Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa
File: Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa (raw, json)
Hash identifier: uBJLArWgkSjRK8aGJtgjmrvAPeBkh4zJ1gBYT+tPHh4=
Subject key identifier: 3A:3D:26:FF:C2:13:64:19:DB:E1:A1:05:81:8A:10:A7:7E:AA:67:1F
Certificate issuer: /CN=cf2c30f34493c452a173e4de0c462c83a711c338
Certificate serial: 019422200E244FF3002FEF7A4D5042D6721C
Authority key identifier: CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201664
IP address blocks: 91.108.190.0/24 maxlen: 24
91.215.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0e:24:4f:f3:00:2f:ef:7a:4d:50:42:d6:72:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c30f34493c452a173e4de0c462c83a711c338
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a3d26ffc2136419dbe1a105818a10a77eaa671f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0b:6d:62:1f:e3:88:50:31:cf:e0:41:12:22:
02:a4:19:d7:a0:4f:00:97:56:54:6e:e4:cd:ff:a5:
40:7f:be:56:d0:e1:3e:d9:85:84:40:b8:13:bf:9a:
65:1f:3c:14:aa:4b:7a:94:24:ee:58:d1:27:5a:77:
14:67:9e:91:69:48:c1:db:07:a3:9c:de:cd:b2:24:
23:14:4a:16:c8:88:79:46:19:78:d8:6b:e3:a5:69:
47:e5:41:c9:c1:60:60:2a:a6:3a:17:61:d7:98:c1:
46:fe:44:da:a4:9d:28:1e:86:6b:0b:69:68:82:02:
f1:90:6f:6d:f4:63:10:53:50:6b:32:b0:15:66:92:
0e:25:9a:53:f6:9d:03:eb:17:e9:3a:7f:9e:47:27:
3c:f4:80:00:f5:da:cb:34:0d:55:92:16:83:9b:d0:
42:e1:42:e0:b2:ee:2f:51:8d:fa:2b:84:9d:23:22:
1e:1a:ad:81:ec:5a:d7:4b:83:d3:52:eb:f5:c3:75:
52:37:c3:33:cd:d9:25:37:09:86:87:d8:99:3d:39:
39:12:8b:b5:35:18:66:f2:eb:65:0b:98:5d:53:ca:
bc:47:12:54:ef:37:21:bd:70:89:49:53:bd:b7:aa:
78:a6:da:97:d8:e1:a3:ee:46:6b:24:23:dd:52:81:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3D:26:FF:C2:13:64:19:DB:E1:A1:05:81:8A:10:A7:7E:AA:67:1F
X509v3 Authority Key Identifier:
keyid:CF:2C:30:F3:44:93:C4:52:A1:73:E4:DE:0C:46:2C:83:A7:11:C3:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyww80STxFKhc-TeDEYsg6cRwzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/Oj0m_8ITZBnb4aEFgYoQp36qZx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6f6758-c233-4ac0-99b0-5a922a62c571/1/zyww80STxFKhc-TeDEYsg6cRwzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.190.0/24
91.215.86.0/24
Signature Algorithm: sha256WithRSAEncryption
87:36:8c:7f:ff:2c:ff:92:87:7a:00:17:06:d1:29:c3:3d:ea:
21:53:8d:e0:94:81:22:c1:14:83:92:cc:b4:c1:c8:2f:66:6f:
3e:67:29:de:3d:7a:25:a8:5d:45:e1:62:d8:21:d6:ef:c0:37:
e4:22:f7:07:7c:23:0f:b6:eb:8f:b7:8e:cd:fd:aa:2a:fa:ec:
0e:99:4f:cc:b5:b9:9c:f2:88:38:e1:a5:57:c4:4e:f8:c8:a4:
3d:8d:1a:de:6d:25:56:73:1f:e9:3a:0a:11:4c:0b:5a:50:02:
c1:1f:84:0b:b6:c7:26:02:b1:7e:f9:11:1e:a2:fe:37:a7:34:
5b:8f:eb:1b:59:ab:e1:ec:f9:da:9a:31:d0:9e:8f:1c:cf:4c:
f2:dd:94:ad:87:0f:bf:01:6a:f3:96:df:11:38:8e:02:36:5a:
50:25:fd:c0:8b:aa:ca:76:35:3f:9d:97:e5:d3:1f:72:70:fb:
ec:f5:13:40:41:31:6d:7a:2c:61:19:70:ce:e0:42:22:89:e2:
c6:07:ef:5b:32:3b:ef:61:8e:7d:cb:28:4c:7c:c9:64:11:45:
88:b4:c0:c4:0b:f6:32:35:df:d5:23:09:64:d4:d4:86:0f:3b:
eb:31:1c:8f:9e:1c:ce:f2:cf:1a:74:7a:62:d6:79:89:da:dd:
a4:c2:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:52:54 2025 by rpki-client