Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/og6MrC5yBqZd-w_jdnPWOr9coG8.roa
File: og6MrC5yBqZd-w_jdnPWOr9coG8.roa (raw, json)
Hash identifier: H6FCr41wgfYRZuN4iXgiEuTmqTBZgur449ahw2ZWyrE=
Subject key identifier: A2:0E:8C:AC:2E:72:06:A6:5D:FB:0F:E3:76:73:D6:3A:BF:5C:A0:6F
Certificate issuer: /CN=5262505b488581c2ecd7582a34ece52632e3ef96
Certificate serial: 019423D6B9D86894B95B42059043CED9CDF9
Authority key identifier: 52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/og6MrC5yBqZd-w_jdnPWOr9coG8.roa
Signing time: Wed 01 Jan 2025 21:47:42 +0000
ROA not before: Wed 01 Jan 2025 21:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200780
IP address blocks: 91.233.66.0/24 maxlen: 24
185.62.224.0/22 maxlen: 22
185.217.200.0/22 maxlen: 22
2a0b:cbc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b9:d8:68:94:b9:5b:42:05:90:43:ce:d9:cd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5262505b488581c2ecd7582a34ece52632e3ef96
Validity
Not Before: Jan 1 21:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a20e8cac2e7206a65dfb0fe37673d63abf5ca06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:9c:18:4c:ad:4c:fe:c5:5d:4f:b2:ed:3c:
3c:e1:ac:ae:f9:84:7f:33:6c:96:db:f2:ee:7f:99:
ab:ba:a0:ea:c0:54:b3:29:eb:64:0e:2c:70:ef:56:
10:e0:36:a6:53:41:e6:23:d5:c3:1b:15:c6:7c:d2:
e5:96:04:93:e1:f7:63:9a:c0:23:26:c4:f0:3c:f5:
ec:2d:bf:56:c1:7f:6f:43:dd:f7:c2:b4:ae:f5:a8:
20:06:cb:37:65:64:b3:03:56:89:b4:ba:35:4c:40:
28:e2:d1:37:65:56:3b:4f:eb:ac:bc:d0:04:87:9c:
74:32:0f:b7:1d:b9:34:31:52:bb:c4:10:cf:58:f4:
a0:89:6d:a9:0b:4e:9e:b2:e1:2f:05:0b:be:c5:3d:
b9:42:30:f8:61:70:e9:aa:02:4c:f7:82:6e:ce:ae:
3f:2e:c5:f6:ef:e9:04:5a:8f:12:67:26:e8:d0:27:
0e:06:8e:be:7f:6d:06:59:54:e6:54:ab:b6:9c:b2:
27:0c:fa:3f:3e:d8:6c:d3:91:8b:e8:03:e7:8a:fe:
32:a8:61:ed:1e:c8:c1:8b:9e:ef:90:b3:2e:71:b1:
9a:57:a5:48:95:9a:f7:05:d9:4b:28:30:6b:d7:21:
3d:fc:75:66:f2:86:3a:46:f5:90:78:1a:d1:17:eb:
24:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0E:8C:AC:2E:72:06:A6:5D:FB:0F:E3:76:73:D6:3A:BF:5C:A0:6F
X509v3 Authority Key Identifier:
keyid:52:62:50:5B:48:85:81:C2:EC:D7:58:2A:34:EC:E5:26:32:E3:EF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmJQW0iFgcLs11gqNOzlJjLj75Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/og6MrC5yBqZd-w_jdnPWOr9coG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dfbaa2-4a27-4f3c-b9fc-fb01436a695f/1/UmJQW0iFgcLs11gqNOzlJjLj75Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.66.0/24
185.62.224.0/22
185.217.200.0/22
IPv6:
2a0b:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:d1:85:60:ef:79:13:93:88:17:dd:7b:eb:40:f9:6d:36:b6:
09:76:b8:1d:69:03:8c:b3:ec:aa:4c:b0:ca:3e:d0:5c:2c:ee:
83:3c:21:f2:ba:b2:e5:b4:b0:34:de:d8:ac:6b:e2:36:e7:60:
81:82:3f:4b:43:0c:96:7a:be:42:0f:94:3b:58:08:e1:7f:be:
9d:db:1b:ba:2d:78:a9:9a:f9:06:17:02:e6:81:6a:52:9a:85:
6c:90:cc:fe:84:17:df:63:e9:38:0e:95:c1:29:67:d3:bf:92:
87:d8:0f:06:79:10:5b:2a:01:99:b4:13:05:5f:5f:29:26:67:
d6:20:29:65:63:2d:0f:9d:db:48:f1:1e:5d:11:c2:59:20:ef:
02:9e:80:d9:8a:74:81:a9:b8:64:53:38:4f:22:b9:65:99:8a:
4b:73:ac:5c:b2:b1:d9:76:dd:d4:55:5b:bf:3f:76:20:5d:c6:
04:b2:20:4e:ec:c9:e1:c4:cc:09:e4:f8:6d:b4:9a:90:51:67:
7f:86:86:d4:e7:5a:2b:4d:10:ab:ae:82:43:57:6b:dd:bb:e2:
d4:92:ea:f4:c4:69:7f:73:de:5a:d7:a2:6c:a6:c3:88:7e:ab:
10:a3:e1:c1:e4:b5:d6:b6:f2:9f:d4:43:79:ac:a0:3b:c7:68:
b5:4d:2f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:52 2025 by rpki-client