Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/Ojwfa5xEijMvd_j_LAOzs7vnqW4.roa
File: Ojwfa5xEijMvd_j_LAOzs7vnqW4.roa (raw, json)
Hash identifier: BXNYaUB0Zfc7mvCgmarWMLrgrg5dZOzYs8T6+u6yFW0=
Subject key identifier: 3A:3C:1F:6B:9C:44:8A:33:2F:77:F8:FF:2C:03:B3:B3:BB:E7:A9:6E
Certificate issuer: /CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Certificate serial: 019426D8D36B70467CE4870E1C8FB6754A7A
Authority key identifier: E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/Ojwfa5xEijMvd_j_LAOzs7vnqW4.roa
Signing time: Thu 02 Jan 2025 11:48:51 +0000
ROA not before: Thu 02 Jan 2025 11:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208355
IP address blocks: 152.89.72.0/22 maxlen: 22
2a06:8200::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.mft
rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:d3:6b:70:46:7c:e4:87:0e:1c:8f:b6:75:4a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79dc5435a2dc97e365ff49570c04d513f6fced2
Validity
Not Before: Jan 2 11:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a3c1f6b9c448a332f77f8ff2c03b3b3bbe7a96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:b5:fa:4c:81:e9:59:26:98:4f:4b:f1:2a:
55:3a:32:6e:81:ca:37:4a:34:48:da:12:13:2b:eb:
15:04:13:97:b6:3c:94:47:a5:ab:72:f4:08:88:07:
a3:03:6e:0d:4e:db:cf:ee:60:f6:95:ac:5e:a5:53:
c1:57:6d:6b:28:65:8d:4f:4a:7e:e9:21:e1:d3:ef:
5a:2e:85:a8:06:39:7e:28:3f:5f:4a:c9:a0:32:bc:
36:c2:fa:a8:8e:d5:3b:23:aa:f0:62:21:f5:53:20:
82:29:55:cd:73:b7:17:66:29:81:3e:d9:d2:9e:ff:
d9:f8:b8:0d:0a:88:97:32:1f:9f:03:34:e8:a0:5d:
c0:58:c0:0f:2b:41:c6:cf:6d:35:65:44:75:bf:fc:
f4:9d:f8:96:21:90:8e:e7:37:7f:50:79:70:8f:25:
38:8b:29:07:32:ca:d4:3d:47:26:6d:af:83:20:a2:
3c:12:6c:67:21:03:91:25:fe:bf:18:d9:b9:01:64:
20:f9:6e:89:1b:3b:3d:09:cf:21:b4:9c:f4:43:32:
83:be:9e:fe:a1:e9:3a:94:b7:e4:92:81:15:79:71:
9b:7c:36:35:2d:e2:80:d7:98:d4:10:e6:ec:f3:1e:
17:8e:56:d6:10:42:3d:c4:4c:78:ef:8d:15:3c:8c:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3C:1F:6B:9C:44:8A:33:2F:77:F8:FF:2C:03:B3:B3:BB:E7:A9:6E
X509v3 Authority Key Identifier:
keyid:E7:9D:C5:43:5A:2D:C9:7E:36:5F:F4:95:70:C0:4D:51:3F:6F:CE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/553FQ1otyX42X_SVcMBNUT9vztI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/Ojwfa5xEijMvd_j_LAOzs7vnqW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ce95be-a37a-4c23-b9cb-706554f88046/1/553FQ1otyX42X_SVcMBNUT9vztI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.72.0/22
IPv6:
2a06:8200::/32
Signature Algorithm: sha256WithRSAEncryption
73:65:e7:b6:4d:f7:00:4d:ed:07:6a:3a:66:08:db:a4:75:57:
a1:83:ae:45:b7:4c:ed:39:88:10:26:da:b3:51:7b:a9:86:a2:
3c:9d:ea:91:2b:4d:36:44:8a:5b:ab:c1:eb:23:00:fe:f2:d0:
3d:06:88:50:a5:5e:66:6a:95:fa:f6:90:4f:b3:24:31:15:38:
13:6a:76:8d:5a:6f:c2:d0:49:8f:cb:bc:a8:69:cd:46:f9:43:
44:f1:55:48:22:cc:e5:23:c6:7f:41:26:0f:25:15:4f:76:cf:
4d:ec:2d:a4:5d:49:1e:31:98:ff:c0:e5:41:d6:40:23:91:93:
72:d8:fa:a3:ea:59:c5:b0:d4:27:ad:43:1c:21:83:30:47:36:
c3:a0:d8:7f:e6:ed:85:24:b8:26:73:d2:f8:7f:0e:b7:fa:f3:
9d:c5:27:eb:3b:ac:ae:2e:3f:4e:f3:b5:51:53:8c:bb:9c:d3:
11:98:30:16:dc:08:b6:8c:76:34:6f:68:4a:69:97:da:27:d7:
fa:0d:a4:a4:de:2d:e6:8d:cd:c5:4a:15:68:50:5c:51:3c:db:
73:1a:99:c3:d5:12:6c:43:09:a5:fc:46:96:76:4c:34:60:4b:
b0:ff:b1:50:68:e0:36:81:54:17:d5:84:58:04:dc:82:49:30:
77:8e:30:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:52 2025 by rpki-client