Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ovi8FnpO2jkShQjZrOmVGdPdxDQ.roa
File: ovi8FnpO2jkShQjZrOmVGdPdxDQ.roa (raw, json)
Hash identifier: HEa2onDkAw4aZ7dMKM788YQSeUxlbWQdIqsg7Qa3FIQ=
Subject key identifier: A2:F8:BC:16:7A:4E:DA:39:12:85:08:D9:AC:E9:95:19:D3:DD:C4:34
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236997A0132ABF82D6B36850C139A221
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ovi8FnpO2jkShQjZrOmVGdPdxDQ.roa
Signing time: Wed 01 Jan 2025 19:48:30 +0000
ROA not before: Wed 01 Jan 2025 19:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48556
IP address blocks: 188.241.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:97:a0:13:2a:bf:82:d6:b3:68:50:c1:39:a2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2f8bc167a4eda39128508d9ace99519d3ddc434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:39:13:fd:6b:73:b9:9f:35:de:89:98:dd:78:
44:7d:f6:11:8b:d9:a2:a0:90:4c:5c:ae:53:4f:d4:
54:9a:c6:5e:f7:25:75:05:e9:8e:63:97:27:ba:77:
c1:46:69:65:10:ed:ba:58:e7:04:1f:1a:b0:92:03:
af:fe:79:73:97:8d:d3:19:31:29:a9:d5:43:a3:4c:
9d:69:9e:3c:7a:f4:be:e6:8c:f6:e3:16:c5:24:00:
2e:f2:79:db:a7:92:8d:e9:62:81:7b:f8:7c:22:b1:
7f:47:0c:c8:fd:21:17:08:25:b0:70:16:aa:5a:ad:
88:d3:e9:e8:0a:e2:76:bc:6f:16:01:63:16:37:d2:
03:a2:9d:f1:7b:76:b3:05:69:44:69:b5:57:e2:fb:
df:54:ce:03:b9:a7:d4:fe:5b:23:8c:43:f5:61:9b:
f6:7a:a1:07:c8:8f:00:e9:67:8e:19:4f:a0:ab:11:
ba:38:40:15:c4:b6:bf:dd:59:14:f8:74:a6:d1:7d:
9f:dc:cb:a2:8f:21:e7:a6:b7:08:ff:0f:a0:20:9b:
e8:da:f4:ad:cb:57:bd:b8:31:6f:91:d2:de:64:6c:
fa:31:ef:dd:ef:87:4f:63:d5:7f:a4:35:d1:5a:49:
5f:36:c5:92:25:4d:5b:de:c9:ab:01:5a:32:b7:f6:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:BC:16:7A:4E:DA:39:12:85:08:D9:AC:E9:95:19:D3:DD:C4:34
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/ovi8FnpO2jkShQjZrOmVGdPdxDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.109.0/24
Signature Algorithm: sha256WithRSAEncryption
87:41:70:4a:82:1a:e1:bc:5c:17:41:d7:bc:15:7f:d5:9e:51:
db:b7:91:65:08:5f:3d:6f:f6:96:cf:c1:e8:8e:0b:30:77:9f:
57:24:e2:0c:6a:b1:d2:3b:f4:35:63:b3:8e:f4:3c:f8:f6:5a:
03:71:28:45:36:00:4b:6f:e7:b8:e8:0f:88:ad:fb:1f:ac:66:
ee:b0:e0:60:4c:5c:5b:b2:94:94:c6:fd:57:97:21:15:a0:d8:
ce:ca:4d:08:b0:66:e3:c2:be:f9:09:8e:61:b3:6d:5f:47:51:
1e:c9:42:32:9a:ad:36:91:fb:a2:78:22:9c:e7:58:cd:7d:be:
06:bc:c1:2c:cd:85:58:7c:42:65:6f:84:76:60:13:5e:75:c6:
9d:9f:71:b3:25:da:b1:b8:af:34:55:ca:eb:75:3d:23:b6:57:
42:68:68:a8:f0:f1:63:90:a7:80:ae:c9:1c:5e:50:92:b0:1d:
2a:a2:8d:f2:7d:f1:d8:8c:35:a9:2d:25:cb:5f:55:f8:c3:75:
1a:37:df:1c:04:12:29:52:a2:76:6b:54:d0:1f:35:5a:9f:6b:
d0:3a:82:a9:b9:84:fe:84:86:20:e7:07:c8:c4:39:fd:6c:fd:
26:c0:92:dc:55:b9:60:8a:ca:b4:51:cb:fe:1e:26:01:45:17:
7a:6a:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:03 2025 by rpki-client