Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/o5v0Cm5PNAVArL3iEJHw_CFIknA.roa
File: o5v0Cm5PNAVArL3iEJHw_CFIknA.roa (raw, json)
Hash identifier: Sf1IrFfhAHUJ08yJsTL6eR491AGzhJcL2ToeOR5gShQ=
Subject key identifier: A3:9B:F4:0A:6E:4F:34:05:40:AC:BD:E2:10:91:F0:FC:21:48:92:70
Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial: 019423D6AFE869C477830016BE30BAB4E451
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/o5v0Cm5PNAVArL3iEJHw_CFIknA.roa
Signing time: Wed 01 Jan 2025 21:47:39 +0000
ROA not before: Wed 01 Jan 2025 21:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42677
IP address blocks: 195.248.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:af:e8:69:c4:77:83:00:16:be:30:ba:b4:e4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a39bf40a6e4f340540acbde21091f0fc21489270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:db:13:d8:c6:76:eb:c0:5f:a8:37:07:c7:
9c:c4:21:9b:ec:11:b0:80:f5:e1:ff:fd:d6:8b:10:
e3:f1:5c:e1:68:49:6e:8f:fd:5c:8f:6d:59:06:75:
e5:ec:9a:f3:8c:ea:32:ee:ec:1f:4b:2d:27:71:ca:
e3:c0:3a:7a:f6:31:77:89:b1:27:06:90:fb:cb:06:
dd:48:b4:0c:b2:64:4a:f8:1f:c7:5c:fe:d8:a3:fa:
12:3d:cf:eb:63:70:4d:ea:dd:dd:d7:11:f3:b7:26:
d0:2b:8e:4f:d0:b2:e0:09:7d:99:8b:84:9f:8f:a4:
e1:f9:6c:46:c3:5f:21:6a:5c:ef:28:78:5f:03:09:
5b:12:69:fe:fb:ff:34:74:83:59:22:28:fc:a7:55:
83:92:5a:df:f3:0b:89:33:1d:78:55:c1:bf:57:64:
5d:43:b3:60:77:a2:f6:75:b1:6f:63:ba:aa:6a:ba:
73:48:b9:53:12:31:b7:a7:e2:68:7f:1d:2a:73:13:
88:25:6f:78:18:22:d5:e2:9d:66:b6:e0:db:1d:70:
8e:48:6b:24:bb:e9:b8:20:12:35:c1:3a:f2:40:8b:
99:dc:66:1b:f3:70:e5:30:c3:a4:4b:bf:99:e0:cf:
52:e3:7b:8e:b9:dd:5b:b4:f3:22:75:22:a8:24:f4:
40:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9B:F4:0A:6E:4F:34:05:40:AC:BD:E2:10:91:F0:FC:21:48:92:70
X509v3 Authority Key Identifier:
keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/o5v0Cm5PNAVArL3iEJHw_CFIknA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.232.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:a4:bc:37:c2:e7:9a:20:04:b8:f5:43:b8:df:63:2c:7c:e3:
21:3f:03:36:87:bf:42:67:ec:d3:f9:3b:f2:b2:f6:a2:aa:1a:
86:21:6a:75:a3:ce:a3:6b:fc:5d:c5:6d:e7:67:4e:3e:dd:ea:
79:be:14:e6:4e:25:20:cb:19:54:3a:15:a8:5b:5a:e8:9e:74:
0c:ca:71:05:2f:28:e7:a9:ba:30:b2:96:3c:1d:23:0e:f6:7a:
a4:1b:e0:d9:e2:80:34:3e:3c:a0:25:51:ce:20:3c:d5:83:54:
64:b6:97:5e:9b:77:21:90:3d:be:f8:d7:db:d2:1a:02:51:9d:
d6:8a:b7:99:25:c9:5c:ab:22:1b:e0:40:42:05:1f:ba:5f:c6:
ed:f6:9a:eb:2f:e5:45:1a:30:7f:b6:39:97:33:a5:44:cc:39:
53:24:9d:f5:4d:4a:82:a5:3c:a1:70:69:ae:73:55:73:00:f8:
1c:84:13:d5:38:10:85:84:71:40:49:40:b7:d8:61:bd:33:ee:
d5:e7:78:eb:a6:f7:f2:00:c5:cf:01:8c:16:77:55:c7:75:51:
ca:2a:d0:87:53:d2:98:92:f8:5f:c3:25:9c:71:42:10:53:f0:
fb:20:03:8a:31:10:10:2c:60:64:97:02:3a:59:17:75:d7:3a:
e6:68:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:51:17 2025 by rpki-client