Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/OSPVEMKxRvS3K2S9RynwSClpPy0.roa
File: OSPVEMKxRvS3K2S9RynwSClpPy0.roa (raw, json)
Hash identifier: I2dq/kcaAdZwjzuTK1RJZZE0wsjKNorsCYjqSblF2e4=
Subject key identifier: 39:23:D5:10:C2:B1:46:F4:B7:2B:64:BD:47:29:F0:48:29:69:3F:2D
Certificate issuer: /CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Certificate serial: 01942520E25813A073EEF4311589D5C84EA1
Authority key identifier: 82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/OSPVEMKxRvS3K2S9RynwSClpPy0.roa
Signing time: Thu 02 Jan 2025 03:48:19 +0000
ROA not before: Thu 02 Jan 2025 03:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 89.104.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:e2:58:13:a0:73:ee:f4:31:15:89:d5:c8:4e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827af17f0499627e4b3c8cc5c333ec4b8e7635e0
Validity
Not Before: Jan 2 03:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3923d510c2b146f4b72b64bd4729f04829693f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:0b:e6:f0:c9:40:5f:f3:fa:5c:4c:35:a7:
af:7e:0c:9b:d2:24:9e:56:6f:6f:9f:5c:e3:54:69:
2c:0b:cb:98:52:43:c9:be:a6:c1:43:a4:f5:86:68:
11:3c:0d:ef:97:cd:8b:a2:f2:54:7a:48:37:2d:86:
7d:58:fa:6d:59:f2:8d:78:95:f5:21:3f:07:d5:eb:
1a:fa:51:19:68:16:98:16:54:1d:25:63:05:ec:72:
54:ce:36:6d:1e:b2:94:a1:6c:22:f8:32:20:6f:c0:
b9:a1:3f:c1:ea:34:4d:38:1e:4a:1d:a3:ad:d7:a3:
01:10:a8:35:bd:ad:f9:9d:2e:ff:2b:57:40:04:a4:
22:36:cc:d5:e1:14:13:13:c8:bb:7f:31:7b:9f:6e:
f5:bb:e1:50:3e:56:10:c4:50:85:a5:73:30:6e:3b:
e9:b5:14:6c:9e:60:04:56:f9:f4:74:54:9c:43:aa:
40:bc:78:2c:7c:07:76:fa:d3:0d:b1:9f:1e:f0:a1:
fd:aa:93:a8:28:bc:57:91:b4:9c:54:3d:7f:f3:27:
7b:06:ac:4c:9c:dd:bd:f9:d2:04:77:58:b4:1e:29:
5f:87:1b:bf:5d:2f:96:be:1d:c3:5e:b8:ec:56:c2:
3d:0a:39:f2:49:13:25:4e:8b:b1:e4:0e:d4:85:81:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:23:D5:10:C2:B1:46:F4:B7:2B:64:BD:47:29:F0:48:29:69:3F:2D
X509v3 Authority Key Identifier:
keyid:82:7A:F1:7F:04:99:62:7E:4B:3C:8C:C5:C3:33:EC:4B:8E:76:35:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnrxfwSZYn5LPIzFwzPsS452NeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/OSPVEMKxRvS3K2S9RynwSClpPy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c2ae3d-98b4-446f-ab28-7313c7f3ca3f/1/gnrxfwSZYn5LPIzFwzPsS452NeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.104.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:64:eb:7c:54:1c:a4:02:af:3d:1e:23:09:75:74:b8:80:bb:
0f:1a:f2:f2:0e:b1:4d:63:29:57:d2:6b:6f:75:6c:87:ee:8d:
b3:04:c5:df:9e:92:d9:ba:fa:21:83:fd:5e:94:ed:a6:bc:7b:
d0:c8:c6:71:ee:2c:ff:1f:8d:23:0b:55:f2:1e:e6:e5:7c:63:
b1:2f:6a:9f:92:69:7e:92:e0:a4:7f:5a:11:48:1c:32:8d:1e:
2b:1d:f7:ff:e9:44:fb:8e:c8:78:d0:f0:1f:12:2b:fe:1e:bf:
4b:8f:c5:b1:1d:f0:f7:3b:66:22:ec:c4:4e:2d:a4:68:72:cc:
d0:58:bb:53:d8:f9:3b:73:a0:c9:fa:d4:6d:87:0e:68:3b:87:
67:d8:ce:44:15:3a:59:06:f9:48:83:62:b6:f5:cd:33:9d:9e:
99:36:5c:9c:1a:ce:c8:e6:14:80:af:eb:40:2e:3a:b1:5a:b1:
73:b1:7e:c8:b4:04:2d:f7:73:5a:a6:ae:c8:18:52:24:1d:78:
cc:c6:8c:ab:3d:72:6e:cf:e6:0f:9a:d2:55:b2:98:5d:11:d0:
9a:e1:18:78:06:1e:ef:8f:99:c2:a9:bb:83:a0:ff:e2:68:cf:
a1:1d:28:4b:f1:40:fc:96:04:e2:ee:6a:54:3b:2f:4e:33:39:
63:55:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:37 2025 by rpki-client