Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/odqokcojUr9yxkWAb7GrIB85gu4.roa
File: odqokcojUr9yxkWAb7GrIB85gu4.roa (raw, json)
Hash identifier: Om0/D88pk7hA9ZrAEiw9hB11xnW6KFgos1pPe55BWW4=
Subject key identifier: A1:DA:A8:91:CA:23:52:BF:72:C6:45:80:6F:B1:AB:20:1F:39:82:EE
Certificate issuer: /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial: 0194244484DE741B525623F4EBF2E8054312
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/odqokcojUr9yxkWAb7GrIB85gu4.roa
Signing time: Wed 01 Jan 2025 23:47:37 +0000
ROA not before: Wed 01 Jan 2025 23:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62005
IP address blocks: 83.97.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:84:de:74:1b:52:56:23:f4:eb:f2:e8:05:43:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
Validity
Not Before: Jan 1 23:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1daa891ca2352bf72c645806fb1ab201f3982ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2c:b8:9f:17:e1:36:a3:d1:29:3f:8e:85:36:
3e:0a:3f:7d:c3:fd:df:a0:9f:2c:14:a5:82:63:0f:
44:56:5c:f5:6f:5e:3d:e1:70:98:25:7e:98:bf:df:
cb:79:a8:05:7d:eb:b1:a7:e0:e1:b1:f7:35:3f:56:
c8:12:b7:8d:db:5b:f9:a4:2b:b8:61:fa:a8:10:91:
f8:c7:3f:4d:0c:45:96:a4:7d:8a:65:fc:b0:f9:66:
15:26:2b:17:64:76:8d:7c:82:d5:32:08:f5:d5:7c:
25:19:bc:65:40:51:28:15:ea:9d:01:4f:e3:7b:08:
15:70:76:fb:97:ad:ea:7f:a4:2a:5d:14:45:7b:43:
39:36:b0:cb:5d:92:cf:f0:af:e4:5a:b9:e3:a0:35:
2f:1d:d0:2f:14:0c:58:8d:d2:a5:18:ed:ae:50:9f:
3f:30:0a:42:c0:64:20:66:88:1c:58:a8:c0:da:8d:
4f:57:c3:f2:bb:74:dd:4f:33:ef:0d:07:fb:df:af:
12:be:6b:d5:15:ad:f2:14:39:dc:c2:8b:4e:37:89:
35:2e:b8:bd:27:8d:a6:54:3a:c1:cd:aa:3a:e0:1d:
74:e6:be:eb:26:b6:2d:59:bf:73:d1:5a:17:1a:23:
e0:93:02:0c:31:98:e7:4b:7a:5e:40:f8:a8:14:00:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DA:A8:91:CA:23:52:BF:72:C6:45:80:6F:B1:AB:20:1F:39:82:EE
X509v3 Authority Key Identifier:
keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/odqokcojUr9yxkWAb7GrIB85gu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.79.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:c4:06:80:3c:4a:bd:35:96:a1:1c:08:2c:de:46:a0:02:ba:
8d:82:81:0f:da:7a:b6:a9:20:ed:1f:8e:23:45:77:40:8c:0b:
5e:c4:1b:b7:9b:37:8d:ce:e1:ed:bd:a3:4c:2c:d9:ac:53:a6:
60:97:88:c2:62:e5:b2:b2:7a:4d:dd:f2:bb:66:fb:be:2c:37:
2b:10:af:f5:c9:f9:22:ce:78:2f:8f:d4:57:a0:89:fb:92:db:
48:57:d8:54:75:9a:e0:0d:f1:da:4b:05:6e:fd:8e:28:9c:84:
93:29:54:f2:14:cf:a4:f7:d0:71:43:33:5d:38:98:b5:94:10:
1d:88:0d:86:90:a2:3f:65:d1:2c:65:ab:bb:58:67:8d:8d:a7:
b6:b4:04:56:f5:91:f9:36:8e:16:aa:5d:33:b1:b9:58:2f:3e:
75:97:8a:d5:06:86:0e:f1:bb:b1:7c:7b:b5:ab:51:ee:e6:2f:
56:5b:29:31:b6:e8:df:c8:dd:53:92:d8:7f:9c:2b:ca:b6:01:
d6:43:c7:8f:5f:90:aa:f0:7b:5d:62:41:88:a7:99:1e:cb:ba:
aa:f9:c4:a2:56:76:dd:17:2d:e6:96:b3:79:bf:0a:2c:74:11:
9b:47:59:ff:59:35:85:68:03:5d:19:32:d3:f2:5a:35:7c:12:
4f:11:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:57:27 2025 by rpki-client