Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/o6xhTh-LbVpkPe-OKkZ3skKF3HM.roa
File: o6xhTh-LbVpkPe-OKkZ3skKF3HM.roa (raw, json)
Hash identifier: xZSxrQQBxy+isCVcRvR8kMx4DtxBFospfhunX9KdhnM=
Subject key identifier: A3:AC:61:4E:1F:8B:6D:5A:64:3D:EF:8E:2A:46:77:B2:42:85:DC:73
Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial: 0194C0FA73A150AC771556087FF5552A8193
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/o6xhTh-LbVpkPe-OKkZ3skKF3HM.roa
Signing time: Sat 01 Feb 2025 10:07:06 +0000
ROA not before: Sat 01 Feb 2025 10:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49915
IP address blocks: 84.239.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c0:fa:73:a1:50:ac:77:15:56:08:7f:f5:55:2a:81:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
Validity
Not Before: Feb 1 10:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3ac614e1f8b6d5a643def8e2a4677b24285dc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:d6:d9:3f:10:0f:3b:d5:76:2b:1d:fa:7f:
b4:33:ca:57:f9:8d:fe:38:b4:7b:b1:dc:da:30:84:
01:b3:7b:ca:14:dd:b4:c1:59:cd:d8:7d:82:69:ca:
c3:fa:e6:47:58:3c:2e:86:25:25:d7:d0:e9:34:a4:
ce:85:4e:f9:64:96:08:c6:a8:ed:af:fc:d2:ab:9c:
bd:35:83:be:4d:97:6d:ed:6f:07:5b:19:9c:08:6b:
30:a3:c4:a6:dd:d9:51:64:dd:80:b4:ce:bf:12:2d:
a1:f2:50:85:e0:95:cb:35:fb:1a:f7:e4:4f:43:0b:
5d:31:b1:3f:7c:5a:4a:f7:cc:01:94:f1:e3:c0:10:
28:ee:a2:b6:1a:c7:82:51:52:24:df:84:c6:51:ef:
72:fa:9c:3f:67:8c:e4:79:9d:2a:cb:be:22:a6:d2:
ea:53:7b:5c:65:9c:66:6a:a6:6c:84:10:64:81:93:
cc:e5:d9:fc:f9:b0:b6:b9:f6:88:df:0c:51:5c:95:
a9:08:68:b5:b0:f8:45:d4:bd:69:b7:0b:7e:22:f7:
55:0b:b6:ab:7b:86:43:12:62:ba:35:4c:15:84:96:
ef:2e:d1:a9:12:ae:b1:ac:84:57:72:de:9d:0e:3d:
ae:b9:0e:80:d8:8a:a5:6a:9d:89:d0:7f:16:4d:4f:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AC:61:4E:1F:8B:6D:5A:64:3D:EF:8E:2A:46:77:B2:42:85:DC:73
X509v3 Authority Key Identifier:
keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/o6xhTh-LbVpkPe-OKkZ3skKF3HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.239.30.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a1:67:bc:3b:09:4b:0a:63:bc:34:08:d9:64:97:25:f2:b1:
4f:e6:fa:0a:a1:61:d3:80:fb:0a:9f:03:ca:b3:98:30:56:53:
c2:06:fd:2e:f1:66:7b:23:75:74:45:b6:56:68:66:44:f9:a5:
0f:64:11:b7:20:f9:ec:f1:3a:dc:d2:84:e1:c6:d9:58:6c:5e:
5f:a1:3b:a6:b6:3a:91:20:e7:98:13:e2:cd:11:d8:e3:b2:48:
29:95:c6:17:31:85:02:b3:e9:7f:ae:77:6d:35:0a:03:62:3d:
ff:7f:b5:72:b3:1c:86:e8:f2:ac:73:53:86:3e:ae:02:6a:0b:
5d:dc:2f:94:ef:6b:07:2c:fb:fe:16:06:66:ea:c6:08:d7:c8:
9d:be:e2:c5:2d:96:45:8d:31:80:80:25:f0:89:5a:15:60:2b:
98:65:0e:f9:15:6a:c4:01:0e:11:b2:c0:ae:a4:63:6f:91:0e:
41:e7:e3:19:3e:d9:81:5c:bf:b0:b9:7a:6b:2e:4e:6c:3d:78:
66:b9:7b:2b:5a:87:38:34:5c:57:03:5b:a2:14:17:be:6c:fe:
cc:1c:bb:46:4b:00:6a:67:84:83:4c:33:92:01:a9:70:b5:8a:
7b:00:47:32:39:11:d4:15:ec:de:20:c9:0e:79:4f:1e:e7:26:
c4:79:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:18 2025 by rpki-client