Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/rjNkcaWpx4NgEp7EebCLdM3ILZM.roa
File: rjNkcaWpx4NgEp7EebCLdM3ILZM.roa (raw, json)
Hash identifier: gP4yiejn3v7lSwj9QDjHhQARpfcTwm6Zlm/8oXwlSSc=
Subject key identifier: AE:33:64:71:A5:A9:C7:83:60:12:9E:C4:79:B0:8B:74:CD:C8:2D:93
Certificate issuer: /CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Certificate serial: 019423D6EC7597D86089EE5EDE2114F14852
Authority key identifier: 3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/rjNkcaWpx4NgEp7EebCLdM3ILZM.roa
Signing time: Wed 01 Jan 2025 21:47:55 +0000
ROA not before: Wed 01 Jan 2025 21:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197071
IP address blocks: 185.53.249.0/24 maxlen: 24
2a12:c8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 15:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:ec:75:97:d8:60:89:ee:5e:de:21:14:f1:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Validity
Not Before: Jan 1 21:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae336471a5a9c78360129ec479b08b74cdc82d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6b:ce:6f:0d:a7:c6:d8:52:d7:f1:68:56:3e:
b9:70:b7:6b:65:d9:8c:13:10:6d:c4:c5:1f:da:64:
29:00:f0:aa:c2:91:10:96:2e:40:90:04:fa:16:75:
5f:74:63:ce:51:7b:87:6d:9d:80:72:3e:bc:f1:7f:
a5:f0:f0:2a:b4:27:4b:79:ab:82:24:ad:a4:1b:5b:
de:86:47:b1:93:f9:a1:f2:3c:51:13:90:27:2b:c6:
91:00:8a:34:6e:ad:e9:23:8c:dd:c8:c6:7b:de:4e:
ae:3a:a6:3b:f8:78:6d:9f:0e:92:1e:06:c0:aa:e0:
9b:cf:7a:13:a0:b8:85:94:20:cf:07:a6:ea:d6:b2:
0b:25:fb:15:f7:88:6a:96:3f:7e:a7:68:e2:63:db:
b4:67:c1:57:b8:94:ee:1a:01:66:57:3e:bd:b0:10:
36:ba:5e:c9:05:87:0f:7a:3b:eb:58:b8:3b:2d:43:
f0:d2:c9:ef:ea:40:67:f2:c5:09:93:95:f0:fc:c6:
fa:a8:9a:ca:91:74:21:44:43:d5:cb:b9:7b:6d:22:
67:c4:1f:de:97:91:09:e2:8f:26:9d:a5:8b:a9:aa:
0f:ec:fd:b9:03:68:f9:84:57:77:00:c0:13:e3:06:
73:b5:0c:c0:a5:42:4e:f7:dd:7d:31:c5:f0:80:c4:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:33:64:71:A5:A9:C7:83:60:12:9E:C4:79:B0:8B:74:CD:C8:2D:93
X509v3 Authority Key Identifier:
keyid:3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/rjNkcaWpx4NgEp7EebCLdM3ILZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.249.0/24
IPv6:
2a12:c8c0::/29
Signature Algorithm: sha256WithRSAEncryption
93:69:6b:31:b2:1d:24:a3:ad:46:1b:14:70:92:b1:c6:ef:53:
cf:af:f7:20:19:3b:dd:70:f5:c2:36:21:b9:49:a8:41:2d:6c:
c8:9b:8a:0e:26:03:e5:5f:ce:b9:bd:b9:a7:f7:85:f5:8c:9f:
d1:30:69:35:eb:c1:81:8d:78:a6:1e:1d:4a:6c:07:68:7a:87:
90:0f:f2:28:be:82:a5:16:54:12:11:f4:c5:e1:e1:29:3d:3b:
d3:c1:5a:65:2f:f5:a1:2b:3c:a7:dd:27:b3:de:0c:63:4b:c1:
e6:b0:e9:32:c8:52:4e:7f:2d:1f:1f:e5:e1:b2:b2:af:65:13:
83:81:3d:2b:72:a4:2b:e1:f6:e8:83:c9:ba:59:9a:63:44:1d:
23:06:10:bb:d6:3f:93:91:f2:58:03:c7:f1:63:19:27:9b:7b:
2a:fe:c6:e4:37:da:d7:2d:aa:91:ce:4c:52:2d:7d:89:0a:b2:
59:de:01:c3:2d:d3:6f:46:e2:97:26:fe:91:12:69:ba:23:6a:
e1:5d:08:85:21:d9:b3:cf:27:10:93:d5:20:30:4b:cc:e5:77:
d2:b9:91:18:20:51:1e:fb:c4:dd:e9:35:08:f3:6c:86:22:3c:
0c:4c:54:6a:fd:e3:95:7f:47:81:81:70:3a:3b:90:71:f6:b8:
45:75:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:58 2025 by rpki-client