Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/o2E4ttWPfQC-cPA4svu1knmUb_c.roa
File: o2E4ttWPfQC-cPA4svu1knmUb_c.roa (raw, json)
Hash identifier: 4OBZvieTj75Jx6ZTu48TpnKGASFwYcwyT4zeanyRqGQ=
Subject key identifier: A3:61:38:B6:D5:8F:7D:00:BE:70:F0:38:B2:FB:B5:92:79:94:6F:F7
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0196A67902D3CD7893969C62C158A07A8B1C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/o2E4ttWPfQC-cPA4svu1knmUb_c.roa
Signing time: Tue 06 May 2025 16:41:10 +0000
ROA not before: Tue 06 May 2025 16:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.32.7.0/24 maxlen: 24
84.32.8.0/24 maxlen: 24
84.32.20.0/22 maxlen: 24
84.32.46.0/24 maxlen: 24
84.32.47.0/24 maxlen: 24
84.32.64.0/24 maxlen: 24
84.32.104.0/24 maxlen: 24
84.32.148.0/23 maxlen: 24
84.32.150.0/23 maxlen: 24
84.32.174.0/23 maxlen: 24
84.32.214.0/23 maxlen: 24
84.32.217.0/24 maxlen: 24
84.32.223.0/24 maxlen: 24
84.32.230.0/24 maxlen: 24
84.32.244.0/23 maxlen: 24
84.32.246.0/23 maxlen: 24
88.216.22.0/23 maxlen: 24
88.216.44.0/24 maxlen: 24
88.216.45.0/24 maxlen: 24
88.216.66.0/23 maxlen: 24
88.216.93.0/24 maxlen: 24
88.216.127.0/24 maxlen: 24
88.216.130.0/23 maxlen: 24
88.216.134.0/23 maxlen: 24
88.216.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:79:02:d3:cd:78:93:96:9c:62:c1:58:a0:7a:8b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 6 16:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a36138b6d58f7d00be70f038b2fbb59279946ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:a1:3b:66:0d:9d:25:63:88:a3:33:57:c1:
15:c1:7e:c7:e7:fc:0b:e8:9c:db:b0:1a:9c:cc:b9:
78:cb:64:65:fb:37:47:63:a9:c5:51:fc:4f:8f:1d:
cc:41:f9:69:b6:77:96:bf:7a:c0:ca:c0:af:c2:7a:
f7:14:8e:1b:4d:0c:95:2e:42:e9:13:dc:d6:61:d5:
95:5c:0f:4a:58:33:a8:2a:11:77:db:a1:7e:87:0b:
29:d3:7e:87:05:12:7e:e5:9e:f8:2e:f9:eb:9c:1c:
65:dc:65:7c:44:4e:b9:3f:17:89:23:3e:36:0c:e7:
38:19:1e:11:bf:8d:82:e0:32:b0:bf:09:25:ff:4e:
d5:1c:91:eb:75:a6:c4:e9:1b:d1:a6:ce:56:b0:95:
88:fe:db:35:20:9a:98:a3:f3:30:fe:73:d0:06:b1:
ef:b2:82:da:c0:a0:05:a2:87:55:3c:fb:81:73:b6:
78:58:a1:55:99:1e:e2:28:30:86:2e:4e:7b:51:f3:
2a:5f:e6:88:38:75:3f:16:01:b9:c3:9f:90:74:ba:
5a:f7:6a:3c:43:d9:bc:50:99:7e:b2:58:f5:12:58:
a7:13:ba:fb:95:c5:46:a8:28:4c:cd:60:3f:ab:26:
74:3b:d6:2d:7e:ab:6c:78:c9:4f:40:80:72:cd:74:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:61:38:B6:D5:8F:7D:00:BE:70:F0:38:B2:FB:B5:92:79:94:6F:F7
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/o2E4ttWPfQC-cPA4svu1knmUb_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.7.0-84.32.8.255
84.32.20.0/22
84.32.46.0/23
84.32.64.0/24
84.32.104.0/24
84.32.148.0/22
84.32.174.0/23
84.32.214.0/23
84.32.217.0/24
84.32.223.0/24
84.32.230.0/24
84.32.244.0/22
88.216.22.0/23
88.216.44.0/23
88.216.66.0/23
88.216.93.0/24
88.216.127.0/24
88.216.130.0/23
88.216.134.0/23
88.216.223.0/24
Signature Algorithm: sha256WithRSAEncryption
69:de:3f:23:24:a1:7b:f5:f1:ba:f6:e5:21:8a:b3:27:2e:d0:
4b:69:38:ef:85:d7:39:36:b5:d0:36:f1:9b:4a:61:cc:7e:21:
01:17:4a:ba:6e:f6:3c:d8:39:4b:21:cb:7f:02:c0:56:57:b9:
31:95:00:80:14:c8:9a:0e:c4:8b:04:66:67:82:28:90:88:44:
18:84:b0:e2:c5:75:e8:b5:47:b6:3f:2f:16:c7:78:e7:65:85:
9b:18:71:11:01:1c:f0:99:d0:d2:b9:5a:78:3d:cb:48:49:ce:
3e:0b:0f:f8:2f:cc:d5:ef:bc:47:f7:d4:e2:78:4e:47:e1:cb:
da:7a:78:2e:c7:98:b4:47:92:2e:af:96:35:88:cd:dc:1a:89:
59:1d:46:ec:46:b6:74:c2:30:4f:b5:41:88:a2:00:c0:5f:c4:
fd:ed:f3:33:5b:e3:57:7c:58:7a:f0:49:fa:59:1d:8c:fd:8c:
66:6e:82:17:90:c5:33:87:b4:ec:00:8a:a9:39:2d:6d:fd:86:
67:73:3c:69:6c:eb:d6:47:a7:e5:94:cc:92:8a:8e:2a:ce:85:
ae:dc:64:7d:33:d5:2a:0b:2e:40:db:b2:a9:93:4d:5d:e5:e5:
be:4f:87:ba:31:cf:b7:28:54:b0:15:d1:15:42:98:6e:15:58:
4b:97:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:25:47 2025 by rpki-client