:11:97:69:67:e6:94:1d:d0:d5:06:54:b9:5d:
94:43:01:80:74:0b:0a:73:44:5d:b8:60:e0:62:ef:
38:cb:b9:83:b8:b4:2b:fa:1c:db:3c:85:fb:f1:84:
c8:74:cb:14:dd:f3:a2:48:e5:2b:56:ce:dc:08:09:
ef:8f:69:d8:3d:9d:c6:50:fd:d6:bc:d5:15:7f:45:
3f:02:bb:2d:bd:ae:6f:0d:4a:1c:51:ea:4c:71:6c:
46:ee:0d:5c:35:b0:4f:ba:ab:7b:3f:9f:e2:85:04:
74:e3:e9:2c:b0:6d:b1:ab:aa:0a:a7:9e:74:23:7d:
59:64:9c:97:bf:b1:ce:33:cf:b5:85:26:35:e6:ca:
3c:0e:22:45:01:ec:1b:d2:40:db:6c:59:8e:49:0c:
d1:42:c7:1b:c1:a2:57:0f:a3:cb:66:40:8c:05:a5:
77:4a:b9:b9:35:8b:08:44:e5:f4:2e:9c:b8:31:88:
92:f1:93:c3:c9:f2:a4:09:72:cf:dc:6b:6f:b7:f9:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0B:55:47:E7:01:4F:24:0B:E9:5B:C8:5C:03:AD:6B:03:96:D9:C0
X509v3 Authority Key Identifier:
keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/OQtVR-cBTyQL6VvIXAOtawOW2cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.81.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7d:f3:57:9d:6a:09:4d:51:75:8b:28:70:72:f8:5b:a5:ac:
1e:3b:46:3b:3b:c3:e1:b6:0a:84:6a:73:05:5a:6b:7a:60:96:
b4:56:41:99:c2:28:a6:6e:8f:6b:28:ce:2c:ae:c0:96:bc:65:
a9:c7:a9:1f:1c:9b:ef:ac:d0:d6:51:0a:33:d7:3c:f2:ee:04:
40:f1:63:03:46:36:1c:b7:db:0a:3b:de:71:fe:80:01:cd:b1:
5c:f8:ab:79:ce:50:5f:6e:05:f4:f0:97:9e:5f:15:a5:7f:d6:
a5:c3:3e:12:28:57:42:93:9d:d9:5a:50:78:1c:a0:ca:83:af:
84:f9:08:3d:47:f3:1a:1e:51:03:4f:58:c4:b6:9b:04:10:2f:
7a:4a:69:de:26:5c:27:cb:b7:96:6f:f8:dc:8c:36:ee:55:55:
82:37:06:3e:94:4e:44:73:10:9e:f1:69:92:01:97:e8:f1:65:
ab:60:b9:c3:e5:44:c0:0f:f8:d9:c8:74:8f:be:3c:c1:f6:63:
2b:5f:b9:f4:7d:70:7d:41:89:0c:99:4b:a8:1b:be:60:66:db:
78:cf:68:6e:43:59:0c:26:35:3a:69:0b:c1:ba:ba:34:47:c7:
50:64:b8:26:ca:20:76:61:65:9f:c2:60:1e:96:7b:c1:0e:30:
6f:4c:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:59 2025 by rpki-client