Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oa4brvKBH-GFtVHqO4N9zefISR0.roa
File: oa4brvKBH-GFtVHqO4N9zefISR0.roa (raw, json)
Hash identifier: GLuT4G1rJBHBtvcoAEqIVp9gRrocUJUQ5Ati9mdZ3BE=
Subject key identifier: A1:AE:1B:AE:F2:81:1F:E1:85:B5:51:EA:3B:83:7D:CD:E7:C8:49:1D
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019614A5270BC5CF3035807AF73862F03247
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oa4brvKBH-GFtVHqO4N9zefISR0.roa
Signing time: Tue 08 Apr 2025 09:04:49 +0000
ROA not before: Tue 08 Apr 2025 09:04:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 79.172.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:a5:27:0b:c5:cf:30:35:80:7a:f7:38:62:f0:32:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Apr 8 09:04:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1ae1baef2811fe185b551ea3b837dcde7c8491d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:66:7f:a9:3d:0d:80:92:0b:2d:c8:06:eb:
87:6d:25:b5:36:9c:80:3e:81:82:3e:50:e4:ac:e2:
88:e8:b3:1d:dc:7e:a9:e5:44:8b:ad:f7:58:8c:89:
67:14:0d:f2:d6:06:df:8b:c7:3e:84:20:60:a0:39:
33:2a:0e:74:5f:37:f1:3f:85:ae:50:e8:8e:77:9a:
a4:3c:5d:61:63:0a:f1:c1:e6:6f:d8:f4:4d:95:18:
75:a2:4c:77:20:3c:de:e9:53:ac:55:b4:71:86:5c:
19:51:cc:53:ce:0b:70:52:1a:ff:ca:9c:d5:e0:a5:
e1:60:4d:7c:20:f8:0c:85:f1:71:3c:5b:37:f6:8c:
30:01:7c:0d:c8:17:8c:4f:26:4f:0c:73:80:44:ac:
c2:df:31:63:9b:9f:73:e7:44:12:94:8f:bb:07:03:
84:bf:d8:cc:aa:cf:b9:c6:85:db:57:68:c8:83:76:
1f:ef:e2:42:9f:02:97:ba:c7:4b:be:41:cd:36:de:
f0:23:fa:17:ba:3d:7d:7d:be:ae:8b:58:ac:30:94:
d4:7d:40:28:72:59:1c:5b:9e:48:c0:f5:17:25:0d:
f0:bf:11:3a:b3:d5:5e:73:4d:96:93:19:14:d6:ed:
a8:ce:95:fb:f7:05:e9:bd:a9:61:5d:9b:62:1a:6f:
c4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AE:1B:AE:F2:81:1F:E1:85:B5:51:EA:3B:83:7D:CD:E7:C8:49:1D
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/oa4brvKBH-GFtVHqO4N9zefISR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.204.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a4:f0:b0:07:5e:75:1d:3f:56:10:a1:aa:7d:61:8c:06:e0:
8f:f4:df:2b:d0:93:b4:96:39:d2:c7:5c:c9:21:f4:be:9d:c8:
12:5f:84:e8:1f:aa:d0:35:a4:06:43:54:68:ed:d2:76:ed:e5:
cc:bb:81:0a:00:eb:07:c6:88:bd:47:5a:d0:8a:23:a0:85:44:
99:9e:2e:71:0c:55:45:a0:59:d7:bf:9d:4d:82:e4:40:5d:c9:
9d:7e:38:4b:42:d3:83:ab:b1:f9:4a:2f:c5:23:4a:bf:66:ed:
21:9f:e5:6e:c9:21:55:03:dc:5c:1e:b6:2e:fa:0e:f0:ed:6b:
c3:cd:3f:f9:ea:d3:10:45:c5:ee:4d:95:6f:ad:d6:c0:45:8e:
79:5d:f2:a3:0c:ae:88:cd:13:77:70:e9:5c:f0:cb:2c:ce:c4:
3a:c0:0d:78:8f:6a:3a:8f:f1:10:aa:8c:04:10:3a:36:72:44:
ee:45:93:d4:d3:b2:2f:3c:ba:dd:72:f8:70:8c:cd:c4:b4:2e:
be:c5:7c:c6:9d:cb:f3:a3:39:1c:e2:ba:9d:0e:a7:17:3a:53:
ce:c1:d0:98:0f:77:47:44:c7:58:13:0a:77:04:10:6f:c2:f7:
29:89:6d:e5:e7:e1:1b:fe:9c:fd:06:e4:68:c6:ec:0c:45:81:
f2:41:6a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:38:42 2025 by rpki-client