Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/OoLaEWuNRC4u_AE9ZdgVRwYljKs.roa
File: OoLaEWuNRC4u_AE9ZdgVRwYljKs.roa (raw, json)
Hash identifier: RK9M7Fif2jzhDvgUgdMwlIrtdAhWN2UuFET594rHngE=
Subject key identifier: 3A:82:DA:11:6B:8D:44:2E:2E:FC:01:3D:65:D8:15:47:06:25:8C:AB
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0196B43A20FE47C2AC51F49988B6188CF1E4
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/OoLaEWuNRC4u_AE9ZdgVRwYljKs.roa
Signing time: Fri 09 May 2025 08:47:10 +0000
ROA not before: Fri 09 May 2025 08:47:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.22.26.0/24 maxlen: 24
193.17.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:3a:20:fe:47:c2:ac:51:f4:99:88:b6:18:8c:f1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: May 9 08:47:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a82da116b8d442e2efc013d65d8154706258cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:58:7f:c1:69:fc:28:74:50:9e:11:26:ca:
50:00:08:8a:92:33:a9:50:f7:ee:84:00:02:53:98:
36:81:13:aa:cf:e2:da:6f:bb:07:d1:1b:10:82:62:
a4:ce:2b:45:0f:39:86:43:f4:f9:94:dd:68:77:f9:
ac:10:f2:b9:e3:35:ee:9f:4b:34:00:10:23:dc:6f:
e3:bc:c8:fe:51:00:b3:3b:65:49:59:cc:a8:ec:6b:
32:16:d9:56:f1:41:c6:41:97:8e:d2:57:72:6d:b5:
1c:d3:10:0d:5b:81:85:eb:5b:1e:c2:20:35:c2:5d:
2a:6a:89:42:86:0b:51:ff:91:ec:38:96:a9:bf:7a:
3b:31:b5:b7:39:7e:9c:76:32:f4:07:3b:26:dc:87:
e1:4a:61:8e:d1:79:62:9a:78:b6:d0:85:b7:47:aa:
d6:05:d5:26:a2:d3:17:8a:a9:fa:0d:c2:f7:c6:20:
27:1c:16:36:d9:6f:0c:06:e6:37:f1:04:5c:48:8e:
33:07:52:cc:9d:a7:7e:13:15:64:68:c5:46:5a:b1:
50:7f:5b:06:04:05:39:17:5c:a2:cf:7f:d8:0a:8c:
b7:ed:90:a8:6f:f5:34:e3:82:cc:40:74:11:a7:bf:
0c:1f:0a:0e:3f:ff:3d:23:16:1a:c7:1b:4c:ef:e1:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:82:DA:11:6B:8D:44:2E:2E:FC:01:3D:65:D8:15:47:06:25:8C:AB
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/OoLaEWuNRC4u_AE9ZdgVRwYljKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.26.0/24
193.17.91.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d3:0c:78:d5:f2:da:7d:bb:2f:87:60:35:7f:a6:38:87:24:
2f:84:99:94:7c:ee:2f:3f:cf:c4:c5:68:0f:49:83:98:22:02:
68:2e:cc:89:d1:c4:ae:69:ab:79:5a:12:ac:25:17:33:ec:8e:
3d:1a:bb:1d:53:52:e9:9f:1b:ca:e0:16:49:45:1d:82:a5:01:
65:3f:cf:d0:a4:31:da:11:b2:37:68:49:75:e8:21:7c:48:07:
50:b6:71:ab:19:49:56:a2:3e:30:55:f0:2d:64:68:c0:d6:9b:
bc:cd:6c:7d:10:04:fc:7f:5c:fd:dd:7c:75:7f:ad:a7:f2:59:
db:73:31:51:06:c2:f6:09:5e:34:9e:ec:ac:81:6f:db:b7:47:
ac:7d:ec:20:7f:53:5c:46:32:5c:ea:70:4e:04:51:76:df:c9:
3a:1a:32:3c:42:f9:f1:50:d3:47:fc:12:45:12:aa:97:ad:df:
f6:5d:53:4a:a5:8e:57:31:95:73:06:b6:32:bc:3f:f3:4f:f3:
84:3f:af:cb:b7:e7:90:41:a1:93:30:fa:6c:1d:4a:65:cf:3d:
e5:d9:e1:f8:48:74:bf:17:dc:4a:a1:04:ce:71:91:78:8a:94:
96:b7:c6:f0:3d:92:5b:88:60:e9:07:d0:ba:06:ae:3f:2d:12:
ec:d0:be:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:45:13 2025 by rpki-client