Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/oDni1EJm1ojLAR69a31uPncLns8.roa
File: oDni1EJm1ojLAR69a31uPncLns8.roa (raw, json)
Hash identifier: Vg8O7m2AgHh60b93FLyO9wy8Nzk9z4F/YYUyXCnmzmk=
Subject key identifier: A0:39:E2:D4:42:66:D6:88:CB:01:1E:BD:6B:7D:6E:3E:77:0B:9E:CF
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 019427B5B032B1DFE034F2D0C785D08A31A5
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/oDni1EJm1ojLAR69a31uPncLns8.roa
Signing time: Thu 02 Jan 2025 15:50:05 +0000
ROA not before: Thu 02 Jan 2025 15:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 193.108.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b0:32:b1:df:e0:34:f2:d0:c7:85:d0:8a:31:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 2 15:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a039e2d44266d688cb011ebd6b7d6e3e770b9ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:8a:e7:03:9c:5c:2c:88:4d:a5:2a:63:24:
4b:26:be:ad:ea:cf:f3:3d:38:3a:51:44:34:b4:6a:
9c:96:c5:47:10:9b:f5:f8:70:33:b1:32:39:f5:a6:
38:93:e0:2d:dd:b5:8f:26:1c:f7:71:dd:46:8a:d9:
07:65:9e:33:6d:46:9c:9e:ca:c7:2c:6c:1c:ff:d6:
4a:1b:be:4d:4c:af:ae:9f:7a:60:7e:f6:a5:78:c1:
af:5c:40:d3:d0:51:eb:11:ef:17:de:5c:2c:43:5c:
be:ec:32:58:e0:25:b4:91:2a:7a:77:32:7c:bb:51:
5f:52:b6:83:d3:aa:7a:f3:6f:02:47:9a:d2:13:38:
ad:17:b6:e8:b7:a7:d6:7f:b5:d6:c5:dd:c8:5a:f5:
d8:d0:b4:48:23:00:2b:bb:df:7e:2b:83:7e:4a:9d:
49:85:1e:e6:e4:ab:4b:03:2d:c5:66:7c:aa:f2:e9:
15:0f:3d:ee:07:fc:96:da:02:1b:2e:1a:da:60:cd:
3c:e5:45:56:f6:bc:a3:4c:c6:22:6c:bc:09:01:94:
2b:92:0b:91:a7:c4:ee:01:10:68:f6:4b:8b:6d:2d:
78:4b:87:af:b3:fa:54:8c:3d:3e:47:fe:cb:81:54:
25:b5:3d:15:08:bd:45:7c:9a:92:2f:8e:2f:fb:0f:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:E2:D4:42:66:D6:88:CB:01:1E:BD:6B:7D:6E:3E:77:0B:9E:CF
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/oDni1EJm1ojLAR69a31uPncLns8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4e:53:50:80:46:30:04:c1:20:86:b5:cb:c4:50:7a:18:00:
43:01:1a:69:a1:3c:ba:2a:45:09:34:9a:e5:b9:91:57:ce:d0:
36:0e:9e:95:d2:e9:a3:e8:03:ec:cb:56:cf:97:15:46:a5:64:
44:6f:1b:81:0f:e9:27:10:f4:f8:b1:a1:b7:1f:59:cc:2e:b2:
5f:20:f3:98:21:12:95:9e:e3:51:88:05:8c:c6:67:69:02:56:
95:b7:85:94:ed:af:ae:c4:5b:44:01:7b:04:cb:96:d6:2d:86:
d9:33:49:43:bc:70:9d:ff:0c:b1:88:c3:7a:de:d8:9d:bf:d9:
01:78:3f:e2:d9:e4:f5:4d:82:14:df:3f:f3:0b:ae:bf:12:3a:
1b:89:59:1c:ec:d8:c1:ce:af:6a:e6:1f:45:85:bb:b3:b3:f8:
89:53:39:69:b5:b4:6f:13:dd:b2:6c:56:f9:30:f8:96:ee:22:
a0:7f:db:08:ec:cd:65:84:a2:d2:69:31:81:a9:9c:f0:9d:bd:
38:d0:32:e7:08:1a:27:26:79:55:08:a5:ff:4a:40:47:0c:3e:
db:94:9b:5b:47:76:09:24:3e:31:ab:f0:49:a9:78:66:6f:6a:
8a:25:55:54:df:4a:b0:86:df:fb:38:83:b4:c8:0e:1e:d2:83:
47:88:d2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:05 2025 by rpki-client