Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/v_OC8AL3Mq1xajaIUc5DePm85DI.roa
File: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (raw, json)
Hash identifier: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=
Subject key identifier: BF:F3:82:F0:02:F7:32:AD:71:6A:36:88:51:CE:43:78:F9:BC:E4:32
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 0194266BA97AF9C88C6B341EA54068E84AB4
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/v_OC8AL3Mq1xajaIUc5DePm85DI.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8468
IP address blocks: 212.124.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a9:7a:f9:c8:8c:6b:34:1e:a5:40:68:e8:4a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bff382f002f732ad716a368851ce4378f9bce432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:5d:74:f0:74:89:13:27:3a:7e:21:74:22:
5f:82:76:b0:11:d2:25:ad:ce:0d:0d:ab:9f:7f:ec:
5e:d4:08:1f:19:fc:6c:7c:85:af:83:f2:3f:8d:17:
2f:8c:9c:c2:b9:51:15:79:ef:6b:91:d1:c1:0f:ac:
fc:e5:87:89:25:dd:82:9c:64:7b:11:00:1b:42:d6:
89:c7:58:e9:d1:db:44:c1:fb:92:2b:7c:07:67:37:
4c:1b:21:1b:a9:92:53:6a:48:2e:ae:1a:8c:6a:0a:
a8:69:42:03:a7:59:40:5c:93:ea:a8:67:ed:f3:36:
32:71:c7:3f:54:04:ad:ba:3b:8f:5b:8c:b4:45:4e:
5d:58:47:76:98:3e:35:98:ac:9b:77:d8:84:42:05:
43:c9:ad:04:c2:3b:79:30:1b:fa:5a:73:65:c9:9e:
f7:3b:04:ca:71:eb:31:7d:a4:3a:0e:2f:92:12:c6:
f5:db:fd:d0:9b:06:d0:6f:b4:01:84:96:52:55:24:
17:8a:c2:e8:1f:ae:86:e9:65:5d:e5:95:8e:c8:9b:
7e:56:55:15:9b:c4:00:44:bb:98:5c:ae:7f:c8:e0:
bb:45:ad:df:02:e1:d8:d0:14:40:06:0a:df:a5:76:
46:85:23:ab:b0:77:57:00:ff:b8:a4:f8:c5:aa:4d:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:82:F0:02:F7:32:AD:71:6A:36:88:51:CE:43:78:F9:BC:E4:32
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/v_OC8AL3Mq1xajaIUc5DePm85DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.199.0/24
Signature Algorithm: sha256WithRSAEncryption
18:57:db:87:1d:ce:5d:81:7b:b6:db:d8:f2:6d:93:b1:fb:f9:
73:be:cc:7b:53:95:ef:35:6c:c3:fa:c8:78:42:b5:6c:7f:ae:
b6:98:eb:ad:58:dd:a2:42:8c:da:a0:45:73:b8:14:d0:31:16:
3e:42:05:84:a4:c8:08:d5:53:cc:d2:ca:64:e0:ff:4a:00:c0:
ad:3c:54:3b:da:7f:c9:2b:ec:42:d1:19:09:06:5d:7e:0d:a0:
88:c7:9e:e6:9d:60:cf:86:94:1e:3b:05:8d:0d:9e:5a:92:5e:
46:37:27:66:e7:67:2c:33:dd:5b:a9:0d:67:85:9b:d6:de:43:
c3:5b:1b:1a:2a:1c:b2:74:e0:98:a0:91:b3:fc:73:a4:cf:14:
fe:42:9b:aa:ea:7e:dc:a8:d0:69:c6:67:42:76:de:c6:05:a3:
af:94:aa:c4:73:25:f3:1c:69:44:57:87:6f:f0:23:bd:d1:3a:
9e:55:33:ae:71:2f:96:85:7e:44:70:0b:d7:ac:6c:59:13:83:
9f:ce:3b:cc:d0:e4:74:4e:05:d4:5f:1d:ec:1f:e0:5f:74:8c:
76:29:9c:67:42:1e:95:34:f3:b2:c8:6d:1d:82:57:c9:ae:f9:
fc:52:c9:20:51:97:95:40:c7:e9:88:3a:0f:ab:34:21:b3:f6:
14:6e:9d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:28 2025 by rpki-client