Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa
File: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (raw, json)
Hash identifier: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=
Subject key identifier: A2:EE:3E:2A:1F:43:35:28:DF:BE:5D:12:5B:69:BC:2E:49:50:DA:DD
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01942445508048B52E3F4139FA51BBB43040
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa
Signing time: Wed 01 Jan 2025 23:48:29 +0000
ROA not before: Wed 01 Jan 2025 23:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197518
IP address blocks: 130.193.104.0/21 maxlen: 21
130.193.104.0/24 maxlen: 24
130.193.108.0/24 maxlen: 24
185.255.200.0/22 maxlen: 22
188.95.248.0/21 maxlen: 21
2a03:680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:50:80:48:b5:2e:3f:41:39:fa:51:bb:b4:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 1 23:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2ee3e2a1f433528dfbe5d125b69bc2e4950dadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:62:93:d4:93:e6:2a:01:93:2b:fd:d6:40:
80:ac:ba:d0:23:6c:2a:90:7c:4c:04:a7:6e:38:47:
75:2e:46:61:c7:06:57:96:0e:4d:30:ac:57:58:40:
fa:b4:f9:d4:20:03:d2:e3:62:6a:ac:9e:9e:12:64:
9d:3b:24:47:39:42:b0:41:4d:07:ad:62:95:cd:38:
de:a2:4d:81:0f:96:e8:3c:d4:92:c7:51:ad:a7:e9:
25:83:53:13:dc:ae:78:c0:77:c5:3b:4f:6a:76:e8:
c6:61:8d:3f:a4:e9:17:e2:2f:c6:43:b9:8b:25:6c:
bf:8c:5d:a6:fe:bd:97:39:71:b6:2f:fc:f4:90:ae:
99:a7:a3:17:9f:ea:a3:f6:71:5c:36:99:bb:11:24:
f9:c0:68:d0:c5:f2:c1:8e:4e:7e:cd:08:ed:ef:49:
95:1b:31:95:49:e6:6b:cf:70:ee:95:37:a7:1a:7c:
24:77:25:ab:99:af:94:c2:d4:8f:48:c8:3b:33:f3:
48:ec:c1:0c:14:88:80:8d:04:0e:5e:a4:f6:61:cf:
3e:43:b7:92:29:d3:9f:ff:b5:54:b0:20:78:2a:c8:
16:b1:a8:90:8e:a5:b0:08:cc:4b:23:37:d7:6f:de:
a4:f2:46:76:aa:a6:78:59:e9:55:81:0e:d4:9e:22:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EE:3E:2A:1F:43:35:28:DF:BE:5D:12:5B:69:BC:2E:49:50:DA:DD
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.104.0/21
185.255.200.0/22
188.95.248.0/21
IPv6:
2a03:680::/32
Signature Algorithm: sha256WithRSAEncryption
89:1f:51:cc:5e:db:3b:8e:dc:05:c1:51:f2:5b:ef:eb:bb:3e:
e5:5f:02:90:cf:b2:6e:d3:e1:2f:35:01:a5:1d:f6:b0:05:1b:
9d:79:07:1c:69:6e:53:ab:7f:8d:12:1f:31:51:89:a6:3a:f8:
e2:2d:23:f3:d1:46:96:d0:bf:bc:6a:62:1e:be:08:04:25:64:
eb:09:20:3b:10:0a:47:d2:43:bf:d3:fa:c0:05:f6:97:28:38:
6c:3f:8a:99:cf:05:47:12:9f:8b:61:38:e1:51:b8:5f:57:f0:
dc:f7:28:41:0a:c5:51:33:c9:08:45:b5:16:dc:7a:76:c7:00:
60:e2:8b:52:07:aa:89:68:1b:39:9d:e8:89:85:d3:ba:67:f0:
c8:21:78:d7:af:eb:0d:a1:6b:bb:58:90:39:bb:2d:a2:7b:d4:
f8:09:a0:69:70:84:53:9e:de:73:de:f1:d7:dc:55:cf:f1:79:
cb:3a:9a:05:48:2f:74:4c:63:7b:2b:56:00:e8:f6:db:f2:af:
14:25:e7:9c:4d:0f:57:e8:37:b1:19:e6:f9:0a:9c:21:37:00:
c1:78:ac:b3:85:db:fc:4c:48:f9:e5:2d:f8:9d:65:24:25:fc:
9e:54:10:e9:83:43:d1:9c:77:dd:49:70:39:aa:a0:c0:19:30:
8c:b3:93:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 18:50:31 2025 by rpki-client