Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/oEDva5HidP8r6cb7WhOb-gmJPJE.roa
File: oEDva5HidP8r6cb7WhOb-gmJPJE.roa (raw, json)
Hash identifier: 9TsxQ3hcN0p2uqMr17StMIl3OkBXg7z6xNl42bQ2Vmw=
Subject key identifier: A0:40:EF:6B:91:E2:74:FF:2B:E9:C6:FB:5A:13:9B:FA:09:89:3C:91
Certificate issuer: /CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Certificate serial: 0194228D63BF29AA67FCA136F864099FFF5C
Authority key identifier: 67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/oEDva5HidP8r6cb7WhOb-gmJPJE.roa
Signing time: Wed 01 Jan 2025 15:47:59 +0000
ROA not before: Wed 01 Jan 2025 15:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43545
IP address blocks: 85.202.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:63:bf:29:aa:67:fc:a1:36:f8:64:09:9f:ff:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=674a61a8a9c97c03cdebe05f82558e51dbf90821
Validity
Not Before: Jan 1 15:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a040ef6b91e274ff2be9c6fb5a139bfa09893c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:cd:e1:38:d8:09:5d:60:ee:4c:64:ce:55:
24:a0:3f:74:45:0b:f2:c4:12:89:1e:71:f0:d4:54:
67:fd:a2:f9:88:49:48:ea:f0:9b:9b:80:9d:e7:be:
04:50:66:54:fb:23:48:45:c0:7b:72:96:7f:12:6f:
c8:61:a1:87:7f:95:3b:32:e6:87:7c:97:b5:f0:08:
ef:4f:11:45:0e:67:90:78:96:e2:5e:a6:c1:05:72:
71:be:07:6a:d6:6e:15:97:0e:94:92:af:57:bb:b7:
d7:96:86:d8:42:95:32:87:9a:42:4c:79:cd:ee:2e:
db:8d:05:f4:12:d9:5b:03:ac:ef:9f:46:d2:f0:5c:
19:d6:4c:fd:52:dd:55:cd:1f:0d:f7:1d:bd:28:87:
1c:42:1e:6e:2d:e1:89:18:68:17:3b:a6:55:9b:39:
c4:ca:a7:e8:89:92:39:fc:66:99:3d:51:79:96:08:
74:87:f9:6c:bb:b7:b6:94:73:b8:c0:1c:f8:72:cb:
d2:d8:c9:2f:83:c3:ed:2b:17:6d:46:c3:ad:c4:59:
67:0a:a3:ab:ce:a2:6e:4b:d9:b1:97:99:ba:80:16:
50:c8:a7:fb:f8:d3:59:fd:e2:46:79:cb:83:89:24:
e8:b5:30:a7:b0:32:b3:dc:d3:11:d1:6d:ec:29:91:
f7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:EF:6B:91:E2:74:FF:2B:E9:C6:FB:5A:13:9B:FA:09:89:3C:91
X509v3 Authority Key Identifier:
keyid:67:4A:61:A8:A9:C9:7C:03:CD:EB:E0:5F:82:55:8E:51:DB:F9:08:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0phqKnJfAPN6-BfglWOUdv5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/oEDva5HidP8r6cb7WhOb-gmJPJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/72488a-035d-4931-8dfb-4c86cbe03610/1/Z0phqKnJfAPN6-BfglWOUdv5CCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.196.0/22
Signature Algorithm: sha256WithRSAEncryption
68:75:c9:dc:cb:f2:d4:d6:5e:6f:78:55:f8:3a:8a:27:7c:11:
e1:b9:ed:25:32:80:1c:74:27:84:85:d6:cf:d6:86:12:1e:58:
fd:5e:a3:33:d6:5d:10:72:4a:68:f4:17:e4:b7:b1:ae:90:27:
62:20:c9:01:2c:f0:0c:43:1f:92:4c:8e:d9:e9:3c:b7:84:93:
fa:42:dc:82:23:e9:bd:68:25:13:86:45:8c:9d:d0:bf:76:3e:
de:4f:a1:4e:94:b7:d1:d0:67:5f:21:05:82:87:a0:dd:6d:d0:
bb:21:3b:79:eb:c1:b4:13:87:90:1a:8c:42:03:07:cf:34:eb:
5f:3b:cc:c8:fe:b7:c9:cf:d7:f4:cc:13:02:ac:5b:4e:e9:fa:
23:f0:c2:e1:c4:86:e9:37:2c:35:9b:ad:45:f5:13:eb:5c:12:
0b:06:35:2c:02:c5:05:90:26:37:2c:95:63:57:9f:7a:1d:78:
41:93:90:d7:5b:29:e2:0e:f6:37:48:3e:69:db:b5:a8:a3:9d:
60:68:7f:2a:76:2c:51:24:ef:58:17:fc:10:e9:ae:99:03:ae:
d1:2f:be:47:ef:fd:ca:99:24:89:f0:18:66:fb:dc:ac:c0:ba:
68:3a:86:54:7d:1c:4a:e6:ab:fc:84:78:61:41:4d:1d:5a:d7:
c5:c8:56:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:05:19 2025 by rpki-client