Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/OflCzXga8ucfjVqp9uUhh7zK_qM.roa
File: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (raw, json)
Hash identifier: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=
Subject key identifier: 39:F9:42:CD:78:1A:F2:E7:1F:8D:5A:A9:F6:E5:21:87:BC:CA:FE:A3
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019423D7117458DEF4D9E1C255DA50734120
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/OflCzXga8ucfjVqp9uUhh7zK_qM.roa
Signing time: Wed 01 Jan 2025 21:48:04 +0000
ROA not before: Wed 01 Jan 2025 21:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197726
IP address blocks: 185.112.12.0/23 maxlen: 23
185.112.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:11:74:58:de:f4:d9:e1:c2:55:da:50:73:41:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39f942cd781af2e71f8d5aa9f6e52187bccafea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:5b:23:cd:bd:da:9a:43:fc:29:c1:da:0b:
3d:f2:bd:51:d4:0c:5e:21:4e:4a:ce:0b:6b:19:95:
f3:7b:85:62:db:ff:a8:92:73:ff:ad:7f:b9:ef:8a:
1f:5d:7a:79:69:d7:0e:a8:83:69:bf:08:b2:d8:d0:
ed:01:c4:b8:8d:83:f3:70:2b:63:0e:f5:30:74:64:
ec:ab:2a:31:66:e3:44:15:0c:37:83:0c:01:e3:54:
a4:5f:a7:9b:8e:cc:58:a0:96:3d:36:08:9c:3c:30:
41:50:0a:6c:d7:a1:11:ff:fe:ef:12:24:b0:24:7c:
1e:2d:c3:12:cb:d6:7e:58:4a:86:09:90:6d:46:0e:
31:80:81:00:20:f8:d3:60:c2:d5:0d:3b:fc:f8:78:
84:37:52:9e:64:5b:f4:07:74:44:c1:44:87:81:b6:
3b:8b:47:25:a1:f1:b3:fd:32:b7:12:ac:b5:4a:4f:
73:30:90:f0:8c:5e:9b:9e:a9:27:ff:1a:7e:e9:7a:
d5:9f:a4:aa:ed:3c:77:61:e1:5e:de:32:7c:60:b4:
2b:9f:28:c7:79:0f:02:a8:df:9c:fa:43:9c:3d:7f:
e7:57:e4:85:15:b6:9e:6e:e0:97:4a:43:0e:af:12:
fd:06:f9:9a:50:f1:1c:d2:9b:c6:a4:fc:b3:b5:1f:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F9:42:CD:78:1A:F2:E7:1F:8D:5A:A9:F6:E5:21:87:BC:CA:FE:A3
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/OflCzXga8ucfjVqp9uUhh7zK_qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.12.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:69:2b:3b:d1:10:00:95:cf:c1:0e:54:d5:e3:b7:5c:f4:01:
be:af:ea:1f:4f:cf:ef:43:be:0c:3a:69:1b:01:e7:87:16:62:
e5:80:75:02:99:0c:ac:96:8d:84:7e:13:3f:8e:dc:6a:39:a5:
34:8a:1d:b8:59:46:41:ac:78:ed:5b:58:c9:d7:e9:00:01:cf:
db:bf:5a:bd:f5:2e:d7:83:61:0b:8c:10:e2:e4:bd:a6:cf:20:
6b:e9:0f:00:ce:df:b4:07:fa:28:68:e1:0e:0b:53:a0:9f:92:
b0:72:d3:c6:89:a7:65:6b:49:c6:ef:e6:39:e3:43:3d:8c:a6:
c1:0b:06:80:ef:d7:83:77:02:4c:ae:86:e6:73:89:4a:9d:eb:
bb:12:6a:ff:a8:53:12:f5:43:80:6d:5d:bf:53:30:39:68:2c:
3e:ca:44:be:8b:9c:08:9e:7b:a6:1d:7b:49:7a:33:14:6d:a6:
4f:af:a6:8f:6e:e4:3e:31:c2:ed:4d:a5:5e:00:cd:e4:ad:49:
89:d0:4a:ff:85:15:9d:24:9d:10:7e:8e:47:de:8f:cd:9f:51:
4d:a1:6f:63:76:c0:0a:74:a0:d8:f1:9a:8b:3b:59:90:12:4f:
ed:d4:4a:3d:eb:10:06:15:29:11:c6:5a:09:af:b4:d6:62:74:
96:28:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:50:05 2025 by rpki-client