Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa
File: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (raw, json)
Hash identifier: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=
Subject key identifier: 3B:3B:27:E0:9A:0A:02:C1:B6:BF:95:1B:57:B0:76:04:6B:2B:4D:B3
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 0194228DDA48505D68FAB0EA6AFAD5B7A0B5
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa
Signing time: Wed 01 Jan 2025 15:48:29 +0000
ROA not before: Wed 01 Jan 2025 15:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42810
IP address blocks: 87.237.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:da:48:50:5d:68:fa:b0:ea:6a:fa:d5:b7:a0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b3b27e09a0a02c1b6bf951b57b076046b2b4db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:69:80:e5:27:1d:28:ea:56:4f:0e:56:5c:
7c:ef:02:10:0d:6d:e2:88:43:93:e5:4e:e3:22:6c:
a4:26:6c:71:d4:8c:3e:ce:30:8e:98:54:36:12:ba:
2e:13:77:09:8c:8d:89:5b:ca:cb:5f:a7:be:1a:65:
9f:d6:45:c2:9c:e7:9c:9a:bd:1f:5a:93:5b:18:6b:
13:76:60:93:50:9e:38:df:37:13:4d:ac:a3:c4:31:
50:d8:29:cc:1a:41:75:13:bb:19:d0:71:5f:d1:7c:
d5:4f:9f:2c:1a:41:c4:f2:72:2e:ee:74:6f:eb:e7:
85:36:f7:d0:1d:63:3d:47:16:74:aa:e1:6d:8b:83:
6e:6d:51:dd:b8:38:d0:76:2f:b8:70:94:f8:a2:ff:
80:b9:0f:e7:a3:82:82:bd:f3:18:03:1c:3b:80:c8:
d6:ac:40:5f:cb:ba:e4:96:42:5c:cd:08:89:5c:af:
8b:b2:3b:2a:50:f5:d3:e0:b9:80:8c:84:53:9e:14:
c1:9a:1f:fd:26:1a:b8:67:15:c4:35:c6:c3:ba:98:
de:b0:ea:81:fc:12:17:fe:78:35:82:69:02:e7:f3:
81:b2:01:35:ab:4f:ec:0e:65:3f:37:cd:66:c7:bd:
2e:36:90:b2:59:90:bf:9e:c6:3d:33:bf:4d:be:ad:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:27:E0:9A:0A:02:C1:B6:BF:95:1B:57:B0:76:04:6B:2B:4D:B3
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.168.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:cb:f7:21:25:59:29:ee:1d:7a:cb:0f:16:91:29:b8:a1:ba:
b6:40:66:12:7b:7f:8e:6a:90:f2:05:d9:b4:50:fe:b7:d6:19:
5a:4d:6e:06:95:10:76:e2:a1:44:4c:26:cf:f2:66:06:65:55:
7e:cf:93:17:c1:87:d7:8c:db:70:09:96:42:f4:bd:3d:2a:78:
71:ab:49:42:53:90:72:5a:e8:42:47:e7:96:0f:51:04:ee:37:
a0:88:89:65:66:24:57:6e:f1:73:1a:2b:c0:f6:f5:17:9d:5c:
c0:4f:c0:94:3f:5a:ee:b0:b2:f1:73:31:d7:55:66:eb:5e:d2:
4e:0c:07:ee:4d:33:32:d7:c8:65:58:d1:8b:43:68:bd:00:da:
4c:fe:33:45:2c:85:41:36:f2:06:8f:8b:20:42:bf:47:ff:6f:
16:23:31:25:c5:5d:c5:0a:15:da:47:22:4c:23:b7:1f:63:be:
b0:96:b2:a4:6c:d2:aa:36:06:6a:a4:3e:bc:eb:bf:65:f1:40:
ca:cd:16:df:14:1a:47:8b:3c:b9:4c:b9:e2:1f:a2:6a:b1:6d:
d5:b5:73:1c:25:15:92:b5:5f:a7:18:25:9c:57:a7:ab:db:10:
5f:3e:38:31:49:e6:89:92:47:61:2d:60:45:54:d9:ed:8c:a4:
2d:f6:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:31 2025 by rpki-client