Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/2OgvSkU6B3coTq_XrBtLh7r9aYI.roa
File: 2OgvSkU6B3coTq_XrBtLh7r9aYI.roa (raw, json)
Hash identifier: 9oJ/pbxCoLxAu6aotf+D4FzsANtrhZV2j6G9rrhrP7Q=
Subject key identifier: D8:E8:2F:4A:45:3A:07:77:28:4E:AF:D7:AC:1B:4B:87:BA:FD:69:82
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 0196AF418AD8A8CAE8E8D775977753C99448
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/2OgvSkU6B3coTq_XrBtLh7r9aYI.roa
Signing time: Thu 08 May 2025 09:37:10 +0000
ROA not before: Thu 08 May 2025 09:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 37.156.35.0/24 maxlen: 24
89.34.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:41:8a:d8:a8:ca:e8:e8:d7:75:97:77:53:c9:94:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: May 8 09:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8e82f4a453a0777284eafd7ac1b4b87bafd6982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:10:bf:8c:b1:43:a0:7b:9b:52:9a:3f:d3:
2b:60:21:6a:1b:1b:d8:b5:a3:46:32:29:28:44:fa:
1c:75:00:c5:ed:76:68:44:37:df:84:af:28:28:07:
cc:c5:5c:a7:67:ed:ae:32:5d:b7:95:2b:5e:c6:6d:
ce:b4:a7:00:30:0c:08:5d:4e:fb:83:61:71:81:df:
29:f3:28:ac:bd:4d:f4:13:33:9a:7a:56:01:6b:c3:
62:c9:70:29:37:16:82:a5:5d:c1:1e:e5:e2:e5:96:
08:08:ce:3d:a1:78:92:f1:64:38:af:0c:00:d7:37:
73:81:0a:a7:1b:26:d4:c1:1a:9c:51:74:e1:25:0f:
60:a1:cb:26:ac:05:6c:c1:2d:50:bf:b3:74:11:be:
07:60:c4:60:1c:3e:3d:4d:bf:8b:f7:5c:f3:c7:a8:
1d:2d:49:e4:93:7a:35:8e:19:43:68:e2:82:1f:6a:
58:56:ca:ef:5a:83:a0:be:dc:5a:78:07:b5:b6:9d:
32:10:6a:31:14:41:83:cf:bc:ce:81:8a:d3:ac:b6:
6f:44:40:4a:b3:81:5c:4b:a4:b9:dd:ae:80:9b:91:
48:26:ab:dd:da:2f:92:7d:6e:1c:d0:28:1c:87:5c:
82:43:73:ba:f0:d8:a7:2f:85:84:1a:30:4c:c2:b7:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E8:2F:4A:45:3A:07:77:28:4E:AF:D7:AC:1B:4B:87:BA:FD:69:82
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/2OgvSkU6B3coTq_XrBtLh7r9aYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.156.35.0/24
89.34.90.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:78:72:76:5c:48:f6:7f:27:23:24:ab:3c:76:c7:e4:f9:89:
58:58:8b:01:e5:2c:ab:a1:08:a1:24:b4:3f:fa:f4:2c:d4:44:
ac:41:6e:0d:88:7d:cb:71:12:97:23:81:7f:db:15:82:df:51:
92:e6:72:ee:ab:e7:4d:38:13:19:74:a0:eb:b4:9d:e5:a4:33:
0b:8d:53:7c:fc:72:ab:6d:91:6d:74:54:0a:73:2b:48:96:b6:
10:c5:15:6a:59:22:fe:bc:69:18:83:4a:56:96:82:ab:4f:ae:
74:22:fe:b5:49:d2:47:d3:a1:64:df:3f:a8:56:c5:51:61:f9:
80:1d:e4:a3:99:02:7b:2e:a7:23:91:b7:96:65:a8:68:21:2c:
4e:5e:4c:99:45:d8:ce:23:be:10:41:6e:7a:cf:30:15:5f:47:
02:4e:63:34:c9:af:15:a5:a1:bc:51:11:21:60:dd:85:c8:22:
c4:56:a4:7e:fb:cb:40:e0:03:79:ca:d7:3a:08:a0:56:64:c1:
8e:a6:77:de:54:35:cb:be:7e:46:c0:ee:5d:6c:b7:e7:c3:25:
a4:fa:49:6b:ff:b7:0b:a3:42:d7:98:5e:33:c8:0e:5f:47:ba:
12:ca:80:b8:33:b9:5f:10:c5:83:82:17:03:42:f5:f8:be:f7:
f1:a7:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:31:35 2025 by rpki-client