Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/O49fEEmdduEDlmHjywBTe4hbUrI.roa
File: O49fEEmdduEDlmHjywBTe4hbUrI.roa (raw, json)
Hash identifier: QGPcl2jLSGRNH/NTf0tO+RhE6wtLBqqp92bw06oxNfU=
Subject key identifier: 3B:8F:5F:10:49:9D:76:E1:03:96:61:E3:CB:00:53:7B:88:5B:52:B2
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E0E6768665E1CE55B6228A6B2DF04
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/O49fEEmdduEDlmHjywBTe4hbUrI.roa
Signing time: Wed 01 Jan 2025 15:48:42 +0000
ROA not before: Wed 01 Jan 2025 15:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32875
IP address blocks: 109.166.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:0e:67:68:66:5e:1c:e5:5b:62:28:a6:b2:df:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b8f5f10499d76e1039661e3cb00537b885b52b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:cb:67:af:f1:7b:fe:36:95:c7:f1:c5:aa:
e0:45:f6:37:8c:c7:cf:d4:c5:a7:f4:2e:20:7c:d3:
df:ee:79:34:61:a0:43:e2:a7:17:98:4b:03:4d:05:
e3:ce:98:bb:41:e4:0b:9f:81:1c:a2:5b:55:49:a0:
bf:04:8d:55:47:63:c9:7e:0f:c2:10:5d:75:39:3f:
b4:e2:08:46:dd:6d:82:d0:64:5c:51:25:71:92:10:
40:18:18:2e:eb:0f:ff:00:d6:49:7a:97:4a:ff:98:
df:ab:16:0f:60:96:66:db:9a:a8:e9:29:6a:e8:a9:
5c:ce:cf:e4:2e:9d:0f:2e:4e:b6:2c:01:2c:5b:94:
4e:75:96:58:f5:e8:79:51:3e:e4:3e:fb:99:d7:06:
88:97:fd:d2:df:36:99:e6:07:10:0e:d9:8b:6e:a4:
c7:00:3b:24:b0:e7:c4:e4:15:b4:7f:79:f0:e1:34:
e1:b1:4f:75:94:27:11:af:1d:46:da:2a:3e:65:0c:
2c:a3:88:b1:7a:ca:33:45:5a:dc:3e:86:7d:0e:f8:
25:a5:3b:66:fe:ab:8b:d0:8a:37:ef:ab:78:86:71:
2d:0d:50:aa:06:e0:80:8d:b4:b3:84:3a:93:52:fd:
f4:85:16:a2:46:25:e0:6f:f7:92:37:be:28:18:f4:
7d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8F:5F:10:49:9D:76:E1:03:96:61:E3:CB:00:53:7B:88:5B:52:B2
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/O49fEEmdduEDlmHjywBTe4hbUrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.166.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:bd:f4:8f:c4:a5:27:58:ce:3c:07:47:e0:a7:a2:bf:92:a3:
69:91:e8:5f:bc:ae:52:54:02:f7:4f:01:a1:ce:73:3f:38:95:
6b:b0:10:ad:c3:09:0d:1f:0c:39:39:55:8f:a8:4a:53:60:1a:
7a:dc:62:f6:5a:47:42:32:86:20:ff:15:7c:3c:1b:ee:08:89:
bf:2e:8e:8d:22:6b:0c:9e:55:d1:73:f0:c7:ef:76:38:20:34:
9f:dc:4e:04:f6:bf:c1:05:53:35:46:b6:cb:3d:e0:6a:f8:2a:
1b:2c:fd:b7:80:bd:16:37:de:24:24:85:9b:ac:87:5b:0d:60:
ca:8b:3c:38:32:11:87:07:ce:0d:16:c8:67:12:8b:61:dd:4f:
79:f4:d9:98:bb:2a:9f:b4:12:98:e5:a2:0e:9d:8b:20:d1:9f:
86:7a:9d:8c:aa:f5:56:84:3f:87:c8:fe:d9:8c:26:8d:99:c3:
08:a5:67:e5:d6:bf:96:5e:35:50:35:28:7e:07:04:38:cd:21:
dd:5f:d3:e5:c1:b3:3d:5d:6e:16:03:5d:e0:de:3b:5f:41:65:
b3:c9:4b:f3:09:ca:df:fa:e3:77:28:af:6b:b7:a7:3a:52:74:
aa:b7:57:b9:e5:26:f0:4f:db:05:2b:fb:30:74:87:7a:0f:90:
34:39:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:11:41 2025 by rpki-client