Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ediJMJBzETBra22Tko9jnlFnOYA.roa
File: ediJMJBzETBra22Tko9jnlFnOYA.roa (raw, json)
Hash identifier: oCcIPCoFUy+fyzOqy+mhQqpOzf2wz/N+TlISESEMNNs=
Subject key identifier: 79:D8:89:30:90:73:11:30:6B:6B:6D:93:92:8F:63:9E:51:67:39:80
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0197C0EFAE09CFB671AC58AE59C521CAD08D
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ediJMJBzETBra22Tko9jnlFnOYA.roa
Signing time: Mon 30 Jun 2025 13:03:42 +0000
ROA not before: Mon 30 Jun 2025 13:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214208
IP address blocks: 212.116.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ef:ae:09:cf:b6:71:ac:58:ae:59:c5:21:ca:d0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 30 13:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79d88930907311306b6b6d93928f639e51673980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:c2:b4:6d:bb:f3:1e:4f:91:be:b6:c2:e0:
b1:cd:5e:61:be:17:7d:3d:37:b8:ee:c9:1c:42:48:
7b:22:32:8e:f3:c9:e5:b0:51:65:90:53:35:6a:5d:
44:dd:b7:b8:96:0f:ba:ba:eb:ee:9f:bc:07:56:57:
37:43:66:f3:15:e7:de:b7:91:5f:9a:9a:01:5a:d1:
2c:2c:d1:8c:26:d4:51:0d:08:71:b0:59:27:fb:31:
fe:9f:64:c7:dd:2a:15:0f:41:91:e3:99:b0:f2:6c:
aa:3a:66:79:7d:8f:93:fe:3d:e4:16:ba:ea:9d:de:
8c:05:ab:f2:2b:45:a9:00:da:b3:85:b9:9a:e7:a8:
05:b9:8e:26:49:34:4a:23:78:b9:f9:2f:4a:75:55:
46:eb:56:29:75:96:c4:18:6c:7f:dd:41:3d:aa:e1:
32:89:1a:e7:c3:94:18:3d:4a:bb:d3:cc:07:61:a7:
c6:2f:c2:a9:2b:77:02:81:a2:60:82:f0:3a:1f:8b:
e5:4e:5d:35:ac:f4:6a:0f:6b:7f:d9:45:bf:ba:a9:
a2:19:ba:d4:ad:1e:25:bd:9a:bb:28:5f:95:15:c6:
f2:99:f0:48:3d:95:8a:57:ee:68:3a:53:8c:2c:98:
fc:51:78:f2:b5:da:d3:f9:91:41:0c:54:32:ee:99:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:89:30:90:73:11:30:6B:6B:6D:93:92:8F:63:9E:51:67:39:80
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ediJMJBzETBra22Tko9jnlFnOYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6e:e5:ad:ff:08:0b:16:30:d9:c6:d6:30:f5:7c:cd:0f:43:
24:b0:55:eb:34:b0:bb:55:40:6a:f9:12:90:d9:79:c2:d3:a5:
d8:88:46:df:de:40:bb:ad:86:91:50:58:ef:a1:6b:ed:ad:d6:
12:42:c0:b5:24:e3:35:c6:28:49:39:ea:b2:69:14:6b:ca:3f:
b8:e1:0b:93:ca:24:4c:b0:b5:6d:19:4d:10:6a:14:b7:f4:26:
b3:5a:f8:ec:2d:b4:51:1c:2a:cb:e3:4b:47:3a:63:83:a0:d1:
aa:02:02:3b:fb:33:42:1f:7b:82:5b:37:d6:b1:5d:66:9f:70:
50:ff:b3:81:82:e7:d2:c8:51:04:50:70:fa:da:8d:44:55:de:
ed:6b:db:75:e8:c6:68:d9:63:e9:0d:f7:78:21:cd:75:74:f1:
b3:9b:f6:75:5d:80:76:c6:6e:cd:a8:ae:a5:6c:52:20:43:31:
12:73:f3:d2:aa:ff:5a:bd:98:22:5d:46:8b:63:ba:95:0c:cf:
60:9e:94:1b:90:d4:ae:89:1e:48:3c:51:fb:0b:7b:8a:ac:6f:
a3:38:ac:c1:31:21:7b:61:4c:b5:bc:d1:95:89:87:8c:9a:38:
e8:eb:d2:ff:07:26:3a:a9:3b:7c:d5:f0:66:84:37:89:0f:c0:
02:55:cb:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfA764Jz7ZxrFiuWcUhytCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjUwNjMwMTMwMzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWQ4ODkzMDkwNzMxMTMwNmI2YjZkOTM5MjhmNjM5ZTUxNjczOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgjCtG278x5Pkb62wuCxzV5hvhd9
PTe47skcQkh7IjKO88nlsFFlkFM1al1E3be4lg+6uuvun7wHVlc3Q2bzFefet5Ff
mpoBWtEsLNGMJtRRDQhxsFkn+zH+n2TH3SoVD0GR45mw8myqOmZ5fY+T/j3kFrrq
nd6MBavyK0WpANqzhbma56gFuY4mSTRKI3i5+S9KdVVG61YpdZbEGGx/3UE9quEy
iRrnw5QYPUq708wHYafGL8KpK3cCgaJggvA6H4vlTl01rPRqD2t/2UW/uqmiGbrU
rR4lvZq7KF+VFcbymfBIPZWKV+5oOlOMLJj8UXjytdrT+ZFBDFQy7pkkhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnYiTCQcxEwa2ttk5KPY55RZzmAMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvZWRpSk1KQnpFVEJyYTIyVGtvOWpubEZuT1lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HTiMA0G
CSqGSIb3DQEBCwUAA4IBAQCPbuWt/wgLFjDZxtYw9XzND0MksFXrNLC7VUBq+RKQ
2XnC06XYiEbf3kC7rYaRUFjvoWvtrdYSQsC1JOM1xihJOeqyaRRryj+44QuTyiRM
sLVtGU0QahS39CazWvjsLbRRHCrL40tHOmODoNGqAgI7+zNCH3uCWzfWsV1mn3BQ
/7OBgufSyFEEUHD62o1EVd7ta9t16MZo2WPpDfd4Ic11dPGzm/Z1XYB2xm7NqK6l
bFIgQzESc/PSqv9avZgiXUaLY7qVDM9gnpQbkNSuiR5IPFH7C3uKrG+jOKzBMSF7
YUy1vNGViYeMmjjo69L/ByY6qTt81fBmhDeJD8ACVcs4
-----END CERTIFICATE-----
Generated at Sun Jul 20 20:36:34 2025 by rpki-client