Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/s0olpFJOyt15T_pyM--2CmUb0gk.roa
File: s0olpFJOyt15T_pyM--2CmUb0gk.roa (raw, json)
Hash identifier: ngdLwlq+fDO5qvE2dRL5JDPZUtcX3P2i8ij4BiH5dks=
Subject key identifier: B3:4A:25:A4:52:4E:CA:DD:79:4F:FA:72:33:EF:B6:0A:65:1B:D2:09
Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Certificate serial: 01942826547F43EE2C5141DB01DFC0A8BC59
Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/s0olpFJOyt15T_pyM--2CmUb0gk.roa
Signing time: Thu 02 Jan 2025 17:53:08 +0000
ROA not before: Thu 02 Jan 2025 17:53:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25084
IP address blocks: 212.87.240.0/23 maxlen: 23
212.87.244.0/22 maxlen: 22
2a01:699::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:54:7f:43:ee:2c:51:41:db:01:df:c0:a8:bc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090
Validity
Not Before: Jan 2 17:53:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b34a25a4524ecadd794ffa7233efb60a651bd209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:38:5c:c4:9b:24:b6:ee:30:3d:b7:f3:6c:
ef:4f:57:27:e4:67:fc:1a:9b:be:2f:f1:55:08:b4:
c8:bd:22:05:72:f5:cb:e5:c3:7f:c4:39:b6:db:a5:
d5:32:b5:14:59:b0:63:a6:af:d9:7c:ff:bc:06:c8:
5e:fd:03:88:af:30:d8:08:fe:d1:fb:0f:44:b0:71:
e1:0c:2b:81:bb:fd:89:30:2a:f4:d1:0f:16:0e:0e:
1d:64:9b:78:ff:78:b2:88:7a:43:42:73:b5:43:f2:
82:bd:25:07:a8:1a:fd:0f:0e:8a:87:03:38:bc:d7:
8d:6f:6e:1e:25:0d:c8:d5:d3:0e:6e:99:a5:2b:c8:
81:1d:d0:d4:76:0f:6b:97:32:ad:dc:0c:53:54:bf:
88:d3:69:6a:1a:3e:f3:7c:fe:2e:08:af:23:e6:5a:
32:12:1c:0a:c8:89:fa:c6:e0:37:0f:08:fa:b9:1b:
22:4c:27:09:a8:00:f3:4f:27:48:fc:87:da:8d:34:
44:7c:31:e7:63:4d:f6:c4:63:3a:4d:9b:76:d3:61:
52:6e:06:2a:ec:3f:43:fb:5a:25:ea:d6:6e:1e:94:
d5:64:c1:bf:83:ee:c1:59:6d:fa:2b:e0:41:ae:40:
14:6c:b8:79:8f:a8:3c:a1:b5:4d:99:97:0e:a7:00:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4A:25:A4:52:4E:CA:DD:79:4F:FA:72:33:EF:B6:0A:65:1B:D2:09
X509v3 Authority Key Identifier:
keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/s0olpFJOyt15T_pyM--2CmUb0gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.240.0/23
212.87.244.0/22
IPv6:
2a01:699::/32
Signature Algorithm: sha256WithRSAEncryption
b5:dc:90:f2:0d:6a:39:5a:10:c4:8a:c2:01:45:66:30:97:75:
18:66:9d:7a:33:d4:35:62:e8:42:ca:28:05:5a:18:c2:99:8d:
a7:4c:a9:80:19:04:d7:b5:09:93:ca:4e:14:ca:ab:5b:40:5e:
1c:14:e0:4a:9b:2b:f1:0d:cc:6b:75:07:06:a6:2b:ec:36:86:
12:f5:2f:b1:f8:91:c5:d6:90:9d:da:10:cd:1e:10:ed:0c:bb:
02:2a:c7:b6:e6:2c:ad:40:8e:29:04:eb:f7:8b:6c:74:7f:be:
87:27:8a:44:aa:21:02:5e:15:fb:21:9a:5d:da:09:48:51:0c:
94:a0:a8:66:a3:85:a3:fa:29:4e:b6:53:1d:99:8e:45:e1:62:
cb:a0:7f:cb:7a:b2:90:86:af:ba:cd:59:84:e9:81:9c:90:19:
91:6a:26:45:db:5c:98:49:a3:a9:b3:4c:50:d4:5a:91:20:f3:
03:71:fc:08:c3:0a:2d:9d:e1:5d:dd:87:1b:eb:ab:14:e0:58:
42:eb:32:37:d1:af:c2:97:a1:05:1e:ba:7d:47:e7:93:22:35:
54:d1:23:de:a2:f6:9f:73:f8:6c:c6:c4:06:13:58:9d:30:80:
11:e1:ab:15:38:87:40:b9:13:cf:fd:6f:15:ed:26:cd:48:f7:
b3:89:56:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:54:42 2025 by rpki-client