Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/pOvhTWtU4kelyPZ1fpMoPO101II.roa
File: pOvhTWtU4kelyPZ1fpMoPO101II.roa (raw, json)
Hash identifier: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=
Subject key identifier: A4:EB:E1:4D:6B:54:E2:47:A5:C8:F6:75:7E:93:28:3C:ED:74:D4:82
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 019422FC1F6DEC19ED73B86BB1F5900F106C
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/pOvhTWtU4kelyPZ1fpMoPO101II.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197768
IP address blocks: 31.133.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:1f:6d:ec:19:ed:73:b8:6b:b1:f5:90:0f:10:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4ebe14d6b54e247a5c8f6757e93283ced74d482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b0:58:f7:12:36:84:68:02:4b:1e:6a:8d:0e:
e2:b8:43:22:7c:ef:53:56:66:3c:8f:ba:e5:c7:d5:
8a:be:69:7b:c7:cf:57:e8:fc:20:c8:7b:ee:af:b9:
22:8f:a7:54:75:02:4b:32:6a:38:1f:f6:93:5a:11:
33:ea:38:d3:32:ce:7d:de:5a:b9:6c:d4:22:06:79:
ac:22:3b:e6:88:42:af:00:15:90:a0:0b:01:98:16:
ae:b5:28:6b:9d:ad:64:b7:54:7a:42:63:3f:43:8d:
e7:61:b0:05:ae:1d:8f:08:1c:d7:db:df:c0:24:4c:
e4:af:a3:ac:c0:20:41:1e:30:2c:ad:41:ac:ba:8a:
1a:4a:61:62:44:42:85:b4:0a:22:af:18:24:98:b8:
e5:50:6a:95:d6:4d:5f:44:a1:3f:d3:6c:53:14:ca:
bf:f1:3f:a1:b9:7e:6f:82:03:ca:3a:01:74:be:69:
d8:7d:f2:35:be:e3:dc:47:c4:35:0c:c0:41:db:d7:
0a:79:33:9f:14:9d:f9:cf:99:0f:47:a3:29:92:50:
0a:78:ed:0a:ad:ef:ec:c8:6b:fd:3f:ed:f7:55:ca:
41:8b:30:c0:22:45:c8:78:f8:2b:36:fc:54:af:97:
16:29:56:91:5e:b1:fd:cd:54:f0:00:68:8e:40:d5:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EB:E1:4D:6B:54:E2:47:A5:C8:F6:75:7E:93:28:3C:ED:74:D4:82
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/pOvhTWtU4kelyPZ1fpMoPO101II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.104.0/21
Signature Algorithm: sha256WithRSAEncryption
69:80:e1:e8:db:9a:98:77:c6:74:42:4e:52:86:66:49:f5:02:
e9:a5:ec:ba:0c:a5:5f:fe:f3:d6:38:ac:39:86:09:02:42:83:
3a:72:c9:d6:f4:8e:5e:fa:df:d9:db:54:16:ae:88:49:1f:17:
aa:6d:71:5d:d3:ac:c0:b9:0e:12:b3:4d:0c:58:76:4d:e5:de:
8d:76:e1:4f:22:9c:83:f0:ad:db:2d:84:10:34:40:6d:f0:bf:
bc:3e:e6:ee:5f:74:ce:6d:e2:bd:cf:d1:02:98:67:79:3b:b5:
90:2d:5b:59:af:6f:7f:42:bc:5c:72:f1:2c:c9:3b:1f:b3:05:
c3:ae:c1:93:5c:49:ba:a5:4f:f0:69:41:8c:a6:47:81:b5:19:
58:69:14:5a:cb:40:19:ec:25:c2:28:e7:92:58:70:ee:5a:4e:
1c:da:1a:fe:57:a8:79:eb:1a:d9:fa:16:28:21:44:cc:84:b8:
73:5f:81:0a:e2:e5:01:80:c7:10:63:2c:0b:c7:a1:f8:1a:7d:
7d:c8:88:ed:40:d9:d6:cd:c0:81:0a:d5:d2:bc:3c:1d:94:2c:
73:8a:fd:3f:38:3b:d1:f2:9a:a4:c3:c8:01:13:72:d7:2b:b5:
e6:22:a7:7a:cb:7e:ff:c0:d5:bb:32:9e:f9:ff:3c:f2:b5:e0:
36:3e:f4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:00 2025 by rpki-client