Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/3OPKqlzsdO_6FnnigdjEBtH5MGI.roa
File: 3OPKqlzsdO_6FnnigdjEBtH5MGI.roa (raw, json)
Hash identifier: TGXodn+4ZnMS0vB8YcYqILiualGqtvptFZ+aYltyIls=
Subject key identifier: DC:E3:CA:AA:5C:EC:74:EF:FA:16:79:E2:81:D8:C4:06:D1:F9:30:62
Certificate issuer: /CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Certificate serial: 01942747CD66F48CDB774CF5B553F3888CB7
Authority key identifier: C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/3OPKqlzsdO_6FnnigdjEBtH5MGI.roa
Signing time: Thu 02 Jan 2025 13:50:04 +0000
ROA not before: Thu 02 Jan 2025 13:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208101
IP address blocks: 194.5.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.mft
rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:cd:66:f4:8c:db:77:4c:f5:b5:53:f3:88:8c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f258ce203e04a33f4e90651153b259cffa3e88
Validity
Not Before: Jan 2 13:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dce3caaa5cec74effa1679e281d8c406d1f93062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:e1:bb:66:00:6c:ee:c1:6d:3f:76:18:2f:
ea:8a:1b:58:81:b2:48:f1:b0:bd:78:2e:d9:52:2f:
6b:f6:e0:02:f0:0d:10:f2:5e:5e:0e:39:65:21:5e:
9e:60:4b:bb:12:c3:19:cb:d6:71:56:0e:52:10:28:
18:20:7b:43:fc:a6:3b:e2:49:2e:0f:43:b4:9c:a0:
40:18:5a:70:7a:d5:db:04:f0:c3:96:ae:0d:43:d5:
c6:43:0f:ee:9f:de:7a:40:48:3c:1b:25:e1:bb:e5:
cb:69:c9:b8:7f:28:12:b7:fb:f9:7d:4c:71:67:ff:
86:18:c0:97:83:16:64:4b:15:e8:e2:f1:61:42:1b:
e6:c0:ee:6f:2c:b5:9a:52:fb:6a:35:dc:83:05:f0:
3b:94:49:93:00:89:fb:d9:c8:79:c3:6f:b3:10:46:
05:0a:54:20:76:19:d3:e8:8d:a2:95:fb:4f:06:e8:
fe:13:08:2a:9c:6c:fb:21:ec:d3:0c:37:a0:5a:82:
0a:fc:f1:51:8c:dc:df:6b:02:c5:fc:ec:d8:66:c9:
1d:bd:a7:4e:8e:6d:23:3e:23:10:55:3d:31:2d:48:
72:95:b0:2c:c3:33:92:9e:18:05:9f:74:74:7d:a2:
b7:f4:9c:75:75:ec:51:d9:cb:cf:87:2a:2f:1b:bb:
7a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:CA:AA:5C:EC:74:EF:FA:16:79:E2:81:D8:C4:06:D1:F9:30:62
X509v3 Authority Key Identifier:
keyid:C8:F2:58:CE:20:3E:04:A3:3F:4E:90:65:11:53:B2:59:CF:FA:3E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPJYziA-BKM_TpBlEVOyWc_6Pog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/3OPKqlzsdO_6FnnigdjEBtH5MGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/yPJYziA-BKM_TpBlEVOyWc_6Pog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.101.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ab:bb:0b:a6:97:f7:d1:3a:c3:87:79:09:be:f3:a6:78:ae:
01:f0:99:62:0c:78:94:cf:8d:82:fb:a5:29:4a:1c:05:e2:66:
2a:c9:b3:62:6d:d9:3a:52:69:1e:fe:7a:f0:15:60:20:e3:f4:
9e:81:f1:96:a2:b8:e1:04:28:cf:94:2c:cb:ac:90:e8:f5:10:
37:75:90:b6:a4:9d:1e:d2:5b:c3:af:a7:5e:ab:f1:c9:6f:76:
79:ec:ee:27:80:67:0e:4a:52:42:aa:54:cb:0c:87:f2:a9:a7:
93:b7:01:83:c9:50:e7:c6:43:5f:09:11:33:f7:de:06:79:32:
62:50:0b:e1:36:13:67:0b:d7:e5:39:46:cd:63:40:41:99:61:
5c:4f:f6:42:29:22:ef:f5:36:1e:24:2e:04:8b:6f:48:46:d7:
c1:97:d5:b8:f1:25:2f:ea:1b:cf:6c:e5:af:59:80:3d:b2:73:
61:78:00:7a:71:63:c5:e5:cb:fd:e0:a8:cd:52:7a:c2:37:bf:
de:ec:72:f0:9c:e0:87:cf:24:92:4c:aa:23:1d:67:7c:4a:a3:
ba:cf:29:42:97:3c:ed:04:7a:ba:54:30:e9:2d:f7:7c:ad:41:
15:fa:7c:7e:82:64:2b:07:ec:e0:15:71:b2:ea:3f:25:16:0f:
a8:ec:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:36 2025 by rpki-client