Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OSrpNc-tjHEEGtKcBYYZFjEpgLw.roa
File: OSrpNc-tjHEEGtKcBYYZFjEpgLw.roa (raw, json)
Hash identifier: juZZMgPOJDKEbUcCdVFXKwAonyjjunjMd+YstnPTMc4=
Subject key identifier: 39:2A:E9:35:CF:AD:8C:71:04:1A:D2:9C:05:86:19:16:31:29:80:BC
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01973616DFFEA1B5351D566F6A5E1526DD7E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OSrpNc-tjHEEGtKcBYYZFjEpgLw.roa
Signing time: Tue 03 Jun 2025 13:59:18 +0000
ROA not before: Tue 03 Jun 2025 13:59:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57494
IP address blocks: 147.45.102.0/24 maxlen: 24
147.45.147.0/24 maxlen: 24
147.45.158.0/24 maxlen: 24
147.45.161.0/24 maxlen: 24
147.45.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:36:16:df:fe:a1:b5:35:1d:56:6f:6a:5e:15:26:dd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 3 13:59:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=392ae935cfad8c71041ad29c05861916312980bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:a5:dd:74:41:a7:bd:2c:af:1e:85:0a:45:
ec:5b:3c:5c:07:d2:8a:73:50:64:64:ca:29:0d:60:
0a:a1:91:cf:43:94:0a:b4:34:4b:f0:5c:7e:9d:0d:
d9:e9:50:c7:d8:c9:d2:f5:70:b1:98:b3:7d:da:10:
81:0d:dc:00:67:e8:64:9c:2e:57:78:ef:94:da:c3:
47:49:93:d1:91:61:66:01:7d:dd:d1:6f:42:54:d4:
88:8c:3b:2d:42:6c:7f:e1:95:c0:21:55:3d:61:28:
9f:3e:16:88:e5:3e:df:45:bd:93:07:29:85:a0:21:
41:40:bc:57:1e:5e:10:85:e7:7e:f5:20:1c:87:ca:
7a:5d:96:fd:53:74:16:05:1e:37:72:79:20:9c:e3:
93:00:a9:b8:57:84:2c:60:bd:6f:bc:bb:5e:24:e5:
ed:a4:9f:7e:69:ea:a3:4f:c5:93:1d:74:cf:01:8a:
54:ab:01:12:0e:5b:12:02:88:4b:9e:cc:db:5a:fb:
6e:42:62:62:37:e4:bb:21:ab:1c:af:08:1a:c3:69:
eb:71:53:20:0e:57:2f:77:aa:2b:ca:e3:2a:f4:05:
06:12:ca:f9:ee:03:57:43:2b:da:fe:13:98:c4:43:
18:65:1b:d2:0f:db:3e:c3:dc:09:28:af:38:7a:ad:
b2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2A:E9:35:CF:AD:8C:71:04:1A:D2:9C:05:86:19:16:31:29:80:BC
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OSrpNc-tjHEEGtKcBYYZFjEpgLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.102.0/24
147.45.147.0/24
147.45.158.0/24
147.45.161.0/24
147.45.215.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a6:a7:1f:6f:ce:24:8c:87:40:a5:58:55:54:71:83:80:81:
d9:93:e4:90:d6:95:82:10:88:16:5a:06:00:54:36:50:b5:04:
ca:10:76:58:3b:20:f8:cc:38:d1:24:b6:a9:00:ab:f1:f1:03:
c2:7d:1d:7b:47:58:fd:c7:bb:8d:2d:03:ed:9f:0b:e8:2e:9d:
2c:2f:6c:15:cf:d7:b1:90:19:a9:5c:c6:89:7f:7b:ad:ed:24:
fa:71:53:ce:19:f0:95:00:84:9b:ff:30:50:4b:4c:86:dc:a1:
ec:7a:a0:83:4f:2b:a1:4b:60:fb:d5:d7:2f:aa:47:de:d8:c7:
6d:a4:d7:68:43:93:0e:15:a5:b8:80:32:64:a6:59:12:93:88:
fa:25:45:63:32:b1:51:7b:76:b2:a1:33:10:1d:3e:ca:0a:88:
f1:f8:7c:ca:a1:fe:79:ba:14:96:0d:5e:a7:4c:1e:70:38:66:
08:4a:30:eb:33:c1:5f:71:73:15:25:40:71:e5:bf:71:16:9a:
dc:9a:56:34:d8:f1:b7:f0:28:a2:cd:31:85:7d:03:08:82:59:
2c:c0:ba:12:25:dd:8c:ee:6f:9a:fb:ab:87:f4:63:41:f2:09:
f3:a3:12:43:70:bf:4c:65:f3:f3:64:8e:33:3e:3c:f7:a7:81:
e6:8b:77:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:08:12 2025 by rpki-client