Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/Ocy_m2zHXezY_DKukKlr3xhqDhU.roa
File: Ocy_m2zHXezY_DKukKlr3xhqDhU.roa (raw, json)
Hash identifier: UC3MI0ffSuAJ2UoCKWrS6GgqqpWg8XTm0KoUn3rbNKY=
Subject key identifier: 39:CC:BF:9B:6C:C7:5D:EC:D8:FC:32:AE:90:A9:6B:DF:18:6A:0E:15
Certificate issuer: /CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Certificate serial: 01953DEB4227A73819FB888CA0C558E80967
Authority key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/Ocy_m2zHXezY_DKukKlr3xhqDhU.roa
Signing time: Tue 25 Feb 2025 16:23:02 +0000
ROA not before: Tue 25 Feb 2025 16:23:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20677
IP address blocks: 77.95.220.0/24 maxlen: 24
2a13:fbc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3d:eb:42:27:a7:38:19:fb:88:8c:a0:c5:58:e8:09:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Validity
Not Before: Feb 25 16:23:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39ccbf9b6cc75decd8fc32ae90a96bdf186a0e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:8b:65:37:44:d1:0d:2f:d8:11:fc:f6:82:
24:d3:c7:4d:f5:94:62:1f:ab:22:72:91:f2:94:57:
83:aa:cf:6c:1e:09:4d:7f:ce:71:60:f5:b6:21:3e:
42:83:73:cf:9c:6a:0b:7d:8e:38:54:83:24:97:82:
52:e4:46:d9:69:c0:f3:d2:66:60:13:8d:8b:54:66:
0a:d6:cc:ba:cb:79:d1:7c:0c:8e:ad:6d:6c:c7:5c:
76:eb:fe:43:12:c5:9e:6d:fe:59:fd:3c:8d:3c:21:
d8:5b:4a:62:b0:b9:f2:7d:2c:f9:05:19:23:2b:b8:
4a:0a:b8:50:64:0b:c1:23:bb:0b:3b:d1:bd:73:84:
a4:66:63:e8:e0:9d:42:2b:26:d4:66:36:58:e7:68:
8f:fc:28:28:2d:5c:4c:71:cc:17:f0:3e:f7:b8:53:
31:04:87:c5:f8:32:29:70:f4:52:88:67:09:c2:69:
5e:66:fe:10:ea:84:c9:d3:04:34:5d:2d:b1:27:58:
dc:a5:27:f1:aa:87:5b:c3:fb:c0:e9:16:0e:d8:6b:
c5:29:ff:a4:a0:0b:58:a6:8c:94:4c:44:99:59:c1:
1a:f6:23:e7:6b:7a:dc:4e:74:26:7a:34:8e:c0:6e:
00:f4:3f:1c:36:53:49:55:d3:3e:f7:3c:fc:a7:7a:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CC:BF:9B:6C:C7:5D:EC:D8:FC:32:AE:90:A9:6B:DF:18:6A:0E:15
X509v3 Authority Key Identifier:
keyid:45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/Ocy_m2zHXezY_DKukKlr3xhqDhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.220.0/24
IPv6:
2a13:fbc0::/48
Signature Algorithm: sha256WithRSAEncryption
a1:0d:97:a8:e1:e8:6c:45:47:b4:9e:ae:70:0c:34:fa:40:68:
92:d6:35:2a:ba:57:56:f4:55:67:9d:6a:f9:7e:77:80:03:24:
8e:6b:73:ad:c2:a6:75:a9:18:96:c5:4b:96:6b:60:54:89:bc:
fa:28:9a:a4:59:42:a2:1b:38:21:3c:b5:67:2b:fc:e5:36:3c:
eb:74:08:4d:4a:77:a4:2c:a8:04:7d:c2:9c:56:ea:01:78:4c:
c5:56:df:f2:89:ad:df:14:ef:45:d3:c9:a0:14:05:84:78:20:
37:45:ac:eb:13:49:77:44:d2:fc:2f:04:d6:3d:5e:74:7b:74:
fb:86:94:3b:40:59:f9:78:d4:3c:ac:44:85:5e:86:5e:a1:b2:
77:43:ab:52:22:55:b1:69:6a:63:3d:c1:99:dc:82:6e:84:d2:
6f:4a:f8:86:e4:fc:52:74:09:e6:83:c6:21:4a:ec:98:e3:90:
eb:9c:bc:27:47:8d:cb:79:40:21:65:eb:29:11:ea:1d:4b:d8:
e8:e0:73:1b:6d:36:86:5c:76:70:d0:4b:02:c1:86:19:69:1d:
b1:a5:a2:5c:48:4f:a0:81:7b:e0:ca:bf:5d:d7:bb:6d:52:41:
61:3e:00:75:e9:1b:d4:f3:68:00:91:e7:2a:b5:c4:8c:44:0c:
d3:d1:2a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:55:50 2025 by rpki-client