Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/0c_l4ysRLhoLyNhVK3O7GIWEcSo.roa
File: 0c_l4ysRLhoLyNhVK3O7GIWEcSo.roa (raw, json)
Hash identifier: wCgtD5GTaTUHzlGOdOblih6qPlBPABAlJQ113X+Jw+c=
Subject key identifier: D1:CF:E5:E3:2B:11:2E:1A:0B:C8:D8:55:2B:73:BB:18:85:84:71:2A
Certificate issuer: /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
Certificate serial: 0194A1A844396B5BCEEA26F1E0FE46F0DFE5
Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/0c_l4ysRLhoLyNhVK3O7GIWEcSo.roa
Signing time: Sun 26 Jan 2025 08:09:06 +0000
ROA not before: Sun 26 Jan 2025 08:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203557
IP address blocks: 84.38.129.0/24 maxlen: 24
84.38.133.0/24 maxlen: 24
185.29.11.0/24 maxlen: 24
2a02:4840:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a1:a8:44:39:6b:5b:ce:ea:26:f1:e0:fe:46:f0:df:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
Validity
Not Before: Jan 26 08:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1cfe5e32b112e1a0bc8d8552b73bb188584712a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:88:bf:eb:8e:67:e6:30:17:eb:f3:5a:6a:
6d:b7:54:d5:81:c9:79:1c:55:e2:a7:69:aa:5e:6f:
e3:e7:0c:60:e2:0a:d0:5e:a0:ad:97:74:11:67:a6:
0d:ab:82:49:ff:b3:6a:69:e4:36:e1:f9:9d:2b:00:
40:f1:0b:86:a0:b3:bf:b3:0d:4c:23:a3:77:53:75:
42:d5:91:e2:a7:fc:3f:82:75:3b:4a:70:cf:2b:14:
a2:df:2a:e8:fc:69:3d:b5:ba:5f:25:70:05:bc:d3:
89:68:64:9c:cf:a4:f9:ad:94:47:bb:3e:d0:68:10:
7b:74:09:22:7d:e9:68:5c:22:6c:00:6f:15:13:c6:
90:4b:28:68:ae:6d:ba:2e:83:29:cb:d9:74:a2:22:
6f:f3:ab:7c:9f:66:5c:0e:ad:98:bb:b0:d2:2e:17:
14:cb:97:79:95:cc:46:e5:6f:8b:d8:17:49:20:b7:
8a:00:99:af:5d:35:34:5d:4d:1d:72:22:e2:7b:e6:
c1:66:eb:52:64:c3:48:49:88:e0:a9:84:a5:3a:85:
cf:8c:6e:e7:0b:27:bc:68:74:85:5c:c2:8c:61:ff:
79:96:37:41:05:35:e2:77:90:4a:7e:38:c1:56:63:
a0:5c:02:6f:ba:86:e1:b5:60:2e:9d:c7:68:56:17:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:E5:E3:2B:11:2E:1A:0B:C8:D8:55:2B:73:BB:18:85:84:71:2A
X509v3 Authority Key Identifier:
keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/0c_l4ysRLhoLyNhVK3O7GIWEcSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.129.0/24
84.38.133.0/24
185.29.11.0/24
IPv6:
2a02:4840:101::/48
Signature Algorithm: sha256WithRSAEncryption
0c:9e:72:ea:82:1c:70:a2:44:70:2c:17:57:99:d9:e2:c9:87:
76:e6:47:c9:e9:d4:fd:f2:23:e3:6b:9a:a2:67:29:b1:b6:2d:
32:10:d2:65:56:6e:79:9b:31:99:98:da:0f:87:d1:34:67:f5:
a2:57:b3:8e:7d:af:bb:7e:db:c2:86:38:6d:c6:24:87:de:6f:
48:14:57:ee:ee:6d:74:9a:8b:ec:54:d6:87:34:91:f6:fc:1d:
0d:b8:db:e4:55:ad:38:6d:3d:37:62:5b:a5:69:a5:44:65:c1:
47:7c:09:d6:8c:f9:53:5f:af:f8:ad:f5:36:c8:92:9b:0d:ec:
c5:55:1e:16:66:be:65:3c:c2:b8:3c:96:12:ad:50:5f:34:93:
5d:6f:d9:06:d3:a4:74:c6:51:89:61:81:98:fc:bb:d5:75:6a:
57:64:b1:40:a6:53:cc:30:76:41:85:66:0a:31:2c:22:c3:ac:
ae:66:46:90:0a:ec:2f:20:70:7f:76:62:ef:8b:e9:d7:2f:ac:
56:31:8d:83:fb:22:b2:58:8e:0c:29:d1:23:73:2b:57:dd:63:
b6:9f:dd:29:b0:0e:89:df:99:cf:a3:20:26:69:ed:4f:81:ab:
22:ae:88:58:04:35:cc:09:6d:5a:ad:48:c8:12:6c:d9:35:4d:
da:e1:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 08:48:13 2025 by rpki-client