Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa
File: o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa (raw, json)
Hash identifier: avmrJ2rsXtwjFy7tu4gv+fivfWYGTorP5jQUfY03fLE=
Subject key identifier: A3:D8:4C:0E:2F:95:AD:C5:08:E2:90:77:15:90:5A:FB:F8:C8:C2:77
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 019423D6F66AB69A92F9F57D635D0C39E728
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211668
IP address blocks: 80.249.132.0/24 maxlen: 24
2a10:b5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f6:6a:b6:9a:92:f9:f5:7d:63:5d:0c:39:e7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3d84c0e2f95adc508e2907715905afbf8c8c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:9d:95:80:df:03:99:f6:00:c1:a2:20:6a:
63:29:2c:eb:df:2a:e2:cf:7d:42:ec:8b:7c:51:b6:
6e:d4:48:1c:3d:58:05:ce:59:16:40:d8:04:22:40:
84:a2:99:8c:ea:32:2b:03:19:3d:32:6b:38:fa:d7:
83:7b:d0:67:63:11:b7:0f:0b:3d:88:11:1a:dc:a6:
a7:2d:0f:e9:a9:b7:69:f3:88:2c:8b:b7:55:90:e8:
7a:86:81:e8:f0:07:9b:1e:c9:c8:ae:42:59:d9:1b:
18:c5:34:fd:e3:1c:88:93:1a:fd:1e:b0:2c:c3:e0:
f2:8e:78:57:8d:7e:c7:61:93:a8:14:38:67:8d:fe:
c2:5b:68:8a:e5:6b:f6:13:af:10:a8:85:15:32:33:
66:49:12:04:55:dd:dd:92:0a:4d:e6:55:d9:b4:a4:
34:8c:d4:aa:c4:7b:29:cb:5a:a3:17:58:18:97:1a:
fb:79:7a:48:d8:73:e5:8d:f0:04:1b:3a:98:18:51:
e0:39:72:5b:98:50:64:e8:76:fc:f2:e1:52:b3:78:
2c:1a:1b:61:a2:0a:4b:4b:0b:f8:b6:c2:49:51:17:
6b:bf:47:aa:36:9b:35:b1:b3:76:8c:d3:53:51:00:
18:29:30:e1:31:f3:73:bf:fd:be:8c:ba:90:5a:5a:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:4C:0E:2F:95:AD:C5:08:E2:90:77:15:90:5A:FB:F8:C8:C2:77
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.132.0/24
IPv6:
2a10:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
15:32:a8:1b:13:9b:f0:cf:7e:98:67:e0:ab:54:93:a2:4a:55:
ee:9e:7c:7e:9b:98:ed:3c:28:2e:37:dc:23:09:10:b4:b9:23:
dc:ef:65:e7:e2:1b:aa:9b:24:15:5f:00:f2:49:f1:ab:f1:3b:
c8:0e:0d:58:c2:f7:71:69:ae:cd:0b:41:68:c2:77:1c:84:59:
dd:a5:a9:0e:27:a5:2e:c5:41:5d:86:c3:19:7e:f4:74:5a:e8:
16:fb:cd:d0:16:d3:cf:4f:a2:87:f0:7e:bc:ce:5a:28:96:1c:
dd:2f:f8:5f:26:b7:ea:a3:a5:04:ed:db:e2:4e:29:61:c1:33:
ab:74:a1:09:4d:5a:2e:ba:df:24:b0:d8:19:ef:94:31:4d:98:
8d:c5:e5:9b:23:55:65:9a:24:63:4a:c2:e8:7d:b5:4c:a2:49:
f3:16:2f:5e:5e:36:55:6f:d5:19:b8:de:be:6f:2f:ad:09:46:
04:8d:da:b6:74:24:fb:61:12:8f:cb:da:ee:ed:bf:5c:d7:40:
3d:92:5d:6a:b1:da:7f:e9:5b:7f:ff:a5:60:ad:34:d9:d5:c7:
ca:d5:69:79:6e:98:4c:32:77:f8:43:c0:3c:95:bb:27:fb:51:
34:62:31:95:3b:d2:81:e6:38:cb:22:1d:e0:f5:72:74:51:07:
e1:72:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:02:13 2025 by rpki-client