Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa
File: O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa (raw, json)
Hash identifier: EUscQTnmBwchHhwFPgGdViuEre/xVGQ6ryyvSQoTdUA=
Subject key identifier: 3B:C0:3E:9F:F6:09:DD:A1:A8:C7:8F:5E:07:39:BB:43:CC:61:5D:D4
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 01941F8C15150EAC543406275619B94E2646
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25540
IP address blocks: 185.52.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:15:15:0e:ac:54:34:06:27:56:19:b9:4e:26:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bc03e9ff609dda1a8c78f5e0739bb43cc615dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:07:73:27:67:50:23:c6:f8:c5:84:be:4a:1d:
51:0b:2a:a9:77:c2:38:a1:b5:32:c9:cb:c7:95:1f:
fd:42:ca:8f:ad:e2:b7:75:5a:32:25:05:c3:45:00:
19:6e:79:09:d6:3c:b7:2a:fe:df:00:ca:c8:54:bf:
49:d7:8b:46:c0:5e:7f:ec:1b:90:12:60:4d:f4:6d:
b1:2c:36:05:12:ea:8d:84:0c:50:e8:11:16:14:9f:
98:5b:6c:bd:81:4a:83:9b:aa:0f:ca:38:52:5f:c2:
e5:a8:2f:77:91:88:a4:c3:91:11:01:03:2e:f6:e1:
7a:d2:25:04:27:ed:d1:db:d7:ef:b5:89:f3:94:7d:
76:e0:88:3d:2d:54:aa:a5:d3:00:6a:80:48:24:d9:
4a:d0:31:32:46:d7:e5:06:15:bd:8d:16:c9:bf:ac:
f6:04:1f:3f:b9:ad:6b:bd:9b:a1:95:c1:df:f5:c4:
c1:8c:86:1d:03:37:88:05:ad:1f:69:be:89:63:4a:
4a:ca:2e:25:2b:6d:21:18:64:3e:15:4e:f7:64:de:
2b:ff:cc:43:15:1f:a4:23:cd:af:7c:77:d7:3c:f9:
42:7e:c8:58:4f:d4:d0:cb:fb:10:2b:72:30:d5:19:
5b:57:99:d0:0b:67:5f:72:67:30:2d:91:7a:68:52:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C0:3E:9F:F6:09:DD:A1:A8:C7:8F:5E:07:39:BB:43:CC:61:5D:D4
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.84.0/22
Signature Algorithm: sha256WithRSAEncryption
19:cf:1c:ae:63:97:2f:9b:37:3d:fb:15:31:7c:51:71:79:b5:
eb:e6:ae:38:fc:78:4d:7e:7c:01:5f:73:ff:50:a0:a2:15:63:
c3:ed:ea:04:85:4d:c6:03:54:8f:00:bb:03:c1:f2:46:06:4b:
e7:ec:3f:28:2e:6e:14:5a:7c:45:c0:56:f2:00:db:88:29:b8:
b1:9e:89:a7:bf:6a:79:37:c0:eb:81:c7:17:bc:4b:76:1a:98:
72:a9:5a:f5:84:d9:dd:47:7c:c5:dd:1d:eb:14:8f:14:78:d6:
3e:e0:5f:de:ea:79:09:39:bf:a1:cd:2c:36:9e:5d:3d:5b:f1:
f2:a9:44:02:ad:68:53:51:d9:6f:03:8b:25:3a:c1:68:90:d6:
15:b5:83:b3:36:75:80:99:4a:54:0c:c6:5c:64:f2:7e:b2:29:
f7:e5:c6:d2:2f:67:f2:6c:bf:0b:4b:4d:18:c4:6f:cb:97:89:
c8:a6:ce:da:e0:34:fd:ce:68:34:5e:80:8e:b3:b9:01:4d:f6:
79:3b:94:6e:34:5f:f5:7e:6b:77:72:9c:27:80:ab:0d:41:32:
76:11:b5:6b:e0:98:a7:0e:ac:d2:2f:4d:bb:bc:41:67:c0:2f:
8c:67:72:48:72:7a:f4:8c:6d:54:0c:98:b7:5a:36:e0:71:a9:
67:00:0e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:32 2025 by rpki-client