Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/oHDPe7-h-knCwFgEOWHUKoFqfTw.roa
File: oHDPe7-h-knCwFgEOWHUKoFqfTw.roa (raw, json)
Hash identifier: FsMNIxSbC4UCXz0tTjiE6YStaLvtLqkOajeVigk/doU=
Subject key identifier: A0:70:CF:7B:BF:A1:FA:49:C2:C0:58:04:39:61:D4:2A:81:6A:7D:3C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01942068464D501E4655DE1AFE465D56306A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/oHDPe7-h-knCwFgEOWHUKoFqfTw.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52000
IP address blocks: 193.233.22.0/24 maxlen: 24
193.233.88.0/22 maxlen: 24
193.233.248.0/24 maxlen: 24
193.233.249.0/24 maxlen: 24
193.233.250.0/24 maxlen: 24
193.233.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:46:4d:50:1e:46:55:de:1a:fe:46:5d:56:30:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a070cf7bbfa1fa49c2c058043961d42a816a7d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:8a:86:f5:19:ff:92:1f:c2:67:21:fe:4f:
a5:b8:84:cb:9a:eb:7e:d2:c1:2b:5f:6f:da:42:b0:
46:64:7f:28:f2:b1:57:e5:43:8b:41:ce:2a:38:98:
5c:e2:6f:b7:bb:5f:f8:a2:d1:b1:b3:64:76:2a:69:
01:fc:25:6f:85:7c:7b:2a:73:2b:a9:d6:f8:bb:77:
09:d9:cb:82:71:3f:e4:ac:5d:dc:a8:d8:bc:85:04:
f6:2d:34:60:72:89:6b:4c:34:dc:ea:54:c7:a5:ee:
3c:99:4b:65:3b:66:ff:0f:b9:d7:d5:32:30:ad:44:
f7:5b:77:9b:7c:05:0f:d0:4d:36:e3:f4:ca:a5:a5:
9d:32:25:da:e6:d6:46:b7:56:0c:af:73:9f:64:43:
04:20:64:e3:ce:27:73:2a:a9:36:db:c4:11:70:1a:
b1:43:e7:34:3a:ab:29:2f:62:36:4e:89:1f:5f:a3:
7c:ab:02:b2:4f:a1:11:a9:70:21:d5:fc:67:98:19:
e0:e8:8c:a0:11:87:22:dc:b0:56:b9:91:7d:9f:0e:
b3:16:e1:e1:50:2c:d0:78:b6:8b:eb:6f:8c:25:49:
85:a1:2f:69:81:95:1f:07:54:cf:22:b0:a7:ad:cb:
9c:14:bb:4c:d2:cd:9a:4e:58:5e:11:6b:19:43:ae:
27:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:70:CF:7B:BF:A1:FA:49:C2:C0:58:04:39:61:D4:2A:81:6A:7D:3C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/oHDPe7-h-knCwFgEOWHUKoFqfTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.22.0/24
193.233.88.0/22
193.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
33:be:64:17:7b:4e:74:80:6e:5e:6f:51:e8:05:7a:57:c6:0a:
a3:92:e0:10:20:5d:08:b9:9d:72:4f:dc:3f:d2:73:c3:e1:41:
da:ec:19:42:1c:35:81:c8:72:ab:a1:ca:02:17:04:80:0a:1b:
76:7a:c8:6c:08:46:2a:b6:75:c5:b3:a6:3e:20:7d:cf:9c:cf:
1c:4b:6d:a0:42:9f:e1:6c:95:8b:ba:4a:17:17:e4:ab:17:32:
79:65:fc:c4:d4:a7:77:62:4b:10:c1:7e:08:e1:d4:60:b8:fc:
5b:ac:d7:2f:5c:44:0d:5f:57:88:17:09:3e:78:07:16:2f:0d:
21:62:d9:fb:67:36:b9:ef:0e:dd:03:38:c5:48:57:c4:d9:d0:
3f:ce:82:8e:59:e3:49:92:3f:54:fb:41:ec:61:4e:2f:12:9d:
5b:4e:ad:c1:4f:1a:e2:9b:e6:c3:ff:49:86:24:6a:5d:0b:8f:
bf:5b:47:6a:8b:72:27:00:c3:b8:bb:a5:89:2d:65:fd:72:86:
c7:dc:2d:7c:17:19:0b:91:5f:8c:05:91:3c:d3:f2:c8:4f:9e:
2d:dd:56:4d:1b:b6:5f:04:97:87:08:65:dd:b3:35:61:f5:f3:
59:5e:30:fa:2b:50:9b:6d:61:fd:44:ff:9b:a0:ca:e0:92:02:
9a:f7:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:24 2025 by rpki-client