Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/oo8iJLtCvQj5tOxPs0jWtfp64Qc.roa
File: oo8iJLtCvQj5tOxPs0jWtfp64Qc.roa (raw, json)
Hash identifier: XKlJdTZMxFrgX9Jc6CyAN7uX/wDP3zOgo6gX8cl2wYU=
Subject key identifier: A2:8F:22:24:BB:42:BD:08:F9:B4:EC:4F:B3:48:D6:B5:FA:7A:E1:07
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 01946A8A28626A790E080216DFF6651CA001
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/oo8iJLtCvQj5tOxPs0jWtfp64Qc.roa
Signing time: Wed 15 Jan 2025 15:17:06 +0000
ROA not before: Wed 15 Jan 2025 15:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39305
IP address blocks: 78.24.32.0/21 maxlen: 21
185.88.9.0/24 maxlen: 24
185.151.214.0/23 maxlen: 23
185.196.63.0/24 maxlen: 24
193.57.226.0/24 maxlen: 24
193.57.227.0/24 maxlen: 24
195.242.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:8a:28:62:6a:79:0e:08:02:16:df:f6:65:1c:a0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Jan 15 15:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a28f2224bb42bd08f9b4ec4fb348d6b5fa7ae107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:94:5b:f6:d7:fe:bf:55:64:32:5b:88:37:64:
f9:87:2c:4c:95:10:0b:91:8b:7f:b7:df:b7:2e:13:
de:43:1a:e9:03:29:78:7c:92:f6:7d:27:f3:fe:34:
33:0f:d9:4a:58:36:cc:f4:13:4e:cc:5a:35:05:21:
65:e6:13:ed:c6:70:5a:2c:e5:78:38:22:a9:1c:dc:
ff:17:af:a6:3d:f7:c1:bd:01:b1:9e:04:0c:3e:8a:
1a:be:cb:45:e6:1b:fd:23:2b:ef:2b:39:07:bb:66:
ea:d6:83:7d:5c:1f:ae:01:a5:f1:0e:8a:80:da:d6:
4d:dd:83:ea:31:09:22:78:62:f5:3c:66:be:50:c7:
60:92:c7:5a:ad:bd:aa:67:05:d0:69:e8:4a:33:4a:
19:b8:b2:9a:3b:31:31:a1:f3:1e:00:f5:1e:c7:51:
06:6f:0d:4c:ac:89:e2:5d:c2:81:91:16:f3:cd:5f:
91:b2:d8:db:b1:9d:36:71:8f:34:65:10:e1:61:9c:
a7:3b:4b:dd:05:d0:13:d9:1e:69:97:bc:89:d1:30:
b8:cc:53:62:a9:34:c4:d5:57:46:fc:22:bb:98:8d:
67:71:51:36:dd:0e:b8:ca:a3:c5:bf:c7:20:f6:17:
03:df:99:7d:8b:18:08:36:1a:a3:6a:9d:c4:12:9c:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8F:22:24:BB:42:BD:08:F9:B4:EC:4F:B3:48:D6:B5:FA:7A:E1:07
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/oo8iJLtCvQj5tOxPs0jWtfp64Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.32.0/21
185.88.9.0/24
185.151.214.0/23
185.196.63.0/24
193.57.226.0/23
195.242.146.0/24
Signature Algorithm: sha256WithRSAEncryption
58:8c:8e:d2:24:06:00:86:fd:46:fa:10:83:2b:d5:7b:1d:1f:
fc:28:23:31:70:29:40:54:5f:63:05:29:b6:46:dd:81:dd:c7:
d3:6a:43:85:f5:ca:9f:70:73:e5:64:20:33:ba:19:72:7f:9e:
b5:78:8e:27:be:32:fc:20:99:f6:f9:f7:32:af:4d:03:b9:9b:
2a:62:32:be:5b:08:02:41:49:01:02:37:dd:f3:33:25:6e:93:
6d:d6:a6:d3:4b:1c:8c:d4:6a:e4:00:e5:e6:8a:bd:42:01:2d:
81:4c:ec:f7:82:5d:a3:48:05:e3:09:33:fb:6a:73:0a:b2:10:
40:03:13:9e:95:cc:80:c4:dd:a8:b0:a0:c2:d2:79:c8:42:56:
79:59:86:1b:ae:84:8e:14:b0:d0:3d:56:d5:df:11:14:91:21:
c4:b7:11:ef:48:2e:f7:d4:dd:aa:d3:47:ff:5f:4d:bd:ae:07:
39:8a:5f:04:4d:54:fc:bf:0f:65:c3:2e:8b:13:ca:15:83:1a:
19:c5:55:49:b1:aa:99:cb:ba:2a:45:b7:b0:f1:02:52:36:80:
cb:52:30:f5:02:84:a0:da:b4:01:f9:46:5a:0c:7b:64:44:ed:
1e:98:fd:75:53:6a:96:77:9f:60:fb:97:11:07:12:9d:bd:16:
22:4b:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:02:39 2025 by rpki-client