Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Og7mCxVjfctLOXhG5pgGiMoL07Q.roa
File: Og7mCxVjfctLOXhG5pgGiMoL07Q.roa (raw, json)
Hash identifier: WO79fUTVe8+mNlRIAIjelw7KFUqjwG6d3z1vfNPqQhI=
Subject key identifier: 3A:0E:E6:0B:15:63:7D:CB:4B:39:78:46:E6:98:06:88:CA:0B:D3:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01964916C360BCA18D6DD09EF232B4F4FE48
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Og7mCxVjfctLOXhG5pgGiMoL07Q.roa
Signing time: Fri 18 Apr 2025 13:29:10 +0000
ROA not before: Fri 18 Apr 2025 13:29:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208389
IP address blocks: 93.123.0.0/22 maxlen: 32
93.123.4.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:16:c3:60:bc:a1:8d:6d:d0:9e:f2:32:b4:f4:fe:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 18 13:29:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a0ee60b15637dcb4b397846e6980688ca0bd3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:68:ed:7e:6a:6b:dc:23:7d:16:0f:ae:85:
4f:b7:e4:06:31:86:d3:1a:3f:8a:97:db:3b:39:8d:
98:4e:de:e5:49:13:ea:47:a9:70:7f:77:d9:d6:ad:
e7:eb:9a:d4:08:6d:24:80:cc:d9:10:4c:ff:3e:c6:
cd:cf:31:a6:9e:50:4a:2b:64:6c:ed:23:b6:ad:77:
20:f2:c9:5b:71:16:0f:3a:66:cb:c4:d0:7b:c4:a2:
a5:d6:ca:84:69:77:c8:dc:16:b6:21:29:54:d9:10:
78:0c:65:1a:d2:78:2c:9a:f3:f0:4e:fb:25:ff:69:
ee:bb:65:ce:a1:bd:9a:32:39:73:8f:07:06:95:5f:
e0:45:cc:29:41:15:de:cb:a3:c1:19:36:e3:43:67:
4a:2d:e4:ba:37:5d:c3:e1:f7:55:ef:ac:25:01:46:
de:29:8d:ca:9f:8f:fa:e1:21:8d:13:62:76:5d:cc:
30:f7:52:15:92:3b:a8:45:a3:b6:2c:91:e6:1d:2d:
78:f2:12:46:41:d0:bc:1f:ef:ab:24:de:df:f3:84:
6b:6d:97:6a:7b:d0:4f:ea:b0:38:01:3e:55:1f:76:
c9:6c:b4:fb:82:e8:7c:72:23:6d:8c:cb:7b:19:34:
7b:d2:85:57:7f:5d:d5:2a:e2:30:29:8b:47:d5:23:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:E6:0B:15:63:7D:CB:4B:39:78:46:E6:98:06:88:CA:0B:D3:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Og7mCxVjfctLOXhG5pgGiMoL07Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.0.0-93.123.5.255
Signature Algorithm: sha256WithRSAEncryption
79:4c:a3:19:a6:a2:fe:89:87:14:b5:e8:83:1e:51:97:0b:da:
f5:08:4b:87:7e:55:e3:f8:b8:2a:29:85:8b:93:bd:6a:f6:4c:
53:04:03:fc:dd:8d:23:aa:2e:dd:47:9a:35:73:3c:6c:53:73:
73:cf:55:c7:f2:4d:18:2f:ed:f0:88:e9:e9:0c:33:ad:e6:29:
db:0a:eb:3f:d2:6d:fa:91:2f:b9:9e:98:82:f4:25:be:f4:85:
4a:13:75:bc:3d:14:0f:23:7c:06:ca:eb:24:4e:e8:b1:b0:35:
60:aa:10:2e:d1:0a:46:ee:a2:cc:89:25:a5:f3:30:57:78:3e:
70:7d:b4:1b:9c:e2:ef:0a:a7:d6:6a:4e:68:7e:89:a6:31:59:
e3:c6:35:42:07:eb:9a:c8:3b:ca:92:00:5f:53:6a:e9:b9:fb:
1d:85:37:4d:6d:dc:10:09:42:fa:78:be:3b:7b:20:95:4e:85:
94:25:c1:e1:59:26:5e:55:ef:cf:f2:49:1d:48:e2:f1:31:e7:
19:1a:e2:65:28:1b:c1:92:af:60:dc:94:c4:c1:7a:0c:69:6d:
4d:8a:6e:ca:05:06:fd:ea:91:64:96:48:f1:b7:b8:3a:53:08:
8e:64:17:0b:5b:54:24:58:90:c9:4e:2e:ea:10:b7:c5:8f:0d:
71:68:43:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:01:28 2025 by rpki-client