Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa
File: cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa (raw, json)
Hash identifier: JkRxsdjY7+lZf5UIgBndJQlLU5QH74sbP9jgqmE3I8s=
Subject key identifier: 70:EB:DD:20:94:73:FC:D6:00:39:E7:CC:50:37:F9:88:AB:85:D4:0C
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0194221FCD3B7BBA706CDBFF272D87BC0CA4
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa
Signing time: Wed 01 Jan 2025 13:48:16 +0000
ROA not before: Wed 01 Jan 2025 13:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52194
IP address blocks: 194.176.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cd:3b:7b:ba:70:6c:db:ff:27:2d:87:bc:0c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70ebdd209473fcd60039e7cc5037f988ab85d40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7a:de:44:a9:ec:72:4b:81:82:46:5c:3f:e5:
fc:85:fe:71:bd:65:41:9f:25:86:36:16:e3:9a:1e:
e6:fe:36:29:fa:65:e8:a0:cd:52:f2:c9:dc:2c:f2:
f1:29:be:e3:1b:2f:3f:b5:0c:43:25:aa:6f:48:14:
0d:e2:3a:98:9d:be:34:e6:93:8b:6b:33:61:38:4c:
5b:ec:ab:27:cb:d6:ce:5f:93:aa:87:e3:56:4b:74:
a5:55:a0:f0:a5:f1:9d:06:bf:66:68:c5:09:3d:24:
c7:9d:33:f8:55:69:2f:9f:36:de:f7:74:52:a7:3e:
33:59:c1:7c:d8:3e:32:3c:0c:6f:31:a0:3a:a9:b1:
1b:6a:29:8c:19:64:5d:9b:1a:39:d8:2f:d1:97:6d:
32:d5:d5:68:e2:da:c2:72:8b:72:27:ea:8b:13:2c:
26:a9:3e:c9:31:c4:79:6e:c5:07:1d:fc:bf:81:22:
3c:3a:bb:b4:66:ef:50:4e:0a:5f:09:09:94:33:17:
d1:51:6e:7b:d5:bd:8a:85:9e:eb:93:79:a0:81:4f:
b4:fa:1f:43:b1:5c:ac:10:c3:00:1d:3e:6e:1a:0f:
5c:d8:e3:ea:bb:5d:43:26:ff:92:6a:e9:1f:8d:53:
ae:b5:d9:f0:6a:63:72:16:12:7a:5d:ba:0d:c7:09:
c0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EB:DD:20:94:73:FC:D6:00:39:E7:CC:50:37:F9:88:AB:85:D4:0C
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/cOvdIJRz_NYAOefMUDf5iKuF1Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.118.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ed:a0:ff:90:41:28:b6:f8:fa:71:af:0a:6c:89:f5:d4:c3:
1e:08:7b:68:1c:d8:fc:08:14:fa:92:dd:a0:6e:ad:b7:7b:0f:
26:e8:46:69:b2:77:37:34:01:97:6f:c9:22:9f:5d:1a:89:d0:
77:9b:2e:e3:ee:d4:7c:c8:69:50:55:ef:86:b1:8f:c9:9c:16:
87:db:d9:38:4e:43:4d:9d:d9:ae:4f:e4:b6:7c:d9:e6:fc:d4:
3d:e2:ac:df:d5:9b:3a:85:f2:db:af:7a:53:ce:aa:8c:f2:9c:
ed:5d:68:fa:2d:d8:78:97:39:3f:08:d7:71:52:a0:b9:d7:fc:
0d:be:5c:ab:31:bd:c2:02:5f:af:dc:db:1c:29:0e:eb:99:8e:
63:41:7a:7e:4c:8b:5c:ad:43:e4:73:2e:9f:77:f0:5b:b6:da:
5e:58:fc:84:a4:5f:1d:dd:7a:1f:9c:a1:12:dc:4b:71:e4:1a:
96:b3:aa:a3:8f:a1:4e:a8:c9:7b:d1:c6:a7:ef:8a:eb:98:48:
45:1c:d6:e4:2b:a2:11:f1:e5:9a:a8:31:a7:bc:f6:32:0a:2f:
cd:fb:87:de:49:3c:21:66:c3:60:d2:0b:2a:d6:44:ad:8f:87:
15:71:5a:e8:b3:19:a3:7a:2c:fd:55:df:7a:7b:be:54:22:ad:
b7:dd:67:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:27:37 2025 by rpki-client