Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ojVk8vkZ0BLY9GAaenbVqf3H9rc.roa
File: ojVk8vkZ0BLY9GAaenbVqf3H9rc.roa (raw, json)
Hash identifier: Ba9QsIqkvrtmVCQkpDkO0vZ9nFVhfN+UrHpeojqVkNI=
Subject key identifier: A2:35:64:F2:F9:19:D0:12:D8:F4:60:1A:7A:76:D5:A9:FD:C7:F6:B7
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01966B2BBC5453CB00EA6243EB41302341ED
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ojVk8vkZ0BLY9GAaenbVqf3H9rc.roa
Signing time: Fri 25 Apr 2025 04:19:10 +0000
ROA not before: Fri 25 Apr 2025 04:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 84.55.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6b:2b:bc:54:53:cb:00:ea:62:43:eb:41:30:23:41:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Apr 25 04:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a23564f2f919d012d8f4601a7a76d5a9fdc7f6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:64:f3:e8:a3:f7:99:78:b4:1d:32:0a:53:
f7:d4:b2:34:3d:25:40:45:61:da:7e:db:2e:74:3c:
07:f6:f8:9e:55:00:53:f9:da:f9:81:f6:80:43:91:
a2:a8:ac:e9:23:70:6c:3f:ac:92:d2:78:fa:62:75:
eb:cf:30:72:bd:12:ff:4f:bf:46:15:91:6f:cb:b3:
09:59:bd:ff:0a:bf:ae:89:50:fd:5c:06:a0:29:c8:
40:3a:25:5d:1c:66:e5:6c:95:52:48:d9:6b:99:81:
d1:b9:9b:63:26:b1:7d:5b:9d:ac:58:ad:b2:1d:63:
65:26:0a:a0:55:a7:b4:e3:32:71:01:3a:b3:bd:33:
5e:aa:1a:fa:42:02:42:9a:b4:5c:00:8a:ea:21:cb:
f4:28:b2:c9:55:43:92:ae:57:a7:ba:2a:60:30:13:
b6:84:e1:16:b3:38:b4:72:15:fd:75:fb:c0:8c:b5:
44:a8:11:f9:cb:78:cc:f6:46:21:34:b4:3f:9d:67:
8d:b2:e6:a9:97:b2:ed:9e:4e:8e:22:c2:72:f1:f9:
4f:ba:79:91:63:0a:90:e0:0a:e4:4b:cc:aa:50:58:
16:a3:73:a7:6f:4e:a9:da:a5:ec:0e:e4:18:e9:f7:
56:db:b9:0d:9f:aa:b7:1d:c6:eb:f2:15:6b:c6:cc:
0b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:35:64:F2:F9:19:D0:12:D8:F4:60:1A:7A:76:D5:A9:FD:C7:F6:B7
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/ojVk8vkZ0BLY9GAaenbVqf3H9rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:4e:ba:48:b0:d6:64:4f:7f:42:4b:ce:76:c6:98:c3:d1:53:
d2:5a:62:c8:d5:32:4b:78:b4:ca:ea:4a:81:11:ae:0b:8b:46:
8c:a5:fd:58:74:5b:7b:38:d1:4b:c9:cf:ab:6a:7a:1d:a6:6a:
05:4e:58:ca:ed:59:25:0e:8a:84:fa:4b:11:22:6a:22:1c:f4:
96:a7:2d:21:c5:29:12:ab:e5:aa:6e:d4:c8:64:3b:e8:8b:7e:
b3:36:59:67:28:dd:2c:2b:f5:1d:c8:0c:33:52:4f:6b:60:7d:
0d:fb:d0:a4:9c:28:51:6e:20:c5:d4:5c:06:ac:a8:3b:e7:49:
e6:bb:90:ae:f7:aa:ab:e0:ce:26:84:66:f1:25:72:dd:b9:3d:
64:9b:3f:e1:5f:25:ec:a1:5b:5c:53:16:f9:09:f4:a5:01:55:
85:f0:51:20:41:d2:6e:7e:11:5d:b3:46:8f:69:71:58:21:81:
bc:d1:19:dc:aa:37:86:02:d0:db:0b:83:48:9b:22:c2:3e:93:
25:c5:2b:d1:1f:e1:02:4f:3f:24:35:37:cc:80:25:67:0e:d4:
16:59:1d:93:7a:3b:38:6a:4a:7a:5d:70:67:1c:80:3a:f4:e3:
2a:f7:b6:84:91:f9:07:8a:bc:9c:6e:41:d3:ca:d0:07:a1:7e:
fe:91:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:03:23 2025 by rpki-client