Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/OzfjIdhzh7gpL6YR6SckdfTkc-4.roa
File: OzfjIdhzh7gpL6YR6SckdfTkc-4.roa (raw, json)
Hash identifier: qjn8XFFM1Wpyy8tyUnVazb1P7nlXBpVe5zicqRab8VA=
Subject key identifier: 3B:37:E3:21:D8:73:87:B8:29:2F:A6:11:E9:27:24:75:F4:E4:73:EE
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019630319BDE7C5A9392C19D84742FACD133
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/OzfjIdhzh7gpL6YR6SckdfTkc-4.roa
Signing time: Sun 13 Apr 2025 17:27:59 +0000
ROA not before: Sun 13 Apr 2025 17:27:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42960
IP address blocks: 103.216.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:31:9b:de:7c:5a:93:92:c1:9d:84:74:2f:ac:d1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Apr 13 17:27:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b37e321d87387b8292fa611e9272475f4e473ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bc:cc:46:cf:6b:19:02:02:30:29:74:18:cc:
bd:1a:0f:3b:1c:4c:79:6b:d6:a1:de:5e:bf:cb:ec:
6a:c7:c8:35:10:56:14:b9:e3:35:6c:77:a1:87:02:
7c:b0:fa:a1:5f:56:82:0f:3b:8d:df:34:72:63:48:
81:1c:45:ac:98:d5:c7:f5:56:76:7e:f5:54:8a:12:
fe:c1:84:94:ce:6f:45:b4:51:0a:9f:a4:7b:f2:e5:
76:80:25:50:50:28:d0:81:7b:5c:d5:87:c7:0d:8c:
8e:ab:24:bd:7c:13:8e:f3:42:09:e3:24:f2:47:ff:
a3:92:93:78:de:53:dd:30:c8:c1:29:a5:99:b6:db:
3c:b7:ac:01:a1:66:6f:7b:df:6a:c2:61:2d:1b:3a:
c4:e2:aa:83:69:cc:7a:d8:43:c3:0f:ee:47:5e:f7:
01:91:aa:d4:bc:2c:70:41:4d:5e:41:76:bd:8b:3f:
2d:36:3f:4c:6c:f4:70:27:a2:7c:01:02:f0:7d:54:
c2:5a:bd:4a:ed:fc:9c:ef:34:25:a6:e8:2c:1c:83:
7e:6b:c7:1c:f8:17:c5:1b:4b:53:7b:36:11:10:fd:
d5:fa:4c:d6:f6:82:1f:1d:d0:91:e9:16:7a:50:ee:
00:45:bb:88:9e:ea:c9:3d:6d:52:ca:d9:4e:ed:9b:
bd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:E3:21:D8:73:87:B8:29:2F:A6:11:E9:27:24:75:F4:E4:73:EE
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/OzfjIdhzh7gpL6YR6SckdfTkc-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.216.175.0/24
Signature Algorithm: sha256WithRSAEncryption
18:04:dc:e5:2c:a2:fc:6b:d3:b9:17:e5:ce:91:2e:b5:a3:a5:
67:9c:6e:56:f6:16:3d:03:33:bb:73:2b:fe:f9:80:35:10:c3:
00:11:54:bb:77:4f:28:34:83:74:d9:a2:a2:52:03:f3:c4:0c:
fc:bf:d6:d5:64:f1:b3:b2:a9:0b:82:ff:20:49:b4:2a:41:f4:
64:09:fb:61:c5:40:63:01:4a:69:41:d6:20:85:9b:5a:79:7a:
5b:d0:f2:1f:2d:1c:18:6c:77:59:9a:c9:20:b5:58:45:33:0d:
fe:a3:04:30:38:87:b1:24:fc:e3:7b:ef:af:6c:62:5a:c4:f6:
6b:c6:55:49:fc:0a:30:f4:29:40:63:e5:28:cd:bb:79:61:d7:
70:3b:e5:47:37:73:44:fd:5f:b3:b4:ee:52:f9:98:cb:d3:29:
c0:8f:89:7a:e7:3b:3b:3b:9f:af:86:5b:68:2e:3c:83:2e:12:
96:96:13:5c:56:4a:01:e6:50:b1:aa:3b:c8:95:55:77:e6:1d:
9e:00:f7:c5:de:ff:36:48:5c:c0:e2:a4:20:52:2e:26:55:f5:
1c:99:4c:98:51:1a:6e:10:d6:3d:d4:ca:6a:fe:2c:5c:9e:f7:
8e:17:9f:61:36:e0:0e:92:85:11:3f:7e:cc:da:62:32:8f:af:
5f:26:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:55:32 2025 by rpki-client