Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/ot-4ava-H_JGfkFEE8IMfoH7D2U.roa
File: ot-4ava-H_JGfkFEE8IMfoH7D2U.roa (raw, json)
Hash identifier: 066ShywS1FpC299llP3evwqIgvXEIG2I1bIowA8MHvw=
Subject key identifier: A2:DF:B8:6A:F6:BE:1F:F2:46:7E:41:44:13:C2:0C:7E:81:FB:0F:65
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 0196C991FE7D07A6360CF12AFD943A386655
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/ot-4ava-H_JGfkFEE8IMfoH7D2U.roa
Signing time: Tue 13 May 2025 12:15:10 +0000
ROA not before: Tue 13 May 2025 12:15:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207867
IP address blocks: 45.159.104.0/22 maxlen: 24
45.159.104.0/23 maxlen: 23
45.159.104.0/24 maxlen: 24
45.159.105.0/24 maxlen: 24
45.159.106.0/24 maxlen: 24
45.159.107.0/24 maxlen: 24
188.68.188.0/24 maxlen: 24
188.68.191.0/24 maxlen: 24
2a0f:7580::/36 maxlen: 36
2a0f:7580:1000::/36 maxlen: 36
2a0f:7580:2000::/36 maxlen: 36
2a0f:7580:4000::/36 maxlen: 36
2a0f:7581::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:91:fe:7d:07:a6:36:0c:f1:2a:fd:94:3a:38:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: May 13 12:15:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2dfb86af6be1ff2467e414413c20c7e81fb0f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:42:4c:76:a0:d3:4f:8d:b1:d2:37:0e:9c:
66:74:02:ca:a6:57:9d:66:39:95:1b:62:99:5d:2d:
b6:5e:2e:25:a8:c3:cb:4a:3f:12:85:c4:98:18:fc:
e6:f4:c1:bb:2f:78:6e:62:5a:7b:9d:7d:1a:bc:70:
2b:a6:b9:ad:73:d6:da:b0:3c:3c:36:6e:72:41:90:
23:c2:b3:a6:10:53:a4:0b:63:0f:d8:9e:03:a2:54:
b4:a2:d5:d6:bf:3d:2a:fe:6b:15:eb:cc:a7:40:97:
d0:0c:83:1a:f0:e3:8c:db:b2:d2:47:be:ec:ac:15:
61:20:d9:0d:2c:08:7b:8d:86:f3:f9:ae:d2:8d:56:
88:28:36:b4:fb:9d:50:08:e9:59:21:3d:7e:98:70:
8e:33:ee:03:7c:bd:e2:ce:8a:4d:c6:c5:2d:99:87:
84:26:b1:60:15:92:01:92:2e:26:a4:ce:fd:64:61:
bc:70:81:c5:ac:20:b5:8e:6a:24:e2:4f:96:14:6a:
1e:c7:4b:bd:92:a1:9d:11:7d:9a:1c:36:a3:9f:66:
d8:51:0b:9e:78:59:d0:b5:46:b2:48:69:20:83:dd:
65:33:44:20:36:8e:d1:d2:b9:3b:f6:12:ac:53:bd:
3a:37:d7:c1:f8:95:31:ae:3c:8c:0a:c3:e0:6c:0b:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:B8:6A:F6:BE:1F:F2:46:7E:41:44:13:C2:0C:7E:81:FB:0F:65
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/ot-4ava-H_JGfkFEE8IMfoH7D2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.104.0/22
188.68.188.0/24
188.68.191.0/24
IPv6:
2a0f:7580::-2a0f:7580:2fff:ffff:ffff:ffff:ffff:ffff
2a0f:7580:4000::/36
2a0f:7581::/32
Signature Algorithm: sha256WithRSAEncryption
a1:7f:bb:c8:17:c4:30:4c:52:ac:f3:59:b7:4b:c9:8d:79:e5:
01:ed:b6:fa:7f:bf:60:c6:4b:62:0f:39:b9:63:f7:4f:1b:b1:
72:40:7d:4a:7f:17:54:97:86:1a:09:c3:aa:0c:c2:34:2c:ad:
d4:d1:89:6d:73:d3:e5:71:4d:b4:b4:49:57:54:5a:92:fc:8c:
c1:7b:0d:9f:ca:a8:60:43:b3:13:9b:23:b1:66:00:c2:52:fe:
ae:84:23:7b:9b:31:01:6f:14:98:b8:bb:4d:47:07:1d:8a:40:
1e:ac:1e:b8:50:9a:b6:2a:75:6b:62:6c:20:9f:37:5f:c9:04:
c7:7b:93:5a:42:7d:7e:83:4a:d4:71:b4:dc:4e:a2:cb:46:bc:
43:10:1f:b9:7e:ec:29:f5:fd:90:ad:1b:bd:4d:22:a2:75:77:
85:8a:99:37:df:62:4a:43:43:cf:82:98:17:39:31:3c:ca:be:
c3:69:d4:e5:99:f3:fe:81:0b:0e:37:71:5d:df:30:2c:00:8b:
65:0a:9f:75:fd:f8:c4:5a:8c:88:24:e1:7b:80:2d:96:a8:a2:
1f:5d:eb:f1:97:3d:07:b7:6a:3c:df:74:5e:5b:03:54:61:76:
fb:68:6c:5e:23:3b:44:e0:4c:58:1f:d2:3a:7e:4d:bf:c0:98:
84:20:6a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:43:30 2025 by rpki-client