Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/ozpKcTkvogTiNk0JLy7R6dPc_Lk.roa
File: ozpKcTkvogTiNk0JLy7R6dPc_Lk.roa (raw, json)
Hash identifier: LyEEbnotUOMaf/OWg9BX+8H62nDNeTS5963pSVF/j/o=
Subject key identifier: A3:3A:4A:71:39:2F:A2:04:E2:36:4D:09:2F:2E:D1:E9:D3:DC:FC:B9
Certificate issuer: /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial: 01974A0430795AA081065FA7F2CBC718F33F
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/ozpKcTkvogTiNk0JLy7R6dPc_Lk.roa
Signing time: Sat 07 Jun 2025 10:51:17 +0000
ROA not before: Sat 07 Jun 2025 10:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.136.37.0/24 maxlen: 24
45.136.39.0/24 maxlen: 24
194.31.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:04:30:79:5a:a0:81:06:5f:a7:f2:cb:c7:18:f3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Validity
Not Before: Jun 7 10:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a33a4a71392fa204e2364d092f2ed1e9d3dcfcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:04:1e:18:50:34:ae:52:5f:a2:c9:55:64:
e6:ae:a2:88:0e:bb:9e:1d:78:ec:31:a4:4e:7b:e6:
88:25:a4:f8:81:b7:60:e8:d3:a9:fb:dc:83:78:25:
01:23:7b:7e:ba:36:30:0e:a7:66:0e:84:e2:2b:db:
48:ca:2f:c6:40:d1:ad:8d:03:30:80:31:27:16:3e:
4c:c2:eb:46:3c:e7:40:ce:a4:76:b7:d4:32:21:6e:
8a:02:4a:08:6e:08:80:09:73:3b:61:80:a8:ed:e2:
a0:0b:40:c8:51:99:ff:32:6b:bc:a4:35:19:6a:c7:
36:da:07:ce:f5:05:f1:e2:24:20:60:a0:f4:49:7f:
39:56:71:74:28:d7:76:c4:ae:d2:99:cc:8e:14:96:
3e:9f:76:8d:67:aa:4b:0a:95:37:f8:4f:ae:e2:d8:
d1:e4:1c:19:ab:7e:65:2c:8c:e7:52:97:ff:27:79:
18:c5:e4:5c:c6:06:ab:02:f1:d2:c0:97:1d:1d:61:
8b:ce:12:f1:0a:56:d8:2f:a9:b9:bb:13:e7:88:cb:
71:a9:12:0b:42:ba:e9:b5:8c:59:ad:3f:3d:b3:45:
64:a4:80:5b:91:ac:6a:1a:59:18:5e:bf:53:dd:d6:
48:38:f2:5e:08:ce:21:4d:44:77:73:86:c0:56:3e:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:4A:71:39:2F:A2:04:E2:36:4D:09:2F:2E:D1:E9:D3:DC:FC:B9
X509v3 Authority Key Identifier:
keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/ozpKcTkvogTiNk0JLy7R6dPc_Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.37.0/24
45.136.39.0/24
194.31.165.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:63:f1:83:a5:c3:b1:36:e6:07:4e:ba:ed:54:fd:fc:12:3f:
d6:ad:0d:0a:50:69:9f:3a:22:16:8c:46:5e:a7:7d:aa:d0:a8:
8c:a0:65:25:e3:59:4e:09:e1:1d:ac:5e:dd:02:5f:98:b2:3b:
a8:09:37:72:0b:4c:4c:f0:49:0d:cd:6e:dd:68:76:54:c7:60:
91:c1:21:e9:26:16:a4:29:37:fd:c7:b6:f4:58:ab:48:86:cf:
ce:ab:1b:6b:b5:90:13:19:29:27:4b:0c:ae:e1:e2:80:08:ce:
dc:50:f6:7b:00:40:2f:47:e3:a7:0a:bf:cf:5f:05:de:95:44:
43:a6:4a:03:57:5d:90:24:6f:c0:77:8a:51:49:86:ed:30:a9:
bf:0c:0d:6b:72:00:00:4a:68:06:03:50:4f:98:9e:5d:53:a6:
21:77:b9:bb:ba:c1:0f:a7:c6:60:69:5c:24:79:e0:a3:e5:f4:
ad:5f:e1:2b:6a:71:3d:f2:57:56:9c:b3:6e:cb:f8:f0:0a:ec:
9c:a9:b7:5a:37:83:92:fa:7d:15:4b:cd:8b:6b:f0:82:16:a7:
a0:3e:56:d2:12:e5:67:0e:16:25:e3:99:16:46:a5:5d:07:02:
c6:cb:5a:96:fd:73:75:1f:3c:e3:02:90:be:8f:b4:ba:4f:c6:
24:60:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:55:21 2025 by rpki-client