Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa
File: 8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa (raw, json)
Hash identifier: oH6KdsOd3RvUnrt12CiU1fvS0cagxnl2TsnQPrOACrc=
Subject key identifier: F0:EF:9E:6F:0B:F3:35:A1:77:62:1E:DD:AB:52:F7:EA:AC:9E:6D:14
Certificate issuer: /CN=b7f39e3670b43f57f1511b78dde2085964017455
Certificate serial: 019428256F87A7FC85200232E8E7A17C92A6
Authority key identifier: B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa
Signing time: Thu 02 Jan 2025 17:52:09 +0000
ROA not before: Thu 02 Jan 2025 17:52:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43326
IP address blocks: 185.124.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:6f:87:a7:fc:85:20:02:32:e8:e7:a1:7c:92:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f39e3670b43f57f1511b78dde2085964017455
Validity
Not Before: Jan 2 17:52:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0ef9e6f0bf335a177621eddab52f7eaac9e6d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:ef:72:5d:6c:d7:53:09:d2:77:70:dd:b9:
45:3f:fe:a8:2b:79:7a:32:7b:a7:5c:af:9f:a8:f4:
91:d8:5c:be:b1:83:8d:b4:ab:b2:84:df:25:c6:fa:
98:2a:61:b3:68:fb:7a:31:0f:0d:54:05:17:bd:03:
9a:95:f9:23:b8:c8:e4:a6:e6:a0:be:8b:39:0e:d4:
b8:9b:57:a5:e3:8b:dd:5c:1e:5d:a7:a5:57:3f:6b:
1e:b2:55:a9:97:f6:0a:e5:33:a9:73:98:4e:10:77:
c3:d1:e6:91:38:55:3e:d4:7d:2f:48:ea:f2:6c:0c:
df:d2:ed:c8:36:77:9c:86:0c:36:06:48:12:0e:d6:
93:44:f6:0a:26:69:ac:b7:65:aa:5a:12:ad:ab:71:
7d:4d:b7:2b:19:ca:19:44:10:fe:f9:84:e0:12:a3:
2e:a9:d8:40:58:38:aa:d4:b4:cb:f6:7e:3c:b6:2f:
fd:03:77:51:85:21:f0:d4:20:1a:a2:be:19:39:f9:
ca:8f:bc:d1:92:89:67:2b:15:8b:b8:9a:9a:bd:28:
6d:fe:3d:37:40:81:dc:00:d6:c2:5a:3c:7a:3f:7d:
71:b6:4b:3e:19:72:15:07:2b:7c:75:db:68:3c:cc:
9e:e2:4c:c1:4c:e9:1f:dd:08:be:5e:c6:f5:47:85:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:9E:6F:0B:F3:35:A1:77:62:1E:DD:AB:52:F7:EA:AC:9E:6D:14
X509v3 Authority Key Identifier:
keyid:B7:F3:9E:36:70:B4:3F:57:F1:51:1B:78:DD:E2:08:59:64:01:74:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_OeNnC0P1fxURt43eIIWWQBdFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/8O-ebwvzNaF3Yh7dq1L36qyebRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a64cb-a7f5-42b0-ac15-ce29fd3526a8/1/t_OeNnC0P1fxURt43eIIWWQBdFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.242.0/24
Signature Algorithm: sha256WithRSAEncryption
25:42:2c:c6:ec:67:d4:b2:9a:6f:fc:86:36:81:7f:65:25:7b:
99:1d:cf:34:8f:43:36:b1:cf:c7:22:4c:a6:0a:f4:f3:da:ab:
ce:12:b5:70:ec:ed:13:7c:b1:2c:db:7a:5f:74:4e:04:a1:f2:
46:53:e3:2f:93:63:72:bd:d5:3c:bf:5d:2b:5f:f3:9c:01:a3:
5b:68:93:48:40:5f:9c:fe:44:a6:67:32:9b:97:0d:d8:f9:6e:
77:7e:ba:41:5c:27:f4:21:33:6e:4e:ed:30:38:0f:de:16:6f:
6e:8f:27:f3:82:8b:c6:0f:76:12:3d:05:f7:87:fd:ee:11:7b:
cd:04:e8:22:2a:f6:4d:93:72:b7:46:bb:4f:d8:d7:63:33:1b:
b1:24:d6:ae:78:18:c8:0b:d0:55:09:13:ba:52:74:1c:db:49:
e4:32:b7:87:1f:67:95:26:aa:27:6a:b5:33:98:e0:3c:31:64:
04:5e:4b:8b:70:07:68:6c:10:96:c6:78:18:a7:3f:8f:e9:f7:
d4:02:bc:0c:53:7f:bc:a6:e2:ad:83:d1:6a:11:76:35:53:6d:
10:44:26:7b:38:f3:5e:37:d5:8a:ba:57:34:88:ea:94:57:a0:
28:fe:5d:77:27:46:ef:b5:a3:73:9e:fe:a4:fc:c8:1b:80:6a:
9e:08:be:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:35 2025 by rpki-client