Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/OblX778QtOOevvVmLppB6okYChg.roa
File: OblX778QtOOevvVmLppB6okYChg.roa (raw, json)
Hash identifier: RcRv1xji1xsemWDqjTtvWFuENOLwcxiNbuhjUnUsVAs=
Subject key identifier: 39:B9:57:EF:BF:10:B4:E3:9E:BE:F5:66:2E:9A:41:EA:89:18:0A:18
Certificate issuer: /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial: 01942444DF1B9134E59AE67AE754DAAAC046
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/OblX778QtOOevvVmLppB6okYChg.roa
Signing time: Wed 01 Jan 2025 23:48:00 +0000
ROA not before: Wed 01 Jan 2025 23:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57428
IP address blocks: 185.57.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:df:1b:91:34:e5:9a:e6:7a:e7:54:da:aa:c0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Validity
Not Before: Jan 1 23:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39b957efbf10b4e39ebef5662e9a41ea89180a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:bf:39:67:86:18:50:18:b8:18:61:a9:b2:
10:40:44:1f:b8:2a:e4:92:99:33:79:07:9a:5d:8f:
10:78:3d:0a:85:7a:a1:fc:87:f3:df:3a:27:03:6f:
21:36:59:ed:0c:e9:10:d3:a7:95:16:91:1b:37:e5:
7e:18:25:12:c0:98:c6:b4:e1:1f:9c:21:aa:e2:01:
a6:64:78:ba:1b:1a:f4:37:88:f9:ed:9b:ee:8d:7c:
28:dc:92:79:ed:a4:21:26:a1:29:9c:78:8e:91:17:
cb:c1:77:c9:84:9c:e8:62:1a:a8:c0:6e:d0:09:7d:
ad:5f:65:ef:72:af:85:fb:ba:6c:8f:63:b5:6f:85:
26:28:46:86:4e:00:68:b6:67:62:0d:d5:6c:44:98:
f8:f3:ac:d2:fa:bf:85:9d:aa:58:ac:da:8e:25:75:
2d:ea:b0:16:3c:b9:27:c7:1b:2c:6b:d0:db:c7:c6:
36:94:e0:65:2b:d7:35:e3:48:e9:e9:c1:58:28:45:
86:0d:81:c3:55:e0:b8:6b:41:3b:04:98:a9:8e:f9:
af:5b:3d:dd:2b:e3:e8:80:f1:2a:ca:03:18:8d:35:
f0:f3:cc:5f:97:32:7f:3a:2a:a5:2a:d9:67:8a:c8:
9f:e6:5c:f5:82:68:b3:7f:33:84:a4:b8:81:12:d5:
36:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B9:57:EF:BF:10:B4:E3:9E:BE:F5:66:2E:9A:41:EA:89:18:0A:18
X509v3 Authority Key Identifier:
keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/OblX778QtOOevvVmLppB6okYChg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.44.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:91:8a:47:dc:a7:3c:f7:16:91:92:ba:1c:82:8f:ee:4c:b9:
3b:97:44:63:f9:89:4a:92:dc:21:9b:2e:f6:d9:b5:c7:c7:84:
1a:44:25:be:ba:0a:41:0e:d4:64:f6:5b:93:0a:01:af:fc:6a:
90:f4:03:62:b0:f6:62:d2:a2:f4:20:07:9a:f8:53:de:91:f7:
44:d1:f1:c7:a0:f3:4a:96:24:4f:5f:ca:49:87:32:be:89:27:
3d:26:d4:e0:a0:9d:16:cd:81:0b:26:21:3d:c1:58:0f:6f:47:
64:3c:f1:7a:2e:34:02:b1:88:72:de:c6:f6:c7:f1:f2:66:ef:
96:37:b7:26:b2:8b:e4:c9:f6:b1:6b:c1:aa:1f:29:6e:99:04:
96:de:fd:69:74:96:5f:75:65:24:fc:8c:89:f4:a7:a7:b0:c4:
8c:cd:0f:26:62:b7:66:0b:8d:ab:34:e0:ce:3e:5b:a2:80:77:
84:ff:4b:b2:87:cb:bc:3f:d4:ed:ae:c9:2e:15:e1:6e:b4:48:
60:a8:fa:5f:3e:5a:ec:26:f1:2c:98:55:57:66:9b:fb:f1:3d:
00:a9:4a:01:4a:33:22:e5:bf:65:88:0d:9c:87:90:a3:ec:dd:
f1:ea:c9:6f:fd:7e:a7:51:95:85:d6:d5:bf:69:13:16:5f:f5:
30:98:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:10:19 2025 by rpki-client