Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/oIcjQjM-IvUsL86ZBuJNKaHdn9E.roa
File: oIcjQjM-IvUsL86ZBuJNKaHdn9E.roa (raw, json)
Hash identifier: FlUomPtcxIp8yHmvkyFkvDDrL1vloZjtImIM9JhM69w=
Subject key identifier: A0:87:23:42:33:3E:22:F5:2C:2F:CE:99:06:E2:4D:29:A1:DD:9F:D1
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 0194236A2560CE163240C8113A99CB494A66
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/oIcjQjM-IvUsL86ZBuJNKaHdn9E.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6855
IP address blocks: 85.248.31.0/24 maxlen: 24
85.248.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:25:60:ce:16:32:40:c8:11:3a:99:cb:49:4a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0872342333e22f52c2fce9906e24d29a1dd9fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:11:d3:5d:77:0e:fa:c3:dd:a1:6d:b9:76:
d8:3e:06:4d:9c:95:f0:ab:17:7e:41:90:65:d8:bd:
be:9e:ae:99:61:b6:fc:f0:f6:b1:0e:39:61:1b:32:
be:4b:44:8c:e8:a8:72:9a:ce:36:c1:60:bc:9d:8a:
a1:63:72:a6:0d:0e:4c:dd:13:49:c5:d6:e0:96:a1:
2a:bb:3e:59:33:0b:77:f2:1a:42:e0:fc:6f:a4:7d:
7c:76:b4:e3:74:c4:18:87:d0:c6:e0:f0:2e:14:ec:
3d:46:95:ef:31:d6:0a:4b:d4:79:34:10:ff:31:5e:
20:3d:2d:c7:e0:89:ac:32:10:1c:f2:eb:84:04:52:
94:36:6f:94:b0:1a:69:c5:a8:de:f1:93:17:00:99:
0c:fa:b3:38:b7:35:17:60:99:05:03:d9:45:c9:88:
32:36:ef:22:f4:12:c5:3a:a3:cd:07:cb:2e:1c:9e:
64:83:8c:f4:e1:d7:c6:66:a2:3d:c6:a4:15:5c:2a:
21:86:4c:08:35:e3:c9:5a:5c:32:03:48:42:99:c7:
16:4b:ae:79:e2:ae:da:86:4d:52:bc:09:77:1e:77:
f8:68:71:ad:b8:af:e5:9c:38:f8:a8:63:68:3f:a8:
ab:11:e2:ed:d4:d5:20:b3:fb:eb:64:08:6b:05:3e:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:87:23:42:33:3E:22:F5:2C:2F:CE:99:06:E2:4D:29:A1:DD:9F:D1
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/oIcjQjM-IvUsL86ZBuJNKaHdn9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.31.0/24
85.248.74.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:49:f8:bc:fd:1d:f8:8f:30:77:30:2f:50:26:7c:80:f7:7a:
e2:c8:be:6f:64:2b:5e:00:14:88:e2:cb:33:4b:18:f8:69:b7:
40:ec:cb:c0:f7:ee:90:01:cb:8d:d7:89:55:b0:16:e2:c4:35:
30:51:cb:56:ae:93:e4:8b:23:57:06:c3:d9:ef:59:9c:65:77:
a8:d8:8f:d9:a3:b9:8a:0c:ec:07:c3:28:16:3b:14:99:e1:c8:
cb:9e:fd:cf:a2:db:0b:cd:8a:80:4c:12:d0:9f:84:43:74:d4:
bc:78:11:93:aa:8d:eb:4b:4a:ff:6c:bb:74:c2:06:02:49:9c:
84:0c:35:c6:05:ea:63:0b:0d:68:20:83:d9:74:ce:fd:a1:6f:
51:01:1a:a0:89:8e:cb:cb:19:67:3f:1d:f8:b0:fb:af:1f:a2:
ab:c1:5d:0e:54:05:7d:bc:03:d1:e2:2b:72:fc:ff:5d:74:8b:
73:04:a4:28:ac:39:7e:f9:4a:57:1d:5e:53:b1:cb:65:02:d4:
ff:87:41:62:7b:de:67:53:89:c4:57:ba:01:6f:8b:3b:a2:71:
ff:6a:f3:db:ce:c9:9d:1e:9d:5e:51:c1:8b:57:19:0c:f2:c0:
b7:f5:49:b8:c3:98:e2:5b:3a:55:c0:9e:42:1f:e9:aa:c5:a1:
ba:43:70:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:56 2025 by rpki-client