Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/OXvCW8MMgkF4QZALyfIeJNaaoXA.roa
File: OXvCW8MMgkF4QZALyfIeJNaaoXA.roa (raw, json)
Hash identifier: /PcXdkDQ/rrC5eLGBEhuLOwRqaBJEq8rOAtu2iNHHtg=
Subject key identifier: 39:7B:C2:5B:C3:0C:82:41:78:41:90:0B:C9:F2:1E:24:D6:9A:A1:70
Certificate issuer: /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial: 019440AB5AD77BEAC963EB297280BF57B55C
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/OXvCW8MMgkF4QZALyfIeJNaaoXA.roa
Signing time: Tue 07 Jan 2025 12:09:19 +0000
ROA not before: Tue 07 Jan 2025 12:09:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209836
IP address blocks: 77.237.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:ab:5a:d7:7b:ea:c9:63:eb:29:72:80:bf:57:b5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Validity
Not Before: Jan 7 12:09:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=397bc25bc30c82417841900bc9f21e24d69aa170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:d6:40:a1:39:4f:89:50:42:68:76:dd:05:
dc:72:58:c7:f3:b2:b1:21:03:ac:a3:8a:56:a5:46:
55:54:5a:3c:ab:94:15:37:11:e8:fa:be:b5:e3:15:
91:c9:62:09:5b:20:e3:31:dc:95:d1:05:8c:8a:64:
fd:36:2a:8b:9c:2a:48:39:9c:2b:27:1d:c0:0c:a9:
f4:e9:fc:43:8c:b7:fe:da:8e:47:77:c1:e3:65:db:
1b:67:11:29:29:9f:dd:28:68:d7:79:82:38:f5:1a:
9c:38:66:6d:93:bb:21:3a:b2:2f:09:14:e4:85:a3:
8b:04:da:03:ac:d1:a8:d6:72:65:05:50:ae:17:79:
21:34:ed:8f:ee:a6:54:5f:65:70:b2:58:fb:9c:eb:
70:38:10:67:de:e6:75:39:47:57:82:44:00:15:13:
33:c7:f6:4f:35:9d:7b:08:e7:ac:19:20:c5:c7:f1:
fd:a6:64:8f:bc:cb:7b:1c:ae:60:4d:a4:28:67:c0:
68:c7:bf:ca:09:27:e3:73:c0:2a:33:79:cc:01:49:
d5:c3:bf:92:28:b1:c7:73:00:91:ab:34:54:ef:94:
4c:14:ae:54:f3:8d:c8:03:be:41:62:2d:7d:b8:53:
ba:2a:8d:ef:10:e1:3a:b3:90:52:c4:69:fc:05:5e:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7B:C2:5B:C3:0C:82:41:78:41:90:0B:C9:F2:1E:24:D6:9A:A1:70
X509v3 Authority Key Identifier:
keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/OXvCW8MMgkF4QZALyfIeJNaaoXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.73.0/24
Signature Algorithm: sha256WithRSAEncryption
60:0d:e5:43:92:f5:10:db:17:b1:f9:7e:22:9c:f3:3b:8f:e1:
23:4f:f9:37:42:15:25:98:69:af:ee:32:0d:59:e1:c3:14:51:
4c:37:a1:96:4f:f3:bb:5b:a8:6b:4d:ef:65:79:69:31:4b:2c:
f6:93:78:f1:89:a7:4f:91:4f:c5:8a:14:f7:18:83:51:e9:5f:
1b:6b:19:75:8b:ef:26:b2:3a:87:11:9b:49:19:26:32:11:b2:
ef:1a:1f:f7:cf:19:dc:0c:ea:79:be:e5:53:17:ca:72:74:40:
c5:ae:6d:b3:bf:4f:c8:bf:58:4c:bf:21:0b:da:c0:7c:bd:bf:
e2:57:fc:1c:fa:ce:36:7b:b9:68:61:f6:0d:85:0b:26:5b:6d:
dc:70:84:98:73:c0:87:5b:45:20:f0:98:fd:86:a8:0c:72:32:
67:2a:e3:cf:f0:44:4d:ca:8c:29:ce:58:cf:81:2a:f0:66:2d:
15:02:96:31:24:b1:75:2e:f4:24:c4:62:80:9e:7b:f8:7e:4e:
25:64:77:46:eb:43:ee:be:f0:57:1b:ad:fc:c5:77:ae:84:41:
68:1a:1e:4b:12:55:f4:39:83:15:55:f7:9d:3f:4c:d4:9d:13:
39:54:ff:d9:75:03:34:eb:5e:3d:ed:a5:74:7d:fd:d4:9c:99:
d1:66:27:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 19:26:14 2025 by rpki-client