Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/OFotEhQS5D75BLXwwqIZG_YPaGM.roa
File: OFotEhQS5D75BLXwwqIZG_YPaGM.roa (raw, json)
Hash identifier: DFc7srYmWSrbDIWTrg0cPVEONFNYLjz8/fNoPyoYWxo=
Subject key identifier: 38:5A:2D:12:14:12:E4:3E:F9:04:B5:F0:C2:A2:19:1B:F6:0F:68:63
Certificate issuer: /CN=8968883765549991d7ff376126d58a909a14b8f1
Certificate serial: 01966D9EDEC6A577F07A875279F44F1E23FE
Authority key identifier: 89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/OFotEhQS5D75BLXwwqIZG_YPaGM.roa
Signing time: Fri 25 Apr 2025 15:44:10 +0000
ROA not before: Fri 25 Apr 2025 15:44:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52194
IP address blocks: 91.203.234.0/24 maxlen: 24
91.241.47.0/24 maxlen: 24
193.19.110.0/24 maxlen: 24
193.106.97.0/24 maxlen: 24
194.242.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6d:9e:de:c6:a5:77:f0:7a:87:52:79:f4:4f:1e:23:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8968883765549991d7ff376126d58a909a14b8f1
Validity
Not Before: Apr 25 15:44:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=385a2d121412e43ef904b5f0c2a2191bf60f6863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:2e:58:4e:06:ac:50:c3:a3:b1:54:37:11:
b1:48:58:7b:6f:f8:27:4f:ad:e2:32:4e:bb:34:e9:
3c:87:61:93:c5:8c:90:6a:17:00:67:f2:40:ee:4e:
af:e8:d8:5a:6f:fd:7d:28:3d:57:3a:64:f4:fe:d9:
6f:fd:9c:0b:3a:e1:da:ad:81:7c:95:9a:e0:8e:97:
a9:6c:8e:91:d5:36:35:43:66:06:8f:e9:68:72:71:
04:81:0c:ed:21:09:b8:82:d4:1e:90:02:43:9e:78:
20:ff:ee:e8:5a:32:92:ef:8e:97:84:39:73:c8:3a:
87:f8:46:c9:ab:5c:01:8c:7b:77:13:18:8c:03:bc:
50:74:45:16:01:b5:88:0c:8c:08:b9:49:87:cf:ca:
38:11:01:7b:50:e7:02:20:ef:37:6e:7b:6d:b9:2c:
6f:40:1f:48:fb:ff:68:05:a8:ce:93:27:fe:a8:56:
ad:6c:69:52:a3:6b:d8:cb:5a:46:69:fa:9f:d5:db:
87:e6:c2:5b:a4:b6:7c:f2:83:30:76:6c:fd:9c:d5:
97:20:f2:23:db:b3:26:1c:0d:f7:63:5e:f7:35:d8:
02:c5:ef:b5:d1:b8:89:d5:89:eb:13:cb:55:53:61:
2d:58:61:e5:43:16:36:6e:8b:0d:b8:5c:ed:52:5b:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5A:2D:12:14:12:E4:3E:F9:04:B5:F0:C2:A2:19:1B:F6:0F:68:63
X509v3 Authority Key Identifier:
keyid:89:68:88:37:65:54:99:91:D7:FF:37:61:26:D5:8A:90:9A:14:B8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWiIN2VUmZHX_zdhJtWKkJoUuPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/OFotEhQS5D75BLXwwqIZG_YPaGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c171d4-0672-414d-a02d-cd027a0681bd/1/iWiIN2VUmZHX_zdhJtWKkJoUuPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.234.0/24
91.241.47.0/24
193.19.110.0/24
193.106.97.0/24
194.242.26.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:bb:67:78:57:55:a8:78:b6:8a:6f:88:06:89:c9:93:cf:21:
ea:a4:2f:ae:85:ae:e5:e5:2d:3b:e4:77:be:f0:4e:ae:de:f7:
c4:cc:a9:47:04:35:b9:2c:d0:43:60:d4:ab:bb:98:b9:b5:b4:
44:07:a9:e5:50:1c:05:ec:d7:17:ce:98:bc:fa:9b:f4:c7:72:
65:dd:43:c3:c6:0b:91:11:d3:71:db:74:a8:d8:3f:b5:14:ae:
91:25:05:05:4c:15:30:99:d7:9f:a1:1e:0b:d3:b7:6e:f4:ea:
fa:17:dc:2e:4c:23:c6:80:52:c3:ae:f1:a3:57:42:c4:82:c8:
1b:cd:56:16:d6:87:80:05:4b:1a:72:6e:7b:26:60:a1:2d:61:
57:54:d9:87:dd:95:e5:31:52:74:cb:b8:40:97:6b:4c:de:82:
aa:a5:f2:d9:2f:0a:a9:19:95:da:eb:f8:f5:7a:f9:b4:56:14:
19:ee:5f:44:ae:86:cb:21:a3:ce:a7:d8:b1:33:00:c8:13:cc:
a3:8f:68:cc:5f:6e:54:44:f7:4e:9d:58:e1:97:df:12:78:cb:
e6:19:ba:51:e7:59:73:c1:0d:bd:ec:bf:43:c1:21:5a:e0:99:
d4:49:bf:e9:f0:58:b4:29:9d:f3:87:b0:5b:c3:66:d4:f9:31:
c6:f4:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:34:13 2025 by rpki-client