Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ovQsZmWIbSXZLdBLNWIh15fv4R8.roa
File: ovQsZmWIbSXZLdBLNWIh15fv4R8.roa (raw, json)
Hash identifier: MFOedrlPH2+LjOakSqczVihk9wbRS3wTeJVX1Wk1VIU=
Subject key identifier: A2:F4:2C:66:65:88:6D:25:D9:2D:D0:4B:35:62:21:D7:97:EF:E1:1F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FE8FED8D5EE8EF39F40DFCBE9A6AA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ovQsZmWIbSXZLdBLNWIh15fv4R8.roa
Signing time: Thu 02 Jan 2025 05:49:35 +0000
ROA not before: Thu 02 Jan 2025 05:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201147
IP address blocks: 95.46.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:e8:fe:d8:d5:ee:8e:f3:9f:40:df:cb:e9:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2f42c6665886d25d92dd04b356221d797efe11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:f5:6b:ff:be:61:47:11:aa:d8:57:f4:86:
ce:d5:da:84:0e:21:1d:b9:2c:29:f7:a4:7d:5d:a4:
46:7a:be:60:5e:d3:cb:0f:af:4b:13:70:8f:36:48:
e9:00:c6:3f:81:d4:50:d6:fc:29:6d:27:ef:6d:80:
45:71:e1:c0:09:ce:d0:11:3a:26:48:8d:48:dc:4c:
20:64:31:b4:04:8c:3f:10:9a:41:05:10:18:07:38:
a0:e3:93:50:ae:9e:5c:12:07:d9:b9:b2:4a:f0:27:
fc:ea:c6:95:5b:66:56:73:41:55:34:29:5d:db:c3:
3d:43:a7:fa:cf:43:be:a6:f2:75:a8:97:3f:ec:49:
c6:d5:c2:12:87:91:24:b0:1d:00:00:9c:93:2f:40:
63:ea:d6:1a:65:d6:8c:9b:b9:38:fe:ac:25:8e:11:
c2:5f:d0:e3:94:c0:02:8f:8c:ac:c9:97:56:c4:07:
2a:a2:cf:48:20:f5:da:44:9e:f0:48:5b:c7:a4:f6:
02:35:39:d1:a5:f9:58:ae:49:c6:87:ee:22:9c:5f:
76:67:cb:43:20:36:f0:33:50:fa:c6:57:2d:6a:cb:
a4:91:c0:65:95:02:3d:f7:95:8f:00:d8:07:f3:f0:
dc:29:5d:65:c8:57:3b:05:7a:74:34:0f:8a:60:d8:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F4:2C:66:65:88:6D:25:D9:2D:D0:4B:35:62:21:D7:97:EF:E1:1F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ovQsZmWIbSXZLdBLNWIh15fv4R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.176.0/21
Signature Algorithm: sha256WithRSAEncryption
30:a7:0a:c8:2c:65:f2:23:ca:11:89:68:a8:79:c7:f2:91:34:
77:e9:b8:e4:6c:67:05:f2:49:6d:94:08:0e:fa:a3:29:fb:d2:
0b:d3:70:60:e6:a9:8f:42:ff:65:70:c4:9e:36:aa:22:90:c8:
ce:e9:a3:ca:87:0d:86:11:d1:36:72:d7:ac:3d:cb:0f:e5:50:
e7:ab:72:df:f9:1b:15:70:49:bf:c3:1b:d6:67:26:18:67:72:
87:10:f3:ee:83:96:fa:e8:94:a3:5c:62:54:79:e1:b4:b7:59:
7c:94:28:7e:1c:e5:75:86:25:6e:b6:2c:44:23:5b:61:fd:1b:
5f:91:d6:ff:db:f7:85:4d:63:2b:87:a8:e6:0e:92:bd:71:6c:
a7:68:83:4f:95:34:b4:3c:b8:22:44:aa:99:cc:ae:ce:3f:39:
82:dc:e8:ec:38:8d:0e:ba:6f:0b:4e:71:a9:e7:b4:6c:d8:d1:
e3:2d:a0:b9:0a:9a:da:ca:c9:f3:10:dd:b0:5a:55:46:26:c0:
22:51:cf:72:95:2c:cf:16:63:af:5a:6a:15:cd:b4:57:95:cd:
44:9a:c9:50:70:75:f3:9b:77:83:59:d3:66:37:48:58:d3:47:
97:62:92:4e:9e:09:5d:8e:64:c6:68:2b:41:f3:fc:51:31:5f:
cd:d0:f8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:49 2025 by rpki-client