Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/OPHGk6u2qSFcpqNXDoRynwkxRPg.roa
File: OPHGk6u2qSFcpqNXDoRynwkxRPg.roa (raw, json)
Hash identifier: tKvHMnELV5VNPCPmJyRYPHGYeZPGGn54PcC8eCvYwUE=
Subject key identifier: 38:F1:C6:93:AB:B6:A9:21:5C:A6:A3:57:0E:84:72:9F:09:31:44:F8
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0194228E114778FF3976AD5FB5645D11D629
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/OPHGk6u2qSFcpqNXDoRynwkxRPg.roa
Signing time: Wed 01 Jan 2025 15:48:43 +0000
ROA not before: Wed 01 Jan 2025 15:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56887
IP address blocks: 31.131.44.0/23 maxlen: 24
176.113.104.0/22 maxlen: 22
176.113.108.0/22 maxlen: 22
176.124.72.0/22 maxlen: 22
176.124.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:11:47:78:ff:39:76:ad:5f:b5:64:5d:11:d6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38f1c693abb6a9215ca6a3570e84729f093144f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:18:65:0a:b4:08:ea:c5:c5:33:72:75:d9:
31:5f:3f:1a:f8:ee:4d:26:8c:9e:8e:0b:db:5b:95:
be:c5:13:eb:e4:52:c2:ef:b8:cc:46:6a:b3:99:d5:
7a:fd:94:9c:59:80:71:a4:cf:84:0f:a7:5b:71:36:
f4:24:63:56:1e:ce:62:84:d7:e3:2f:48:f5:78:e0:
03:fc:f1:37:e9:b8:bd:04:e3:4a:a1:a4:b2:1a:af:
6f:7b:9e:e6:b7:0d:86:7d:f7:9b:18:51:d3:e6:30:
f5:d8:06:df:cc:85:97:8e:ee:93:b3:1f:00:44:4b:
7d:78:d8:b6:1a:71:ef:96:62:69:47:8b:00:ef:da:
c9:20:a8:a1:07:8e:30:4c:03:b8:ad:fa:dd:a0:10:
b7:ff:70:ff:a6:25:ca:87:67:5e:fd:31:a7:b4:3d:
cc:03:75:10:ca:ba:16:09:cd:ac:a3:6a:c2:d7:3f:
f1:b9:c0:37:83:a3:72:ab:72:45:1e:b4:ff:54:10:
5e:ab:6c:9c:e6:d2:ab:38:56:f4:da:79:35:c3:a9:
c5:80:d7:62:9f:65:e8:6d:80:25:7d:fe:bb:26:6b:
db:3a:3e:1e:73:1b:0e:91:c5:9c:52:b3:7f:68:8d:
f7:f9:5b:12:b7:d0:94:51:0c:bb:c8:8c:f4:c7:46:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F1:C6:93:AB:B6:A9:21:5C:A6:A3:57:0E:84:72:9F:09:31:44:F8
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/OPHGk6u2qSFcpqNXDoRynwkxRPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.131.44.0/23
176.113.104.0/21
176.124.72.0/21
Signature Algorithm: sha256WithRSAEncryption
43:a4:e7:d9:e1:58:83:09:f2:2a:8a:c5:86:44:88:99:09:4a:
05:0c:3b:1b:b7:6f:03:08:18:4b:b4:d4:83:3c:83:54:05:67:
ad:5f:02:13:a7:71:bd:1c:d5:f8:aa:98:5c:34:24:ab:da:a2:
2a:30:2d:c1:0a:bd:74:8e:04:41:ca:dd:e2:df:af:71:12:a5:
5f:a5:42:9b:2f:73:4b:04:77:bf:57:5f:a5:73:a9:1b:f1:20:
d4:01:9d:dd:ba:2a:c9:ff:4b:03:0c:c3:5a:f8:78:53:f6:57:
2f:01:9d:ca:83:9e:9a:97:90:51:72:c7:3d:a1:6f:a0:10:89:
a8:3b:bc:da:65:03:f2:b6:65:36:d0:c7:86:9b:a0:51:9c:7c:
59:cd:26:e3:ce:6e:d7:55:d5:83:05:f8:e7:ef:50:80:52:75:
a5:e2:65:13:65:f7:82:21:86:ef:ad:6a:b2:af:c7:1d:01:39:
43:74:cb:5e:7b:47:d9:6e:7d:05:d1:ec:20:bc:87:ec:f2:93:
d9:07:8e:39:b5:7d:9f:25:35:95:5f:82:8c:3b:f0:63:52:11:
1b:4a:4f:ee:46:a8:d5:9d:e5:40:6b:a3:b6:93:71:c0:c9:56:
90:e1:50:50:7c:9d:f9:58:58:ea:87:1d:8d:1d:9b:d3:f9:ce:
b4:44:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:24:04 2025 by rpki-client