Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa
File: o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa (raw, json)
Hash identifier: I2VZfYqX7cBWwD9BfQYsIfq3N0fck3zT8r6EAvsy5D8=
Subject key identifier: A3:E8:10:6A:BD:82:32:34:8E:D0:E1:91:D4:9B:04:CB:97:D1:F4:FB
Certificate issuer: /CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Certificate serial: 019426D9B143B61BD379270AB84C79663001
Authority key identifier: CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa
Signing time: Thu 02 Jan 2025 11:49:48 +0000
ROA not before: Thu 02 Jan 2025 11:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 217.147.192.0/22 maxlen: 22
217.147.196.0/22 maxlen: 22
217.147.200.0/22 maxlen: 22
217.147.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b1:43:b6:1b:d3:79:27:0a:b8:4c:79:66:30:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca91c42dfa6afbc11e78ee9de2e785f8a20b5043
Validity
Not Before: Jan 2 11:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3e8106abd8232348ed0e191d49b04cb97d1f4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8b:88:97:4f:3f:02:f8:d2:4c:06:21:4e:c4:
96:40:00:55:20:8f:f0:d8:b6:a4:0e:6d:b6:32:1f:
f1:f7:63:b9:fb:40:3e:7f:e7:7c:40:ae:d8:1f:55:
22:28:45:7f:8a:f0:aa:98:5a:52:df:7a:27:ee:30:
a6:13:23:0a:1c:7d:e8:3b:da:4a:da:6e:48:16:3c:
d6:0b:73:c5:6f:86:a5:f2:a8:41:6b:5d:61:f7:7f:
d3:9b:43:8c:bd:fd:65:60:9f:f4:52:65:39:15:fb:
3d:0a:31:0f:07:43:16:f5:ea:31:87:6a:d6:3a:13:
9a:d6:b7:aa:4a:3f:aa:e8:57:59:4d:6d:21:f0:29:
42:46:db:04:67:fe:d3:36:3a:a3:b8:65:1b:7b:c0:
85:d4:c4:71:03:fb:58:af:21:47:0a:4c:e7:05:1c:
f6:20:b3:89:24:c4:50:8d:a0:2b:a9:0a:9f:63:61:
85:9a:4c:ca:4b:12:ed:b9:94:8c:70:2f:0f:bd:70:
0d:b8:07:25:d8:94:25:dc:5d:aa:29:3a:d8:a7:a9:
18:a1:54:d1:0b:f8:a4:98:04:c9:ec:b1:54:09:e4:
31:4b:b6:0e:4d:41:7d:41:3f:de:c7:f1:50:ae:25:
8f:c2:f3:5d:a2:2a:b8:67:35:eb:88:a6:d0:e5:4b:
5c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:10:6A:BD:82:32:34:8E:D0:E1:91:D4:9B:04:CB:97:D1:F4:FB
X509v3 Authority Key Identifier:
keyid:CA:91:C4:2D:FA:6A:FB:C1:1E:78:EE:9D:E2:E7:85:F8:A2:0B:50:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypHELfpq-8EeeO6d4ueF-KILUEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/o-gQar2CMjSO0OGR1JsEy5fR9Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/851e84-2f1a-4c77-b1f2-d5865041a14f/1/ypHELfpq-8EeeO6d4ueF-KILUEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.192.0-217.147.203.255
Signature Algorithm: sha256WithRSAEncryption
7f:fc:be:fc:ab:01:6a:91:22:6e:c6:fb:ae:6e:18:1d:c7:10:
52:6b:4f:67:e0:8d:5a:69:ee:17:6f:e6:fe:49:ec:75:3c:e1:
5b:3d:59:aa:ec:b3:bd:8c:96:4b:42:a8:d1:e2:7a:a6:4a:65:
c9:71:98:ad:0b:b3:91:73:af:ac:74:45:ba:7e:b2:fc:54:be:
4f:f0:43:14:0d:21:f8:f8:0a:40:d9:7c:a9:cd:51:a0:f0:7c:
37:d7:6c:37:62:40:4a:eb:e5:2b:91:e8:24:c7:ad:73:84:f3:
10:fc:1d:bc:27:3b:e6:03:ed:d0:38:ce:bd:48:6b:50:3b:18:
c6:b9:64:05:1c:db:9c:bc:7e:2b:2a:c6:48:92:9e:83:70:08:
70:8d:24:b2:4b:cf:c0:fa:db:da:21:b6:f7:14:e4:dc:11:b4:
a6:4f:a5:8e:58:1f:30:73:ac:67:c0:86:0a:58:1d:5e:d4:ff:
8f:9d:dd:3d:08:3a:50:99:d3:94:ef:78:e0:44:de:ea:d0:e0:
57:bc:30:a0:b5:01:60:78:09:a6:39:10:32:e2:71:78:27:90:
02:27:fb:1c:69:b1:2f:d9:4a:07:e1:8a:2a:53:dd:b3:6c:bf:
55:69:88:b4:5d:30:c6:79:73:00:c4:4d:cf:40:07:bb:5b:8a:
e0:bf:0a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:48 2025 by rpki-client