Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/0CU8gK0M0FreSaI70cF5ooIUWnA.roa
File: 0CU8gK0M0FreSaI70cF5ooIUWnA.roa (raw, json)
Hash identifier: 3AhvcPwm/9eRzoLDWBdCRrt2ESsUhmDJGeKMEdO3cAk=
Subject key identifier: D0:25:3C:80:AD:0C:D0:5A:DE:49:A2:3B:D1:C1:79:A2:82:14:5A:70
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019421B1FEEF866791765BD8199D973A32F4
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/0CU8gK0M0FreSaI70cF5ooIUWnA.roa
Signing time: Wed 01 Jan 2025 11:48:20 +0000
ROA not before: Wed 01 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 212.116.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fe:ef:86:67:91:76:5b:d8:19:9d:97:3a:32:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0253c80ad0cd05ade49a23bd1c179a282145a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:68:26:ee:35:6e:8b:30:f1:67:bb:2b:ac:
d8:3e:9f:d7:16:5a:64:27:68:c8:9a:12:4d:1f:16:
9c:9c:e1:d9:ba:7f:84:39:b4:72:77:4f:43:65:7f:
b3:d8:75:63:69:95:b2:ec:5f:f0:90:37:97:0a:f7:
22:21:2b:af:5c:d5:1a:2b:16:2c:a3:50:b2:7e:9c:
51:4c:72:9d:26:b2:69:6e:4d:34:41:08:7c:1a:a5:
d7:81:9e:41:4d:ae:3e:c2:6f:4b:2f:6e:3a:5c:aa:
55:0d:63:92:9c:d4:2f:b8:4d:8b:65:38:50:62:54:
f7:a2:de:3e:80:b5:a8:23:f7:08:11:47:f3:22:32:
f2:c7:1b:2a:29:cc:00:67:93:72:92:43:f2:86:1d:
12:03:87:a6:23:9a:54:1a:e4:88:03:b5:c8:f2:fb:
73:61:8a:42:78:0e:d0:09:0a:c6:06:fc:2e:c4:4f:
bf:1e:c8:78:8d:8e:47:a6:bf:ae:16:78:d7:f4:77:
2c:35:11:75:b4:95:13:21:13:e7:72:7a:f9:c8:cd:
06:be:47:28:48:8f:da:97:89:e2:4e:4b:e6:79:3e:
dd:02:f0:65:82:a6:37:15:a8:96:aa:75:8e:16:9d:
b8:4c:bc:8f:4b:ab:e7:1c:37:19:f6:27:2d:2d:1a:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:3C:80:AD:0C:D0:5A:DE:49:A2:3B:D1:C1:79:A2:82:14:5A:70
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/0CU8gK0M0FreSaI70cF5ooIUWnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
96:bd:6f:bd:b6:cc:0f:f6:1e:3d:35:57:71:8e:41:6f:46:7a:
73:5d:87:81:e2:95:44:81:cd:34:4f:9e:83:26:06:64:a6:12:
38:fd:99:ff:82:39:f2:a1:12:bf:6d:f7:b6:1a:0e:42:b7:cb:
1c:8d:d2:6c:c1:b8:9e:34:0e:f5:77:c0:15:4c:23:61:00:dd:
b9:c0:cb:07:0d:e0:27:5d:44:9c:e2:61:d6:ca:a2:57:d5:c8:
7e:22:46:d2:41:90:8c:d8:96:a0:af:30:9b:69:1e:61:54:c4:
62:1a:8b:79:5a:cb:fd:dd:7c:c6:47:41:56:2c:47:0d:5b:d3:
5a:a5:1e:0a:76:db:20:a0:9c:92:e4:6e:3a:a2:06:90:41:dd:
af:e9:db:13:49:ed:7e:c4:8e:38:a9:06:e5:05:c1:f5:db:bf:
c6:bb:33:f8:0a:d5:d8:34:7e:88:f5:ab:cb:7f:5e:d4:bc:8d:
fb:7b:ce:67:13:71:26:19:f5:b5:bf:95:f8:76:64:a7:1e:43:
58:8e:12:6f:1a:74:cd:55:db:e6:f6:ea:46:75:97:43:7a:cf:
d9:05:be:a9:a6:af:8e:ea:df:dd:ac:91:dc:25:c7:48:38:25:
c8:c1:08:2e:40:ab:b2:f3:19:5c:8e:a5:87:35:4b:5e:84:e4:
ab:1d:86:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:11 2025 by rpki-client