Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OvLWFjuaplvFw74T90MVoTJyQPI.roa
File: OvLWFjuaplvFw74T90MVoTJyQPI.roa (raw, json)
Hash identifier: xOJfcV9Hwg2qFldj+To5nN+byTUn4DfMWX3s515MpgU=
Subject key identifier: 3A:F2:D6:16:3B:9A:A6:5B:C5:C3:BE:13:F7:43:15:A1:32:72:40:F2
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0194244526AA5694EC2D2A29C275DB63EF8B
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OvLWFjuaplvFw74T90MVoTJyQPI.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197414
IP address blocks: 87.251.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:26:aa:56:94:ec:2d:2a:29:c2:75:db:63:ef:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3af2d6163b9aa65bc5c3be13f74315a1327240f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:56:13:ba:12:2e:d1:bd:16:fc:70:97:98:
69:ea:0e:9a:a8:f1:fb:db:ea:7e:90:74:0c:3c:5f:
86:9f:4e:84:3e:ff:80:b5:95:b1:19:e5:43:9d:ee:
7a:65:1c:bc:13:b9:dc:28:35:43:78:e2:88:3c:50:
d9:6f:2f:29:c5:f4:42:82:ee:42:d5:fd:3b:9f:03:
73:ed:ef:96:6b:5d:67:ef:03:43:11:90:1f:8b:75:
5f:82:9a:ac:ef:bc:4a:67:b9:e6:1e:b8:89:f0:e0:
57:6c:16:53:38:33:85:de:a1:11:e6:4e:6e:ab:d1:
b2:25:54:12:2b:31:5c:40:92:a7:39:f2:9b:29:32:
b8:95:b5:95:49:18:cb:93:33:90:05:0f:40:bb:15:
c2:f4:63:fe:47:37:a1:b3:ef:2a:6f:f3:1d:ad:48:
f4:54:f3:41:70:bc:e6:d2:70:ab:30:57:fb:85:f9:
fd:fe:69:0b:b3:17:60:a7:a3:02:42:47:12:dc:8b:
b0:c0:43:5b:cf:d0:87:69:d5:0c:aa:22:fd:a4:55:
d7:0f:8c:ff:39:e9:66:3d:9e:5e:da:dc:cd:d8:28:
e2:b8:85:5e:8b:c9:ee:76:ba:ac:4a:fc:86:a1:37:
fa:32:8a:5e:1b:28:f3:a8:56:95:13:26:9f:79:34:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:D6:16:3B:9A:A6:5B:C5:C3:BE:13:F7:43:15:A1:32:72:40:F2
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OvLWFjuaplvFw74T90MVoTJyQPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.64.0/24
Signature Algorithm: sha256WithRSAEncryption
30:5c:50:17:ca:10:69:75:04:e8:8a:a7:7e:b1:10:c2:e3:f1:
98:83:ae:19:46:0b:37:9e:59:6b:0d:3e:9d:cd:a4:02:1b:9e:
d0:be:47:85:69:ef:fd:84:19:25:8b:5e:15:59:7a:3d:75:73:
f2:db:a3:a6:54:bb:8d:85:0b:1e:b9:67:75:ad:e8:2b:c3:e1:
04:23:dc:0d:ec:37:36:e2:b9:88:c6:ea:1e:5d:d0:57:e7:93:
a6:66:d9:5e:5b:df:83:cd:8d:ed:c7:0b:8e:9d:88:e1:ff:b3:
67:93:1b:f3:d6:d2:67:cc:5e:51:96:3a:26:37:0d:8c:b0:a0:
91:61:d9:51:e7:a2:6e:d4:32:67:83:42:11:e4:b0:12:34:46:
29:9f:1c:0f:7c:af:9e:b3:96:31:ad:ec:1d:d4:15:48:6d:26:
dc:c6:9e:81:d4:9c:f6:d6:15:c0:90:d8:02:c0:25:5e:c7:39:
48:b4:0a:15:a6:70:f2:89:e5:fc:58:3c:31:d1:5a:c2:ea:09:
f4:ad:cb:d5:e2:0f:90:0b:06:ec:5d:bf:68:d2:1c:59:62:eb:
20:6d:88:b1:a8:e3:19:ae:87:c7:8a:47:7b:fb:06:94:a8:dc:
ab:25:d2:94:7d:ea:f5:27:71:76:76:92:f5:19:4c:2a:2f:dd:
ae:43:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:03:39 2025 by rpki-client