Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa
File: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (raw, json)
Hash identifier: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=
Subject key identifier: 39:A3:F4:56:22:9B:79:8D:A2:BC:8F:B8:AE:FE:8E:78:D1:06:22:A0
Certificate issuer: /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial: 019420D606CDB37AA55EF704359DB71FAB06
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198367
IP address blocks: 91.234.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:06:cd:b3:7a:a5:5e:f7:04:35:9d:b7:1f:ab:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39a3f456229b798da2bc8fb8aefe8e78d10622a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:09:3e:c4:99:6f:2c:06:73:06:47:3d:7e:
60:8f:3f:85:d6:2e:5d:35:56:27:6f:f4:bc:c2:2d:
bd:3f:7d:1e:0e:6a:d5:7a:f4:b2:ad:91:47:79:d9:
b0:e7:95:81:40:fd:89:d7:0e:43:05:a4:75:86:75:
88:ff:a5:26:b4:40:8e:61:6b:89:02:be:a6:83:f5:
89:e5:68:d4:47:3e:d4:2c:d0:31:26:6d:2a:7b:47:
9b:e3:03:14:26:7c:3c:a7:d6:55:05:33:cd:e5:7f:
b9:57:b0:58:80:01:75:af:de:3c:14:fb:1c:0c:16:
01:35:06:b3:f6:ea:1a:e9:87:06:a8:fc:b9:31:64:
75:59:06:22:99:3c:9c:8d:a8:b6:ee:76:c7:3b:94:
d3:b1:61:e1:10:ef:cc:40:ac:81:9c:30:54:f8:82:
d7:77:cd:05:0e:b9:05:62:c2:00:c5:a6:b1:45:94:
57:01:04:a3:06:d7:a4:9c:e9:61:cd:e0:20:c3:60:
5c:e3:a6:25:e9:50:58:89:5b:91:f8:17:01:81:20:
16:77:6e:75:d4:9c:18:58:19:5a:4b:ed:3c:8d:72:
e5:3f:ce:54:61:c1:95:82:ec:88:d6:27:da:4d:35:
2d:74:31:79:dc:d1:11:0c:74:3d:ae:b5:2f:9f:5a:
86:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A3:F4:56:22:9B:79:8D:A2:BC:8F:B8:AE:FE:8E:78:D1:06:22:A0
X509v3 Authority Key Identifier:
keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:1d:fd:1b:53:df:5d:9f:d0:c7:6a:f0:31:66:d1:2a:ae:9e:
ee:63:2e:66:41:06:e8:b9:e4:b6:67:a0:97:e3:de:45:22:40:
44:84:96:77:72:1c:12:26:4c:0b:b8:5d:8e:c8:f4:8b:ed:e6:
68:2f:92:f7:91:4a:77:79:c9:e9:50:02:56:28:5d:60:2b:e2:
de:e7:ee:49:1f:07:84:83:9a:d2:6e:71:10:e9:12:f6:33:cf:
52:15:4a:6a:1a:94:6c:a5:dd:dd:f2:0e:15:86:dd:8a:c7:6e:
2e:1d:7a:a5:24:2d:56:54:0f:46:bd:e7:02:21:46:b1:26:6f:
0c:b2:81:0f:e7:cd:2a:a6:f5:8d:97:85:ed:7b:e0:9d:1a:3a:
6a:cd:98:ac:2f:76:75:2a:dc:09:17:44:eb:1c:e4:84:91:a0:
f6:dc:85:84:31:49:71:3f:54:26:02:68:65:42:52:d5:34:37:
9e:d0:eb:65:2c:51:77:bc:55:67:d5:90:ee:66:18:2d:06:72:
91:e6:5c:e9:96:5e:37:cd:c2:64:5b:66:54:40:d9:9e:7e:66:
3e:62:7d:78:4b:02:d8:22:97:0d:0a:3a:b8:52:cd:3f:34:d9:
cb:b0:74:b9:bf:c7:5d:52:bf:93:d5:30:33:86:3e:4f:1d:8c:
10:fa:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:50 2025 by rpki-client