Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_VOVFmY6lUOwdqNQFOPUuL564vQ.roa
File: _VOVFmY6lUOwdqNQFOPUuL564vQ.roa (raw, json)
Hash identifier: +xAznzopDGqPEn8FTFYmIgURH89cr3OL73V/C1XHd1s=
Subject key identifier: FD:53:95:16:66:3A:95:43:B0:76:A3:50:14:E3:D4:B8:BE:7A:E2:F4
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236985AB2DEA5A067B66599E39188BC7
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_VOVFmY6lUOwdqNQFOPUuL564vQ.roa
Signing time: Wed 01 Jan 2025 19:48:25 +0000
ROA not before: Wed 01 Jan 2025 19:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9050
IP address blocks: 94.176.164.0/23 maxlen: 24
94.177.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:85:ab:2d:ea:5a:06:7b:66:59:9e:39:18:8b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd539516663a9543b076a35014e3d4b8be7ae2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:c8:07:be:1b:78:d8:aa:f8:c7:50:3f:da:
68:2b:4c:d2:1f:b5:4e:30:6c:97:e6:6f:83:b1:d8:
2c:73:18:19:41:16:0a:d2:fd:b9:7c:bb:06:99:ad:
f8:76:7a:80:f6:bb:84:84:80:31:61:a9:7c:d0:2b:
68:9c:6c:95:f0:98:02:4b:80:65:fe:d6:a2:89:8f:
e9:7c:e7:33:50:f0:d1:d7:69:c7:ce:e1:c5:8c:94:
4e:34:5f:aa:17:88:bf:8c:ec:a9:9f:e3:f1:1f:49:
2d:d6:f4:a1:a8:f2:42:89:86:a2:b5:06:16:d5:d4:
d6:55:ab:aa:c9:4f:b1:a7:37:3b:a8:e2:6f:57:de:
41:2b:8f:a8:60:a1:49:16:1b:a7:7e:61:97:a5:d6:
f8:51:67:27:59:13:ab:1e:1c:7d:b1:c8:4f:04:a5:
c5:11:97:81:18:bc:36:b9:10:a9:33:b1:8c:0f:c7:
9f:5e:72:73:cd:bf:de:4f:70:4d:de:57:7e:0a:10:
88:c7:39:03:b3:84:65:4e:b6:69:33:8e:61:8d:01:
f0:8d:86:90:45:57:25:c8:54:17:e8:06:8f:f7:ba:
6f:15:99:00:5a:41:c4:25:aa:57:b0:33:e5:45:bc:
44:12:b5:d5:84:ce:18:1d:f4:95:d6:29:93:71:a2:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:95:16:66:3A:95:43:B0:76:A3:50:14:E3:D4:B8:BE:7A:E2:F4
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/_VOVFmY6lUOwdqNQFOPUuL564vQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.164.0/23
94.177.107.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9a:12:5b:e3:4e:27:b5:b1:73:88:59:1b:c1:72:9a:45:49:
8c:77:43:91:a9:94:3b:bb:bd:24:87:40:39:01:d2:01:e1:2f:
ac:18:3b:07:30:7e:6d:14:82:89:03:08:3b:65:6b:44:62:46:
59:af:d5:c8:c5:31:a5:0c:fe:57:08:f4:8a:07:dd:44:d3:d9:
d2:b4:10:ca:83:7b:de:60:c6:20:fe:67:1b:c8:46:7f:fb:fe:
c1:b4:10:b1:28:1f:fb:b3:f5:82:94:9e:67:b1:8d:f6:7a:3d:
25:33:51:6a:dc:b4:64:e0:76:c5:7b:79:c7:80:9e:47:19:39:
6c:89:b2:a0:29:0f:e0:80:7e:75:ba:26:e6:6b:57:19:9d:36:
99:b8:52:76:a6:17:7a:7a:68:f0:5f:79:6f:92:ba:fc:38:90:
87:7c:38:9e:ba:20:4d:92:00:75:52:84:ef:81:b1:23:8b:c1:
bf:bc:d9:7a:90:7c:36:bc:3e:0b:bd:41:75:7e:dd:07:76:f1:
3a:f2:1f:46:38:bf:b9:38:f3:2a:6d:d9:45:17:fc:59:66:4e:
63:b5:2b:80:89:8c:df:9d:dc:38:50:37:18:c8:3c:b3:b7:01:
ba:26:f2:a1:90:e1:bf:ef:15:3a:b6:44:0d:ae:51:f5:73:5a:
7d:ae:a5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:31 2025 by rpki-client