Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa
File: OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa (raw, json)
Hash identifier: xQZYXykxBIz0VsK18m+4NwPpzDRdrPubWdJIqyjXD98=
Subject key identifier: 38:81:ED:70:A3:1B:13:DA:9E:20:30:E8:82:FD:B2:0E:5A:C2:43:88
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 01942520762DDA82F64EBDF250DC4E71DF95
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa
Signing time: Thu 02 Jan 2025 03:47:51 +0000
ROA not before: Thu 02 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198248
IP address blocks: 176.102.72.0/21 maxlen: 21
176.102.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:76:2d:da:82:f6:4e:bd:f2:50:dc:4e:71:df:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Jan 2 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3881ed70a31b13da9e2030e882fdb20e5ac24388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:f5:ba:58:40:55:e4:4f:79:07:61:42:be:
9a:62:61:5c:31:99:be:15:72:a1:07:40:f1:f2:7a:
1d:cc:43:d1:5c:4a:f4:7c:e9:3c:e3:25:34:e0:74:
8b:aa:8d:d0:fd:02:48:68:01:7c:25:3b:0b:6a:c5:
b9:3d:ef:25:14:7f:15:01:78:4f:03:e4:c5:81:d9:
21:ee:16:fc:24:c0:d7:a6:d0:51:ea:e9:d4:76:73:
6e:00:63:7c:3e:f5:9d:59:45:c5:bc:28:76:82:d8:
ec:5d:91:35:d5:41:fb:e7:6a:ad:dd:f8:32:82:cf:
4b:c7:21:1e:f4:c1:e2:88:53:52:45:8c:89:3d:5d:
0b:ed:86:87:bf:57:8a:af:80:ca:53:30:1c:e8:d0:
ee:8f:4e:a7:4c:78:f7:cc:6c:3d:be:e1:8f:01:65:
00:39:bf:95:7f:c1:c2:81:d5:ae:87:4f:3e:90:a5:
e9:c2:0a:51:eb:28:26:5b:df:b2:c5:85:b0:41:63:
c1:cd:7c:96:59:e6:3e:88:a2:d3:e1:e3:39:26:5c:
c4:5e:c0:c6:ed:ca:2a:10:33:7c:09:c7:75:ed:75:
63:bf:7d:26:80:ad:77:af:fd:3c:9e:fb:cc:d4:27:
ec:49:b6:78:1b:c2:e8:99:61:84:93:59:c5:ce:3e:
48:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:81:ED:70:A3:1B:13:DA:9E:20:30:E8:82:FD:B2:0E:5A:C2:43:88
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/OIHtcKMbE9qeIDDogv2yDlrCQ4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.102.72.0/21
Signature Algorithm: sha256WithRSAEncryption
c3:77:4b:a5:b4:f0:b2:ab:7b:6b:be:88:70:2d:8c:0c:9e:73:
ef:b9:fd:38:74:96:63:cc:d7:3d:43:0b:f7:93:3b:f8:19:8c:
32:6d:17:cb:01:60:6d:4d:a0:13:f7:e3:b2:49:2e:55:19:8a:
c5:f3:56:81:f3:47:14:4e:fa:b6:fb:73:d5:f7:b2:63:7d:a3:
72:d1:7b:eb:6c:29:b0:b3:70:b1:e2:c7:08:4f:cc:11:b6:51:
1b:ad:dd:3a:06:fc:88:44:82:92:66:16:d5:02:80:01:ba:9c:
81:cf:c9:ad:d9:2f:e2:3b:4a:34:76:f0:fb:3d:e1:54:bc:d8:
ac:d9:61:29:55:8c:db:85:2a:06:e8:54:68:0e:18:98:ce:ae:
3f:42:da:0f:81:85:c6:be:46:b2:10:31:87:fb:71:b1:78:68:
84:7d:00:b6:79:bf:59:ff:58:5b:57:bb:8f:e7:18:78:65:e8:
6f:87:1d:9c:b5:bf:de:c5:a9:af:39:f6:1b:a4:38:29:dc:e1:
2e:b2:74:91:af:bc:35:39:39:08:1a:9b:fb:e7:ac:5d:dc:12:
78:79:c3:f2:8f:91:15:3c:65:f6:09:05:8b:3b:a0:d8:fa:cb:
5f:51:d8:ca:c5:f6:b3:b5:46:71:88:7c:2a:57:05:52:5d:23:
bf:84:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:39:21 2025 by rpki-client