Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/fOGnk_VrznVU7DESiUqaZO8J_Us.roa
File: fOGnk_VrznVU7DESiUqaZO8J_Us.roa (raw, json)
Hash identifier: xqQ89zCDDHN48Cqif0FGkMh7uc+JhrHIZHYiBVL1kd0=
Subject key identifier: 7C:E1:A7:93:F5:6B:CE:75:54:EC:31:12:89:4A:9A:64:EF:09:FD:4B
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 0194266B827D7E9131C588FCF810DEF8D3BB
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/fOGnk_VrznVU7DESiUqaZO8J_Us.roa
Signing time: Thu 02 Jan 2025 09:49:27 +0000
ROA not before: Thu 02 Jan 2025 09:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12357
IP address blocks: 37.222.0.0/15 maxlen: 24
87.125.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:82:7d:7e:91:31:c5:88:fc:f8:10:de:f8:d3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jan 2 09:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ce1a793f56bce7554ec3112894a9a64ef09fd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:f0:ed:c6:0e:c0:31:16:cc:5a:0e:6f:0d:
d8:c2:47:c9:0a:fe:73:8f:1b:63:6c:e8:bb:04:e4:
9c:0e:97:43:65:11:b8:5f:95:85:2e:08:df:b3:a3:
99:16:fe:3d:3a:62:39:59:e3:f6:e5:fb:18:49:b9:
45:d3:7b:a9:47:45:b4:c7:cb:62:cc:1c:0a:8e:da:
72:89:d1:1a:87:04:6a:70:30:e0:b2:ce:c6:2b:a5:
91:9a:92:d2:6b:c9:aa:20:9a:16:41:56:8c:69:26:
e4:40:85:1c:81:9b:18:79:43:2e:ab:d6:fb:09:45:
de:53:b1:91:45:e4:37:de:0e:a6:c5:e9:c6:8c:18:
a4:33:6f:3c:4e:e9:89:ab:8e:23:f0:55:e1:67:11:
c6:d8:3c:2e:29:14:4d:65:a2:3f:08:72:5e:31:37:
2a:b6:c3:c6:7b:71:2f:58:03:1f:c2:c2:09:b7:ca:
f3:a2:3e:5d:6a:36:8f:98:a5:46:f3:c0:42:89:ae:
0e:59:8e:6d:e6:c5:31:0c:a5:b6:7c:9f:a3:01:7f:
4e:a2:c3:6f:ac:a7:2f:0f:fd:ea:76:0c:f9:72:73:
cb:5a:b1:bc:e1:24:03:b6:de:2d:38:e2:59:7f:33:
e4:1c:70:3b:dc:97:bd:3d:ca:b0:68:ba:36:9b:0f:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:A7:93:F5:6B:CE:75:54:EC:31:12:89:4A:9A:64:EF:09:FD:4B
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/fOGnk_VrznVU7DESiUqaZO8J_Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.222.0.0/15
87.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:c4:23:ce:be:26:c2:79:f9:b4:a5:45:d4:7e:53:a6:2e:27:
02:b0:68:aa:41:f9:51:ad:16:1b:24:fc:57:5c:06:87:9d:45:
d7:ed:bc:4c:fd:af:38:77:e9:bc:16:96:82:c2:a4:4a:df:e4:
65:a2:f0:27:34:b3:d1:b1:59:50:24:e9:12:ea:b8:ae:d5:8d:
9b:75:e1:08:dc:2c:61:b2:18:0c:08:7f:9b:8a:e2:84:c7:4d:
38:ae:4e:37:bb:ed:31:18:a3:f7:6b:94:36:e0:30:0f:1a:44:
21:af:25:50:e8:9c:fc:b8:18:13:2e:2b:83:ec:a8:d2:e7:dc:
ce:99:08:22:b6:e4:e9:6e:f0:bd:fb:d0:20:fe:c3:70:09:a6:
e5:f9:81:93:62:bc:52:65:1e:d5:b7:38:0a:0c:b3:56:1a:24:
f7:95:93:74:ca:19:48:4d:2e:9c:bc:a3:06:70:3b:ad:39:44:
10:bd:e1:0f:61:5f:c3:e7:93:c8:6a:62:7e:3c:be:f6:75:2a:
33:c2:b4:b5:97:d7:02:24:cf:67:c2:57:2b:fb:06:ea:b1:5d:
d2:1b:65:3a:53:a5:23:77:c6:e4:55:85:4c:a5:df:27:cf:ca:
58:4a:96:cb:44:a1:a0:ef:de:ad:6b:a5:55:3a:52:e7:fe:f7:
c2:6b:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:17 2025 by rpki-client