Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/ovmdpHkmxMF66EEddKGFlc2H0gg.roa
File: ovmdpHkmxMF66EEddKGFlc2H0gg.roa (raw, json)
Hash identifier: EUcHFqazaZZxE+4WNuY1RVtJshsow0Yiv/MTq1HtYWE=
Subject key identifier: A2:F9:9D:A4:79:26:C4:C1:7A:E8:41:1D:74:A1:85:95:CD:87:D2:08
Certificate issuer: /CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Certificate serial: 019427B52496E051641A991BE1C4AFEEDDDF
Authority key identifier: 7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/ovmdpHkmxMF66EEddKGFlc2H0gg.roa
Signing time: Thu 02 Jan 2025 15:49:30 +0000
ROA not before: Thu 02 Jan 2025 15:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 192.112.151.0/24 maxlen: 24
192.112.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:24:96:e0:51:64:1a:99:1b:e1:c4:af:ee:dd:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bd6cdc6fd332d88be2ab091ece74d7624d359f1
Validity
Not Before: Jan 2 15:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2f99da47926c4c17ae8411d74a18595cd87d208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c7:cc:fb:40:99:b4:c7:b0:cc:01:63:1e:91:
06:5d:71:15:13:00:b7:ef:00:fb:f2:18:22:84:69:
49:07:82:46:d4:a0:9c:e3:b4:9c:d5:4f:9e:ad:00:
b5:d4:84:27:f1:8a:a0:f7:26:b2:bc:ce:5f:3f:2e:
03:5a:c8:e8:4a:dd:3b:41:41:23:94:06:74:d9:1f:
bd:c0:bc:19:83:6e:1d:43:62:ea:41:a8:de:3e:a1:
55:7e:ed:36:3b:79:6b:27:e8:07:e3:30:22:f7:af:
0b:77:36:ea:da:22:d0:1a:64:f1:2d:63:e6:6a:57:
01:01:b2:84:08:c7:3b:ac:a8:08:39:d4:bd:7c:6d:
20:2f:eb:f3:8e:b0:e4:1b:6e:cf:47:ca:65:06:15:
0b:d8:a4:91:b2:e2:b1:89:1c:5d:29:04:90:3f:6d:
39:5a:25:cd:97:19:bd:b3:c2:a1:3d:77:63:96:70:
1a:c7:04:42:82:ad:3f:51:e1:29:11:3e:2e:42:d7:
c8:aa:cd:99:6e:32:8c:b2:43:b3:b3:3a:fd:34:84:
bb:94:ed:59:cd:00:04:7f:b2:15:ed:27:2f:82:03:
1a:04:fd:75:15:03:09:96:4e:96:85:a6:31:80:bf:
a5:1d:9d:23:5e:f6:80:c5:fb:40:75:57:34:6c:1e:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F9:9D:A4:79:26:C4:C1:7A:E8:41:1D:74:A1:85:95:CD:87:D2:08
X509v3 Authority Key Identifier:
keyid:7B:D6:CD:C6:FD:33:2D:88:BE:2A:B0:91:EC:E7:4D:76:24:D3:59:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9bNxv0zLYi-KrCR7OdNdiTTWfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/ovmdpHkmxMF66EEddKGFlc2H0gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/29f386-4247-4e6a-9bf1-61c4a256f9ad/1/e9bNxv0zLYi-KrCR7OdNdiTTWfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.112.151.0/24
192.112.178.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:14:ab:be:24:60:f6:7a:b2:d9:8a:ba:af:87:91:25:6b:0e:
3e:5d:e8:c0:fd:10:c7:eb:a1:9f:24:d5:c7:3e:07:53:b9:77:
69:d6:a6:09:98:be:bf:e1:54:d8:c2:b3:31:13:63:93:84:5c:
2b:10:6a:3f:92:fe:85:03:b5:fb:5b:ae:20:d9:51:d5:22:91:
82:0b:d2:61:85:1c:12:66:b6:7a:64:c4:2e:13:43:5b:6b:29:
7e:c4:7d:dc:50:1d:47:90:6a:74:ce:99:f4:6a:8b:05:99:0e:
e5:7c:63:60:a2:c4:00:0a:81:1a:9e:39:98:32:c5:06:ac:02:
db:7c:d8:a7:d4:fa:0c:b7:97:96:d2:c0:d1:1e:0d:26:18:c2:
87:26:3e:93:0b:18:c8:1b:96:12:3d:4a:97:f2:4a:1a:a7:80:
cc:19:40:3e:e1:9d:ea:cd:9d:e6:8c:b3:9a:45:70:3a:15:54:
51:1e:6d:d6:34:3c:4f:09:7a:08:30:f4:43:20:43:4f:9c:cb:
5c:cb:2f:eb:07:dc:3f:30:3e:61:3f:96:fd:13:f5:00:c9:67:
aa:b9:03:45:ba:22:2a:55:ec:90:fb:e9:09:2c:ee:a4:fe:60:
32:e7:3a:98:64:35:16:d3:1e:bd:8e:36:b4:f0:c9:cb:82:9f:
2c:8d:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:13 2025 by rpki-client