Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/O9iKTZs-NSCx-2a4wz3hixLMrQo.roa
File: O9iKTZs-NSCx-2a4wz3hixLMrQo.roa (raw, json)
Hash identifier: 9kWdgObviNsf7fH09ytaVex94ijVjQzdPVkcYWojJN8=
Subject key identifier: 3B:D8:8A:4D:9B:3E:35:20:B1:FB:66:B8:C3:3D:E1:8B:12:CC:AD:0A
Certificate issuer: /CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Certificate serial: 01941FFA1116C5C604048DA56BD1DC495533
Authority key identifier: CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/O9iKTZs-NSCx-2a4wz3hixLMrQo.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35754
IP address blocks: 87.254.32.0/19 maxlen: 19
185.247.120.0/22 maxlen: 22
2a03:d500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:11:16:c5:c6:04:04:8d:a5:6b:d1:dc:49:55:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb0ca2291276d7d2a2f8a7050f4ba827fe910a1
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bd88a4d9b3e3520b1fb66b8c33de18b12ccad0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ac:ca:f5:e8:0f:77:7d:9e:e1:a3:2a:a4:1c:
60:bd:6e:70:bd:61:d4:6b:04:c4:e8:24:22:b8:d2:
fd:61:55:b2:cc:c7:34:3e:f3:4f:57:40:84:e2:8e:
16:b7:ab:db:65:9b:85:3d:f2:85:2e:7c:bc:11:1a:
dd:8e:af:31:d0:62:ab:f4:89:93:1d:08:79:47:d4:
5e:2f:82:52:92:2d:66:b9:d4:88:c4:f8:f4:29:59:
c8:9d:99:e1:65:6e:89:85:75:f0:42:9d:43:c8:ef:
74:32:42:59:b7:f8:ba:30:4f:e4:a6:97:b5:41:d6:
a0:1f:92:cf:11:74:9b:9a:1d:af:b5:4f:7e:aa:0a:
48:8f:81:a8:5e:6f:9e:c2:45:d5:a1:83:80:36:4d:
4f:77:cc:14:66:50:75:76:7e:f5:51:72:10:d6:e6:
fc:11:6f:07:55:fc:45:b6:a4:c2:3f:c8:ca:87:a0:
20:0f:b3:b5:cb:17:b1:b2:fe:a0:8a:4f:68:a9:0a:
31:94:d5:f4:05:7d:06:b1:db:31:4c:01:a4:99:b6:
9b:05:18:9c:8c:02:55:0b:56:cf:46:4d:0d:6d:8d:
48:d8:31:c9:ac:f6:0e:3d:51:be:10:ba:c9:0b:ed:
e5:bb:35:6e:f8:2e:eb:37:a0:42:17:9a:8d:af:a9:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D8:8A:4D:9B:3E:35:20:B1:FB:66:B8:C3:3D:E1:8B:12:CC:AD:0A
X509v3 Authority Key Identifier:
keyid:CC:B0:CA:22:91:27:6D:7D:2A:2F:8A:70:50:F4:BA:82:7F:E9:10:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLDKIpEnbX0qL4pwUPS6gn_pEKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/O9iKTZs-NSCx-2a4wz3hixLMrQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d38360-4d1f-422e-90ae-08b9e1101aa7/1/zLDKIpEnbX0qL4pwUPS6gn_pEKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.32.0/19
185.247.120.0/22
IPv6:
2a03:d500::/32
Signature Algorithm: sha256WithRSAEncryption
cc:73:6f:91:46:b3:10:c2:43:84:de:39:8b:36:d7:88:af:ce:
9f:31:38:e1:3a:8a:8f:bd:7b:f7:e8:39:62:ff:ba:13:f5:60:
d7:46:75:b9:f6:b0:94:22:30:c2:da:eb:11:61:90:e8:15:df:
7f:4f:93:00:e3:e1:88:99:55:a6:c4:73:f2:7e:35:fe:71:44:
ce:46:ed:eb:c0:4d:8b:18:f9:08:38:5f:a7:96:8e:c1:d0:d9:
7f:dd:7f:ff:42:fc:c7:28:90:a8:17:76:b3:69:8d:c6:d6:26:
9d:12:fc:ae:6c:53:4e:be:29:27:6c:a8:71:f3:35:71:e3:c0:
ce:9a:f5:fc:74:79:0e:fd:db:db:e0:e0:10:c8:e8:3b:a2:ee:
ab:ed:ab:2e:8e:2c:ab:8c:8f:b1:fb:7f:bd:58:51:60:c3:0e:
31:dd:a2:27:94:c0:5f:9a:10:ce:38:f7:6d:49:bb:27:60:a4:
0b:46:7e:f9:21:b0:43:f9:d1:0f:32:a3:b7:e1:94:44:62:04:
3a:e1:57:97:cd:ef:1e:a2:49:b8:11:b1:fc:a5:7f:f5:e7:a7:
65:6d:10:29:dc:1c:6f:ed:73:61:d3:67:7f:41:9c:b1:8f:19:
bc:ab:69:34:b1:bf:a4:80:77:74:25:5d:39:c1:d0:36:63:2f:
02:df:96:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:55 2025 by rpki-client