Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa
File: OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa (raw, json)
Hash identifier: EhOploeWX4IzgMSZUmJHUcObR1oyvr4q2CNLTcIgD8g=
Subject key identifier: 38:90:FC:5A:D3:5D:0F:61:64:A1:AD:7E:6F:A6:84:F4:6D:CC:EB:89
Certificate issuer: /CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Certificate serial: 019427B6324F948A19B354B76683E70A278C
Authority key identifier: AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa
Signing time: Thu 02 Jan 2025 15:50:39 +0000
ROA not before: Thu 02 Jan 2025 15:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59439
IP address blocks: 91.240.178.0/24 maxlen: 24
185.168.52.0/22 maxlen: 24
2a0d:c0c0:3e1::/48 maxlen: 48
2a0d:c0c0:3e1:18::/64 maxlen: 64
2a0d:c0c0:4e1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:32:4f:94:8a:19:b3:54:b7:66:83:e7:0a:27:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8e857fc00be14ed92b9e78cc3ca69b8adc2485
Validity
Not Before: Jan 2 15:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3890fc5ad35d0f6164a1ad7e6fa684f46dcceb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3e:48:ae:a5:16:1d:3f:33:f3:62:57:24:ee:
54:05:28:c5:7a:c9:21:ab:55:3f:2c:b0:13:a7:32:
dc:17:58:fb:97:fe:a6:89:c2:8a:f3:c6:ba:b9:7a:
ec:fd:29:2a:9d:b3:f1:9b:53:8d:12:cc:ed:1e:02:
ca:23:78:c1:6f:e5:6a:0a:7a:9e:ef:ff:e2:f0:9e:
fa:79:4f:c9:ac:23:63:2d:4a:95:32:ec:37:43:48:
2e:cc:ff:98:4a:46:54:cc:26:d3:9f:ec:81:87:02:
94:cf:c4:be:40:e5:15:4b:00:fe:cc:fc:be:39:ac:
3f:c4:0b:67:7c:b1:41:94:fc:fa:5b:ca:fd:52:c0:
59:61:b9:3f:b7:fc:68:5c:e1:5f:47:86:cc:e2:72:
29:c3:0f:4f:77:81:e3:79:9e:03:42:25:cf:27:48:
1e:b0:09:15:91:27:88:d2:11:b4:c4:ae:6c:e2:91:
dd:0d:f4:4f:fc:0d:f8:1e:c3:bc:68:53:65:42:44:
87:4d:d2:85:10:de:9e:c8:fa:cc:7e:b3:af:90:20:
aa:4a:ba:f1:3e:28:17:40:1d:75:55:c5:32:90:6b:
83:b0:fb:a1:ca:dc:3f:ed:6d:f2:f3:9e:4e:0f:2c:
bb:d8:b4:c9:fd:37:9e:6c:f3:8e:75:b8:bc:4c:f3:
6f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:90:FC:5A:D3:5D:0F:61:64:A1:AD:7E:6F:A6:84:F4:6D:CC:EB:89
X509v3 Authority Key Identifier:
keyid:AD:8E:85:7F:C0:0B:E1:4E:D9:2B:9E:78:CC:3C:A6:9B:8A:DC:24:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY6Ff8AL4U7ZK554zDymm4rcJIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/OJD8WtNdD2Fkoa1-b6aE9G3M64k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b8c3bd-16ef-4f2c-9400-db099e585e4b/1/rY6Ff8AL4U7ZK554zDymm4rcJIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.178.0/24
185.168.52.0/22
IPv6:
2a0d:c0c0:3e1::/48
2a0d:c0c0:4e1::/48
Signature Algorithm: sha256WithRSAEncryption
36:e8:48:4a:36:22:54:0e:00:c8:3a:16:cc:6d:3f:9f:06:2a:
7d:3a:15:47:bf:be:86:b4:d3:32:ae:8a:81:4f:0a:07:49:e9:
fe:f9:6f:04:6e:01:f6:b4:00:b0:4d:df:8b:de:8c:43:31:46:
51:1b:2f:91:57:5c:b0:4c:f8:eb:7e:53:45:7b:ae:7e:9e:29:
22:55:65:a2:25:3b:50:59:14:bf:ae:17:32:87:94:66:44:ca:
7a:3a:0f:f4:55:af:9d:fe:ef:34:d4:64:ca:58:4d:87:39:1a:
c6:97:69:3e:22:ec:dc:ec:26:06:c9:7a:4f:85:f4:20:e1:5b:
20:4e:08:5a:74:e4:59:d7:1e:4e:77:eb:35:3a:f0:33:ee:08:
79:59:cd:b3:ad:d9:31:62:32:2e:c6:a4:9a:af:a7:18:7b:db:
af:4b:92:fa:a0:35:09:11:e7:25:33:83:8f:d8:f5:34:2e:ef:
21:6b:d7:e9:c8:65:d9:02:08:72:14:c2:69:5b:12:c3:68:cf:
99:c4:67:22:3d:7f:3e:6f:a2:d6:ba:f6:8d:0e:4f:37:65:9c:
5a:65:e5:d5:9d:25:01:c0:d2:69:02:31:92:4d:d9:dc:58:0f:
b0:14:6c:ed:0a:88:30:6b:c2:b1:a4:5c:fb:a2:2b:cb:75:4a:
31:c4:d5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:52:18 2025 by rpki-client