Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/oqSgizr5ODUUGjBb8_Wzxokx-xk.roa
File: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (raw, json)
Hash identifier: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=
Subject key identifier: A2:A4:A0:8B:3A:F9:38:35:14:1A:30:5B:F3:F5:B3:C6:89:31:FB:19
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 019426D9F784B01E9751B4907650548FA2F2
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/oqSgizr5ODUUGjBb8_Wzxokx-xk.roa
Signing time: Thu 02 Jan 2025 11:50:06 +0000
ROA not before: Thu 02 Jan 2025 11:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 89.31.122.0/24 maxlen: 24
185.122.186.0/24 maxlen: 24
185.195.67.0/24 maxlen: 24
188.214.35.0/24 maxlen: 24
2a03:f80:420::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f7:84:b0:1e:97:51:b4:90:76:50:54:8f:a2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 2 11:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2a4a08b3af93835141a305bf3f5b3c68931fb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:6d:27:e8:f0:f4:cd:65:35:43:f6:20:d4:
f0:ab:99:e1:96:e1:93:07:d5:27:c3:9b:df:64:a9:
50:40:66:8c:5f:0d:c6:e4:a1:c0:dc:30:31:d0:59:
70:9b:04:9b:b0:5b:e7:17:9a:83:b2:95:90:13:3f:
2e:cd:44:17:2f:ed:72:cf:81:63:12:a7:07:dd:81:
e8:7e:e2:a5:73:23:2e:3f:21:00:b6:44:78:df:8b:
f0:87:75:ff:61:b4:c8:b5:18:d5:6d:11:29:f5:be:
db:0a:68:1b:fa:d5:70:94:6f:02:3a:ed:48:46:38:
63:5c:aa:95:3f:59:b4:dc:b2:dd:ba:63:9c:9a:ff:
cf:1f:c0:8b:f6:ce:33:73:e7:e5:f0:9f:f6:4c:83:
a5:63:f8:5e:82:57:e9:65:ff:28:8e:f6:7e:f8:29:
07:de:54:85:4f:37:ed:25:97:b6:0f:1b:32:ab:31:
44:80:c4:c8:b2:4f:7b:3b:9e:f6:3e:09:a3:89:c3:
f4:40:09:67:98:12:b8:5e:d2:01:cb:15:fd:1b:4d:
31:2b:8e:92:e1:12:17:8e:46:c7:bf:9e:c4:01:5d:
6c:25:67:ff:d2:38:9d:46:22:d1:50:eb:39:89:fb:
14:bf:7d:01:27:7a:96:9e:39:31:0b:5b:a4:b9:24:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A4:A0:8B:3A:F9:38:35:14:1A:30:5B:F3:F5:B3:C6:89:31:FB:19
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/oqSgizr5ODUUGjBb8_Wzxokx-xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.122.0/24
185.122.186.0/24
185.195.67.0/24
188.214.35.0/24
IPv6:
2a03:f80:420::/48
Signature Algorithm: sha256WithRSAEncryption
21:11:45:32:1a:22:a0:48:fc:5e:a3:cc:06:fa:b5:23:f1:fa:
52:cf:d4:a3:c0:e4:5d:c0:cf:a1:3d:02:8d:85:e7:a3:89:72:
b3:b6:2d:35:87:17:1d:87:30:1d:9a:96:9e:98:40:f4:55:be:
b1:f2:b7:e7:92:60:a0:be:bb:74:df:04:57:dd:b1:df:9a:8b:
fb:c0:7c:0d:f1:21:7d:95:ed:0a:16:18:bf:bc:67:e3:43:c0:
83:c5:d2:b2:ac:33:2f:ac:39:5d:79:a4:92:19:31:66:5f:17:
85:e6:12:5f:27:73:05:3b:71:b2:7e:d1:2b:b2:ab:eb:e2:1f:
26:19:62:5c:96:dc:ca:d4:5e:c1:45:31:af:31:75:4e:97:fe:
7f:dc:c8:38:a8:07:83:bd:05:ef:db:9b:63:58:4b:cf:95:81:
17:00:cd:57:14:56:30:41:24:0b:7c:3a:a7:7b:3a:a5:f1:69:
ca:28:df:46:16:10:86:84:f3:c4:4e:98:a4:82:1a:a9:04:10:
6d:c3:a9:03:67:08:c8:ed:11:b5:78:c1:87:86:c7:05:a9:c4:
17:fc:6c:f3:3a:65:05:4d:b4:d6:c3:2e:e0:36:c0:d1:8c:da:
b9:19:25:fa:15:72:76:af:57:80:e0:6e:d2:17:4a:75:cd:de:
37:58:fb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:43:55 2025 by rpki-client