Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/C0o6u4617ldzXCQhJDGF4IWONDQ.roa
File: C0o6u4617ldzXCQhJDGF4IWONDQ.roa (raw, json)
Hash identifier: oggwBkJK9nhHHHUHaINutEQuhqdlfpUhFtxzmUm75kw=
Subject key identifier: 0B:4A:3A:BB:8E:B5:EE:57:73:5C:24:21:24:31:85:E0:85:8E:34:34
Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Certificate serial: 0194228DACA05ED61445A7EBE5E91EDBFB03
Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/C0o6u4617ldzXCQhJDGF4IWONDQ.roa
Signing time: Wed 01 Jan 2025 15:48:17 +0000
ROA not before: Wed 01 Jan 2025 15:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28753
IP address blocks: 139.28.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ac:a0:5e:d6:14:45:a7:eb:e5:e9:1e:db:fb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b4a3abb8eb5ee57735c2421243185e0858e3434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b8:f4:fb:b3:c1:9a:c6:9d:c2:95:64:84:0a:
2a:c3:75:03:67:51:23:c7:8b:77:2c:c4:48:09:3f:
22:a8:20:80:a8:af:45:4d:d6:8a:95:2c:66:85:cb:
eb:aa:63:5e:f0:35:2a:df:bc:4a:2f:b4:ff:c0:f0:
df:5c:71:70:73:5f:ca:e5:c3:e8:e0:b9:18:76:87:
8a:e5:d8:79:f4:d1:47:b4:99:fa:94:38:45:2b:da:
a5:c4:13:6a:07:bf:6e:e3:1c:4f:5e:9f:64:fe:3a:
01:ee:1a:e1:5c:8c:a7:dc:9c:11:ec:72:c1:50:20:
c3:2c:ab:22:31:6d:c4:4c:6e:31:7a:41:73:4a:e9:
be:f4:fb:76:95:a1:69:b2:5a:37:b0:bd:0f:eb:2e:
c0:ca:55:e7:ed:93:45:c9:c2:5d:da:19:6c:24:d2:
08:5b:9b:8d:66:b0:6b:a9:32:77:04:07:3f:9a:d1:
da:c2:cd:e9:99:f6:a7:4a:bd:34:5b:5b:0e:ab:21:
49:7f:96:2d:c0:c2:63:67:14:6e:e6:c7:67:9d:d9:
dc:3b:e5:dd:69:28:1a:f4:ad:82:ca:6b:4a:01:0a:
08:68:63:a8:ba:d5:14:2b:b3:58:7b:d1:7f:5f:16:
e7:d7:0e:6f:30:4f:35:fb:dd:e1:b7:66:42:55:ff:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4A:3A:BB:8E:B5:EE:57:73:5C:24:21:24:31:85:E0:85:8E:34:34
X509v3 Authority Key Identifier:
keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/C0o6u4617ldzXCQhJDGF4IWONDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.227.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1d:7f:ab:7b:65:24:bb:41:f5:31:c2:1f:ad:c2:c6:34:d7:
3f:3b:2e:b9:3c:cc:04:9c:48:49:fd:88:e3:aa:42:fa:8e:5b:
d3:60:62:b8:e1:0c:f9:c4:70:48:54:26:6a:06:26:f0:56:28:
de:e3:6d:d4:36:cd:cf:0a:b3:3e:68:ef:7f:bf:f1:47:cf:a2:
25:7b:83:10:ac:71:55:c6:a3:a8:f4:1e:eb:ac:04:30:5f:27:
2c:96:42:de:c1:7c:ca:9e:19:27:ee:b8:af:79:1e:0e:d9:2b:
0e:b0:88:91:b8:7e:06:15:90:a6:e4:0d:bf:4b:a6:b8:c7:76:
75:3a:c9:ec:ca:b7:17:78:6d:33:00:dd:70:00:d1:17:5d:ed:
cc:92:c3:43:0c:91:b5:13:17:52:83:58:09:e5:31:3c:ad:7d:
4f:d5:34:6d:e9:7e:24:b4:1b:c2:22:d4:79:a9:cd:cf:d3:81:
1d:4d:88:cb:c8:d5:da:60:76:59:11:19:d1:ad:42:39:77:af:
fe:ab:d9:db:14:44:7e:f8:8e:1e:20:57:ed:f1:d7:53:17:89:
63:ac:ec:a3:90:33:88:3d:1a:36:71:39:97:76:15:fe:7c:89:
74:a2:80:4c:3e:15:b8:ee:1b:d5:d3:f3:d2:89:91:38:4b:44:
6a:ac:72:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:33:05 2025 by rpki-client