Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa
File: OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa (raw, json)
Hash identifier: +dX5GIlPaHoX8hOklKsClO3JcTsDNTNWJiq3yrlcruo=
Subject key identifier: 39:70:91:E5:E6:40:8C:02:85:7B:FE:7F:5A:A6:6F:B0:B0:EC:20:6C
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 0194266B317F5531AFB2370998A524C00A5F
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa
Signing time: Thu 02 Jan 2025 09:49:06 +0000
ROA not before: Thu 02 Jan 2025 09:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64411
IP address blocks: 158.172.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:31:7f:55:31:af:b2:37:09:98:a5:24:c0:0a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=397091e5e6408c02857bfe7f5aa66fb0b0ec206c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:df:88:e2:26:d1:d4:fa:6c:4d:71:c2:65:
3f:82:d7:5c:fb:44:7f:a4:cc:22:82:eb:ea:3c:a7:
ae:aa:f7:e0:6d:66:47:de:a7:8a:30:7a:29:75:8d:
3a:c3:3e:37:92:e0:e2:42:2f:3c:f8:73:db:33:7d:
ac:e8:a6:ff:ef:0b:71:1b:fb:40:a0:fc:99:e9:00:
25:ca:7c:f9:a1:60:1e:30:c0:36:f1:92:c9:c7:71:
11:01:b8:56:1d:db:bf:33:b3:64:3f:d1:d2:47:3e:
ee:f6:4c:1c:c4:1d:7a:11:a6:b2:1d:98:e4:bb:08:
6d:24:42:56:8e:45:5c:b8:67:e7:29:e8:38:a6:34:
66:55:b5:df:d0:a5:f3:a6:ed:63:51:4e:9b:6e:11:
d5:a9:d2:81:4c:ab:39:36:18:0e:3a:e1:ad:12:4a:
bb:82:45:f2:a1:4a:75:dd:d3:40:d1:1a:0f:5c:fe:
1f:f9:b3:81:f4:0b:57:e0:5b:dc:00:ce:16:9a:8d:
b9:28:75:3f:54:05:4a:2c:48:92:98:d2:61:8e:75:
c3:8c:70:cf:bb:2c:75:6e:c3:29:d0:10:ba:32:72:
71:ee:13:b4:ba:9d:38:a0:6d:f3:7b:dd:81:6b:ba:
3b:ce:19:52:bb:03:b0:e0:a1:36:82:f4:a7:11:0a:
2b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:91:E5:E6:40:8C:02:85:7B:FE:7F:5A:A6:6F:B0:B0:EC:20:6C
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/OXCR5eZAjAKFe_5_WqZvsLDsIGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.0.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:6e:34:e5:dd:57:b6:19:4e:a6:ec:d2:35:8d:81:93:10:7c:
ed:47:eb:89:f9:53:ac:11:0a:93:7c:8a:df:9e:b5:82:c0:cc:
f9:15:6f:c6:f4:6c:c7:17:d5:eb:16:db:f6:38:33:35:35:3e:
d5:f8:05:37:5f:63:be:ea:fb:07:c3:d1:71:27:7e:da:3f:85:
d2:3f:aa:2a:1e:d1:a1:f3:6d:d8:7a:e3:a0:1f:fd:31:3c:12:
92:fc:f7:99:42:7f:c8:14:f7:f7:1c:70:fa:7d:0d:48:f1:c0:
ca:df:2b:43:3b:ff:9f:de:ab:6b:6f:cb:b7:91:08:9e:97:0d:
78:1e:4f:bc:32:dc:d0:2e:79:69:94:60:8a:e9:32:50:0d:48:
05:1d:0a:f8:58:f7:e5:f7:da:2d:a0:85:48:fb:bd:be:63:cc:
bc:37:5f:55:a1:bf:97:de:ae:5d:70:d7:51:68:c3:3d:8a:08:
f9:d7:be:75:6f:2e:5d:cd:17:d1:b7:38:56:ac:f3:4e:14:6f:
96:cb:48:c8:45:8a:bd:8a:33:f3:e9:28:27:72:24:3f:e5:15:
94:75:0e:20:ba:9c:df:97:31:4e:40:6d:8f:2a:5d:24:fd:39:
74:31:fe:c6:9c:f0:ee:f0:68:6f:7d:e4:b0:3e:ab:b1:cc:34:
99:bf:90:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:47 2025 by rpki-client