Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/oDELH8p1m5vg8C6XcnJumCqP6uo.roa
File: oDELH8p1m5vg8C6XcnJumCqP6uo.roa (raw, json)
Hash identifier: uQIaZBphABvD/ZOnoL6A+mxJuaeEeGBzQMdNnKBDQJM=
Subject key identifier: A0:31:0B:1F:CA:75:9B:9B:E0:F0:2E:97:72:72:6E:98:2A:8F:EA:EA
Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Certificate serial: 019426D967BFBDCAE364D0F2D594B0210A94
Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/oDELH8p1m5vg8C6XcnJumCqP6uo.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208208
IP address blocks: 84.252.120.0/24 maxlen: 24
84.252.121.0/24 maxlen: 24
84.252.122.0/24 maxlen: 24
84.252.123.0/24 maxlen: 24
185.230.160.0/24 maxlen: 24
185.230.161.0/24 maxlen: 24
185.230.162.0/24 maxlen: 24
185.230.163.0/24 maxlen: 24
185.240.241.0/24 maxlen: 24
185.240.242.0/24 maxlen: 24
185.240.243.0/24 maxlen: 24
2a09:6301::/32 maxlen: 32
2a09:6302::/32 maxlen: 32
2a09:6305::/32 maxlen: 32
2a09:6306::/32 maxlen: 32
2a09:6307::/32 maxlen: 32
2a0c:2500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:67:bf:bd:ca:e3:64:d0:f2:d5:94:b0:21:0a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0310b1fca759b9be0f02e9772726e982a8feaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:09:d2:92:fd:36:29:04:e9:4c:d8:f6:50:
37:7e:01:af:c1:89:75:c6:1e:92:70:09:9b:ab:6e:
fd:c8:c8:c9:dd:33:37:b1:08:ca:9f:8e:03:75:fd:
7f:f2:9f:4b:27:ec:40:18:db:fc:39:c1:dc:14:cf:
3f:5e:fa:66:70:f0:a6:fe:f9:97:18:59:24:cf:cb:
c8:fa:0e:b0:15:b9:54:99:3a:c5:09:6c:85:c2:c9:
df:a1:e9:26:75:ae:4b:a0:d9:1a:14:1f:5a:eb:88:
47:db:ce:83:92:c9:cf:43:4f:0b:5f:bb:5e:5f:8e:
5e:69:a8:b9:41:c7:99:c3:3f:9b:04:ce:55:5d:7f:
2f:e8:a8:db:19:17:9e:68:45:21:3a:12:32:57:73:
2d:c3:eb:0f:3c:45:62:8f:99:3a:25:c1:0d:2f:b0:
83:f3:00:81:92:eb:9b:90:8c:e2:9b:bb:97:1d:53:
60:79:28:78:d0:df:9d:d5:1a:e5:c1:b4:5b:aa:3d:
d6:01:35:5c:30:97:04:8e:c3:92:48:5a:0c:cc:9b:
ef:18:45:b6:ba:29:a0:03:f8:c6:92:b4:b3:72:e0:
96:1b:fb:4a:8d:b0:c0:6b:ec:9a:e5:9a:50:e1:96:
b8:7f:3d:db:d9:2c:f0:0d:3e:b9:8a:ac:30:76:dc:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:31:0B:1F:CA:75:9B:9B:E0:F0:2E:97:72:72:6E:98:2A:8F:EA:EA
X509v3 Authority Key Identifier:
keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/oDELH8p1m5vg8C6XcnJumCqP6uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.252.120.0/22
185.230.160.0/22
185.240.241.0-185.240.243.255
IPv6:
2a09:6301::-2a09:6302:ffff:ffff:ffff:ffff:ffff:ffff
2a09:6305::-2a09:6307:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2500::/32
Signature Algorithm: sha256WithRSAEncryption
7e:fb:1a:2c:8f:e2:91:b5:60:de:84:b1:56:36:65:1f:4e:7b:
68:26:77:fc:7d:a9:b1:2e:9a:a0:98:35:39:b9:9c:0e:16:dc:
fa:cc:f4:b4:e6:cb:89:f8:cb:65:86:9d:ae:38:88:a5:64:0b:
ca:ce:1e:e7:ee:7b:d9:7b:32:08:08:16:e5:da:00:30:7f:19:
4d:2b:1f:65:d1:21:90:ad:8c:d1:f8:9f:9d:c8:44:4a:75:d9:
30:83:f2:59:a0:52:59:82:c7:fa:41:24:be:ec:dd:0c:0a:81:
1a:01:5c:e1:45:39:00:7d:d0:37:c3:ab:01:58:09:79:09:8f:
f9:7e:4b:9f:99:f6:0c:00:92:39:cf:f7:92:93:da:d6:1f:38:
67:09:66:7b:46:f6:5a:7c:e4:c6:91:3a:56:66:a7:86:e4:8e:
be:33:a1:b4:98:de:7d:44:f5:64:30:34:6f:99:40:c4:83:67:
5f:e7:6a:82:0b:d7:90:f4:65:4e:6d:66:54:3a:94:a9:d4:3d:
9d:63:43:8e:ea:59:05:c9:b6:09:33:96:05:c8:7b:d0:09:3f:
3b:bd:56:70:a3:c4:29:b6:49:2e:03:02:8e:0a:5f:4b:d8:8b:
ad:5a:9e:cd:d6:b8:4d:de:67:24:65:28:99:b8:cb:a9:ac:df:
5d:81:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:42:37 2025 by rpki-client