Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/O8AFVnBt1m_KBZSzBdlAy6IskOk.roa
File: O8AFVnBt1m_KBZSzBdlAy6IskOk.roa (raw, json)
Hash identifier: drC0SH2uIRu+wIVyTkJpGVnxmbNSIHA06selPLS2xnY=
Subject key identifier: 3B:C0:05:56:70:6D:D6:6F:CA:05:94:B3:05:D9:40:CB:A2:2C:90:E9
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 019426D9A8CF4DAA7DA35EC9816735DFCCA0
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/O8AFVnBt1m_KBZSzBdlAy6IskOk.roa
Signing time: Thu 02 Jan 2025 11:49:46 +0000
ROA not before: Thu 02 Jan 2025 11:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64421
IP address blocks: 2.58.16.0/22 maxlen: 22
195.26.20.0/23 maxlen: 23
2a09:e0c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a8:cf:4d:aa:7d:a3:5e:c9:81:67:35:df:cc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Jan 2 11:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bc00556706dd66fca0594b305d940cba22c90e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:e5:2b:b4:8a:4a:c7:e5:4c:18:16:75:d5:
f1:17:27:e5:62:96:ae:b3:fc:a9:17:02:61:5b:2e:
86:b4:6f:5f:69:3e:1f:28:93:07:c3:0d:98:fd:42:
41:26:6d:70:43:6a:5c:9a:a2:fd:7f:59:80:dd:07:
c0:cc:a0:06:df:84:81:05:07:bf:49:3f:66:4d:8d:
4c:d9:2e:e6:82:66:94:19:ae:6e:b6:cb:c1:52:0c:
b7:ed:af:06:98:0a:b2:c4:3c:20:9d:fa:86:16:ea:
bc:b7:da:b8:62:d4:17:70:f6:23:44:81:08:76:36:
9c:85:c8:93:30:3b:3b:f5:bf:99:ca:a0:0a:57:a4:
24:68:47:0e:a5:c4:95:6f:c3:9e:5e:b9:52:0e:91:
dd:fd:3f:26:a8:59:81:46:b1:0c:20:4b:c3:73:9a:
68:23:c1:31:75:1d:80:8f:49:7e:32:8d:86:7d:22:
72:c2:b4:55:94:da:f3:a1:e4:b2:9c:10:5d:5e:73:
52:6d:e1:c2:c3:14:ad:2e:72:10:6b:f1:88:f1:4d:
5e:7f:6a:d6:9e:f1:c1:25:e5:dd:a3:db:c0:ea:22:
2e:e1:42:fc:87:7d:ff:50:aa:79:a8:8d:78:83:06:
75:88:2d:54:76:3c:32:ff:5f:6d:e7:34:2a:a2:ef:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C0:05:56:70:6D:D6:6F:CA:05:94:B3:05:D9:40:CB:A2:2C:90:E9
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/O8AFVnBt1m_KBZSzBdlAy6IskOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.16.0/22
195.26.20.0/23
IPv6:
2a09:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
be:6e:c2:9e:af:3a:f6:0f:59:11:11:dd:44:ac:6d:4f:9d:78:
0a:e0:76:f8:b6:93:5f:ea:bb:92:bd:99:8e:3d:b8:78:e3:9f:
20:44:d4:bf:98:3d:8e:df:9b:1f:7c:5b:14:ca:9a:00:95:ac:
62:2d:6a:0e:05:d2:06:1b:04:5b:4e:bc:69:62:fc:27:d7:1d:
8f:c4:2e:47:d3:d7:77:8e:9f:83:b2:61:70:51:61:d9:db:5b:
9e:0f:e0:ae:8a:10:75:e7:7b:c9:12:03:d0:ee:74:5c:f4:16:
77:55:0e:ff:3b:01:5c:c5:6c:29:4f:5b:ab:85:ff:f0:f0:2b:
41:cd:1b:e3:89:cc:4d:6e:90:51:e1:f9:bb:2a:f4:99:75:ed:
1c:02:d8:9f:6e:3f:ae:4c:91:dd:ac:19:80:08:d8:8f:ce:d6:
85:69:58:26:67:86:cd:de:51:75:f7:73:76:7a:b3:5e:3e:e7:
8b:ff:87:c1:10:2a:22:fc:aa:a5:58:3f:e6:1c:29:56:ea:45:
19:f0:33:3b:f1:1c:de:45:55:fc:af:97:16:5f:b8:b6:3d:f8:
b1:b0:3c:e3:26:9b:6c:af:d8:6c:e5:68:c7:a8:21:62:95:f9:
75:80:30:e3:3e:74:0a:a8:1a:30:95:4c:8a:0f:f1:ae:90:06:
7f:16:ad:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:38:26 2025 by rpki-client