Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Ozt0FRe2Leb8sCNl0W5B40IpnjQ.roa
File: Ozt0FRe2Leb8sCNl0W5B40IpnjQ.roa (raw, json)
Hash identifier: whC13Pnlc7GcGGbc2VUXJoIzEVXbusMObP49ogDkhjw=
Subject key identifier: 3B:3B:74:15:17:B6:2D:E6:FC:B0:23:65:D1:6E:41:E3:42:29:9E:34
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194266C8CEEA6606F82421F581C99F48DD1
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Ozt0FRe2Leb8sCNl0W5B40IpnjQ.roa
Signing time: Thu 02 Jan 2025 09:50:35 +0000
ROA not before: Thu 02 Jan 2025 09:50:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212732
IP address blocks: 46.61.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:8c:ee:a6:60:6f:82:42:1f:58:1c:99:f4:8d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 09:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b3b741517b62de6fcb02365d16e41e342299e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d0:1b:fc:1e:03:88:96:62:7e:b3:65:77:07:
1c:ab:46:bb:40:6a:2b:ec:2c:ab:50:9d:40:00:5b:
de:28:bb:57:02:ad:e3:56:9d:ac:ea:22:fa:3c:56:
aa:f3:e6:2c:85:cd:65:18:1b:38:82:a3:43:48:5b:
1e:4f:2c:df:31:72:0f:e9:04:33:b6:53:9d:2a:20:
89:b3:e8:3d:47:8d:e0:86:92:dc:53:21:5c:b5:51:
fb:f5:33:ec:49:d8:5b:4b:a4:0a:8c:44:7b:73:bb:
5b:3c:20:d7:01:fa:b0:44:d9:13:64:cb:e0:ea:c4:
68:d9:fd:eb:49:8c:e2:7c:66:49:65:89:10:4d:88:
0f:34:52:16:14:13:8d:57:2b:f4:fc:b9:f1:df:16:
10:68:a1:0e:9f:87:78:a9:cb:9e:1b:4f:72:84:2f:
3d:1a:90:dd:73:cb:91:35:c9:c2:aa:ff:6a:5d:19:
14:19:3f:11:28:bb:ef:c8:b3:65:36:04:09:d2:9a:
23:d3:9c:36:ee:74:4b:8c:c9:7b:c5:bf:71:83:bd:
af:73:14:33:8e:c8:7c:58:8d:20:7d:93:5b:3a:d2:
cc:bb:ba:e3:cb:ec:a0:36:28:a7:cc:6b:74:70:f2:
25:99:56:7d:66:37:88:8b:58:87:a3:b1:46:fa:ba:
e1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3B:74:15:17:B6:2D:E6:FC:B0:23:65:D1:6E:41:E3:42:29:9E:34
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Ozt0FRe2Leb8sCNl0W5B40IpnjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.61.181.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ef:f5:66:c5:03:a0:c3:d3:fc:23:76:54:fa:7b:92:5e:74:
b0:ab:8e:0c:15:fd:14:40:20:a3:70:be:2e:15:4a:d9:d7:cc:
0d:d1:b5:d4:dc:a3:1e:ba:45:f7:3a:93:b8:18:37:ab:78:72:
50:c6:f6:f0:29:a8:67:ef:71:9a:7c:b0:0d:97:17:a2:d6:7a:
8c:19:55:8e:1d:4d:25:19:21:74:4e:fc:b1:39:9e:0b:60:94:
e6:d5:84:09:6f:93:e9:38:fd:d8:5f:2d:d1:d1:89:3d:f2:f0:
2b:17:98:b6:37:62:2a:94:bf:f4:8a:8c:50:38:64:75:ce:04:
68:2e:3c:ac:49:16:5b:04:58:bb:f5:76:83:d2:4c:c2:29:8e:
25:17:83:a5:7c:95:11:dc:46:5d:d2:62:c5:ce:8c:58:a7:f3:
a6:23:1a:73:fb:f0:80:da:52:ce:fb:04:cf:4c:da:ec:44:53:
88:bc:bc:9b:51:05:67:4a:a2:99:d2:f9:a0:31:04:5b:bb:97:
49:ac:d2:54:99:b1:8a:5f:3a:6d:41:99:83:87:e6:84:72:8a:
00:43:46:e1:1f:5c:9e:04:43:9c:6b:aa:6e:ba:c6:99:13:cd:
59:a9:04:2a:9f:0f:c2:8e:4c:d4:5e:09:53:e0:7c:75:81:90:
63:b6:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:49:02 2025 by rpki-client