Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/OSbUFc2Qchp245BcUCLbk8X6Wbw.roa
File: OSbUFc2Qchp245BcUCLbk8X6Wbw.roa (raw, json)
Hash identifier: RHNHVrnaBqvecm9wU9n/W/eTM73Oy9JpA5EZrdT9big=
Subject key identifier: 39:26:D4:15:CD:90:72:1A:76:E3:90:5C:50:22:DB:93:C5:FA:59:BC
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA474C9D70D36B6C67252B7CD68398
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/OSbUFc2Qchp245BcUCLbk8X6Wbw.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44803
IP address blocks: 77.37.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:47:4c:9d:70:d3:6b:6c:67:25:2b:7c:d6:83:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3926d415cd90721a76e3905c5022db93c5fa59bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:d4:2b:57:8c:8e:7b:2c:ea:51:1a:e3:22:
2a:67:64:bc:13:2b:c1:2c:40:0d:a7:00:f1:f6:b9:
a7:e0:9c:46:3b:6e:4a:b5:38:88:03:26:93:f6:47:
5d:07:9e:02:ba:be:7e:9c:24:04:35:2e:9e:fd:cc:
52:1e:67:6e:f6:4c:b9:38:f1:dd:c6:e4:9d:09:b6:
ca:b5:c8:b2:23:af:0e:18:b9:29:f2:30:1e:a4:b8:
e8:de:1b:4e:32:37:83:77:d0:6f:14:2d:97:6f:81:
f6:e0:11:6a:5b:73:29:0f:e9:23:50:37:d1:a8:ae:
55:7f:01:39:25:29:6d:89:ea:5d:50:bc:a0:a2:ab:
7a:3a:5b:c4:20:40:0c:07:c6:4a:b7:bd:09:7c:17:
28:19:36:d9:64:8a:6c:06:e8:8f:5c:f7:54:33:ca:
83:bc:a7:ef:c6:73:90:b0:be:61:b4:ce:1d:7e:6e:
57:c2:ea:66:d9:2b:ea:b3:96:d4:a7:ca:b2:70:d4:
b8:b6:43:48:57:13:9e:57:6f:2f:69:bf:66:72:c7:
fa:0e:ab:01:b7:a9:60:f9:39:61:76:82:a7:0c:fd:
ca:d7:7b:e3:f5:f9:3c:3f:8b:25:c2:d2:80:d8:f0:
4d:ee:f4:0b:5e:e9:c6:63:16:ee:99:2d:cb:ec:f4:
3f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:26:D4:15:CD:90:72:1A:76:E3:90:5C:50:22:DB:93:C5:FA:59:BC
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/OSbUFc2Qchp245BcUCLbk8X6Wbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.37.96.0/23
Signature Algorithm: sha256WithRSAEncryption
40:be:57:b2:d8:f0:d8:45:89:0b:82:95:48:e2:e3:a0:79:15:
e3:e8:c6:e1:05:3c:f4:46:11:23:c6:bd:7a:b1:de:d5:cc:9e:
bf:f8:f5:3c:c7:57:2b:8b:d0:55:9b:f4:e1:13:4d:38:18:f4:
12:20:27:b1:cc:81:78:66:b9:e4:bc:1f:0d:87:59:17:da:19:
df:01:03:d1:84:ee:21:f5:7c:fe:9c:cd:32:6d:09:45:3f:fa:
d6:f8:83:bf:43:cc:93:93:49:6d:cb:ba:cd:ec:64:31:67:28:
bc:e4:63:b9:05:fd:54:97:68:09:16:22:29:a1:d4:40:04:67:
6b:6f:d5:bc:50:de:31:df:3e:e6:42:dd:e4:95:a7:c9:a0:61:
d3:8f:e6:af:23:c5:d5:ea:e3:0d:94:2e:2b:2e:87:2c:1f:6a:
92:61:6f:1d:31:c3:d5:6b:68:b0:6e:c5:ee:bf:84:fb:46:1f:
9f:aa:fd:ab:a6:c9:98:10:83:60:2f:95:63:de:27:6c:9e:b1:
95:b2:f6:3e:0c:86:99:0e:1b:d4:68:dd:39:10:5c:96:c3:c0:
83:02:43:45:44:66:c1:38:1c:a5:26:21:14:2f:12:39:76:f8:
ef:a4:f2:87:b6:5b:ab:1c:d6:1b:94:a1:a0:03:49:dd:79:a7:
88:44:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:29 2025 by rpki-client