Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/oK0JQquC8jyrOxmEpSlud6wYln0.roa
File: oK0JQquC8jyrOxmEpSlud6wYln0.roa (raw, json)
Hash identifier: t4faWT5Ya2COfLJjFhhmnJ3LXyx76ITY8NFNVNUc2d8=
Subject key identifier: A0:AD:09:42:AB:82:F2:3C:AB:3B:19:84:A5:29:6E:77:AC:18:96:7D
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01941F8C37AAFAB7F9C2E364FBFBEF5CBC4B
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/oK0JQquC8jyrOxmEpSlud6wYln0.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 193.106.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:37:aa:fa:b7:f9:c2:e3:64:fb:fb:ef:5c:bc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0ad0942ab82f23cab3b1984a5296e77ac18967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:c0:37:7c:b0:5b:74:59:d7:51:46:35:8d:
1a:ec:2b:8b:71:b3:5f:7d:f5:13:3f:2b:f7:f5:93:
3e:12:6d:14:e6:8e:8a:f7:de:f1:91:4f:44:8f:eb:
9c:1f:8e:01:32:d9:57:14:b6:22:ef:da:74:e8:d2:
81:c4:2a:55:1c:37:8c:1e:80:f8:c4:1d:6f:2b:73:
5d:e2:86:63:d7:f0:75:c7:81:bd:cd:8d:da:68:fe:
a8:1d:07:b3:9e:f9:21:ee:a9:02:06:4a:6a:33:4d:
10:fe:64:a1:7a:72:ff:db:49:6b:63:a0:97:ba:f1:
d5:57:14:ed:02:f1:2e:9b:61:b2:99:61:ac:f1:21:
c4:55:fd:03:4e:17:8d:12:1f:b2:b6:cb:af:48:37:
a1:59:0e:68:03:69:91:30:7a:ea:ec:41:5d:01:a7:
6e:84:70:2e:cc:2c:3d:cf:a0:99:18:49:2e:9c:62:
02:2d:b8:04:c8:fa:06:2d:26:ec:c7:f0:8a:f9:27:
4f:2f:c8:bc:fa:3a:f8:c1:f1:cc:fd:ec:6e:00:df:
2b:e0:c6:5c:f8:e8:4b:ce:c9:73:b8:22:f2:e0:e6:
f5:d3:ef:de:a7:3a:d7:b4:b3:af:b2:7c:44:c6:05:
e7:57:6d:7f:2d:7f:2d:d7:bd:bf:0a:ce:ab:a9:9a:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AD:09:42:AB:82:F2:3C:AB:3B:19:84:A5:29:6E:77:AC:18:96:7D
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/oK0JQquC8jyrOxmEpSlud6wYln0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.197.0/24
Signature Algorithm: sha256WithRSAEncryption
33:e7:0d:cf:12:1a:9c:d2:08:2c:2d:3c:86:c6:d1:0e:1e:24:
a0:0b:a9:0f:4a:ec:49:88:8f:16:8a:15:fe:d8:41:67:70:56:
7c:7c:25:8e:25:6e:33:ba:72:99:e6:f9:ed:9e:31:7b:28:50:
25:15:cf:0e:10:75:2e:44:1a:bf:6c:fe:a1:07:c8:3c:9f:d0:
e1:98:06:0b:61:b1:3f:91:79:b0:5e:d3:b7:b4:7d:00:8e:09:
50:a0:e8:45:2a:05:f0:46:fd:fa:ee:6f:77:91:80:9c:4a:f8:
a4:59:50:d4:e1:47:31:f2:10:f3:44:c2:8b:4e:2a:f8:15:d3:
c1:86:50:71:74:6e:ed:d7:44:cb:c8:da:cf:aa:b4:26:88:25:
43:05:19:ea:8d:19:a0:37:9b:ee:bf:b0:ad:f2:43:28:01:e6:
4a:9a:f7:e0:33:e8:3f:fe:de:35:fc:dd:5c:d7:4b:ba:be:aa:
f6:3b:7f:f4:5e:bb:ff:b9:ae:aa:77:f4:7b:5c:b2:dd:97:35:
4b:ff:a7:90:1a:bf:2b:60:dd:92:80:42:ff:64:e0:d4:8f:23:
e8:64:90:1c:72:77:b7:02:ec:b3:36:83:a0:1f:cd:05:90:2f:
5b:e2:f8:52:72:92:27:aa:33:f8:af:58:cf:3f:fa:b4:34:77:
1c:7c:9f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:12 2025 by rpki-client