Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/Oac09hx3rqQddn6sXzqSQ66tEsk.roa
File: Oac09hx3rqQddn6sXzqSQ66tEsk.roa (raw, json)
Hash identifier: 0YnaolK2p37HCU8XIKe9HEtLFbwrR1vF1VCsBkGV6VQ=
Subject key identifier: 39:A7:34:F6:1C:77:AE:A4:1D:76:7E:AC:5F:3A:92:43:AE:AD:12:C9
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 019423D71DB957D2DBB7FF24BFD8E6C9D1E5
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/Oac09hx3rqQddn6sXzqSQ66tEsk.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63142
IP address blocks: 212.118.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1d:b9:57:d2:db:b7:ff:24:bf:d8:e6:c9:d1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39a734f61c77aea41d767eac5f3a9243aead12c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:75:e3:a8:38:21:24:99:c8:c9:c0:34:57:
2d:15:25:a2:e7:7e:65:6b:2c:e1:21:24:3f:50:c9:
f3:75:f7:5c:57:0c:58:41:ba:32:9c:62:33:32:d8:
8a:6e:ab:45:33:bb:28:70:cd:8d:5b:11:95:b4:54:
6d:b6:ad:ce:95:3c:4e:f9:6e:2b:f4:cf:0d:0d:5a:
d4:03:32:fd:a1:84:6e:06:87:53:fd:f8:24:aa:4b:
8e:e0:cd:52:98:e0:6a:8a:0c:27:29:f2:e2:22:f9:
1f:fc:d6:a2:4e:f3:2a:6f:84:c4:1f:fc:83:44:45:
78:61:41:07:ed:77:f4:4d:2e:35:c4:83:43:97:9e:
2f:40:5c:ee:4d:3b:77:56:9d:0f:08:c6:4e:7a:de:
c9:e2:ce:88:e5:2c:14:7e:72:9c:e7:d7:75:88:b2:
48:23:15:f2:3f:b1:88:44:96:45:62:bb:09:c0:c0:
e0:ad:bd:1a:58:94:12:b3:ab:36:92:44:c5:4e:4a:
9d:51:14:fc:31:ee:df:e2:26:8f:1e:59:43:05:a4:
45:73:57:e8:56:38:e1:e1:d8:2b:89:9c:92:08:62:
88:a9:0f:e0:2e:de:50:81:26:0f:44:51:75:6e:e1:
f0:a8:12:60:b4:fc:75:84:b0:d1:7d:dd:3a:52:77:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:34:F6:1C:77:AE:A4:1D:76:7E:AC:5F:3A:92:43:AE:AD:12:C9
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/Oac09hx3rqQddn6sXzqSQ66tEsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.118.245.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ea:81:4a:71:b6:da:b7:05:f9:6b:b5:3d:5e:21:60:eb:5b:
0f:21:cb:b3:10:0d:0b:4b:0b:47:6e:fe:86:93:53:c8:cd:4b:
00:00:de:72:e1:4b:80:35:d8:b6:f4:68:49:bb:0f:cb:37:47:
b5:be:c0:da:39:22:0f:71:fb:55:98:4f:8b:4a:e7:c4:d2:60:
af:fa:12:9f:fd:6b:fb:4c:c7:75:9f:21:ed:21:72:8d:26:65:
56:49:20:c5:6b:d2:0e:90:64:e6:61:45:86:af:f8:56:1f:ab:
a3:f4:49:af:35:c5:c0:b6:d2:67:f8:00:17:e0:91:c3:73:64:
ee:58:dc:38:7d:e0:68:75:86:7d:c0:8e:15:98:1f:5e:40:9b:
56:f3:b4:d3:0e:98:d1:12:cb:83:a1:08:62:15:57:38:8b:d3:
fd:a8:6f:89:26:c9:82:e1:0f:43:38:be:b2:b9:88:f2:60:03:
f7:9c:87:ae:64:7f:a4:28:05:25:6a:ff:f3:a7:c5:c3:14:cc:
39:b0:9c:66:8d:7c:b8:a8:c8:dc:dc:f0:e9:15:84:97:69:06:
b8:e7:96:df:8a:3b:13:99:e8:26:9d:b5:3d:83:6e:da:aa:05:
54:78:bb:aa:9f:a8:76:fc:4a:d4:d2:0d:bb:0d:ec:fa:7b:df:
39:2e:a1:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1x25V9Lbt/8kv9jmydHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3
OThmZDkwHhcNMjUwMTAxMjE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWE3MzRmNjFjNzdhZWE0MWQ3NjdlYWM1ZjNhOTI0M2FlYWQxMmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLJ146g4ISSZyMnANFctFSWi535l
ayzhISQ/UMnzdfdcVwxYQboynGIzMtiKbqtFM7socM2NWxGVtFRttq3OlTxO+W4r
9M8NDVrUAzL9oYRuBodT/fgkqkuO4M1SmOBqigwnKfLiIvkf/NaiTvMqb4TEH/yD
REV4YUEH7Xf0TS41xINDl54vQFzuTTt3Vp0PCMZOet7J4s6I5SwUfnKc59d1iLJI
IxXyP7GIRJZFYrsJwMDgrb0aWJQSs6s2kkTFTkqdURT8Me7f4iaPHllDBaRFc1fo
Vjjh4dgriZySCGKIqQ/gLt5QgSYPRFF1buHwqBJgtPx1hLDRfd06Unf0iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDmnNPYcd66kHXZ+rF86kkOurRLJMB8GA1UdIwQY
MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt
OTk4NjhjNTEzMjlhLzEvT2FjMDloeDNycVFkZG42c1h6cVNRNjZ0RXNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh
LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Hb1MA0G
CSqGSIb3DQEBCwUAA4IBAQAU6oFKcbbatwX5a7U9XiFg61sPIcuzEA0LSwtHbv6G
k1PIzUsAAN5y4UuANdi29GhJuw/LN0e1vsDaOSIPcftVmE+LSufE0mCv+hKf/Wv7
TMd1nyHtIXKNJmVWSSDFa9IOkGTmYUWGr/hWH6uj9EmvNcXAttJn+AAX4JHDc2Tu
WNw4feBodYZ9wI4VmB9eQJtW87TTDpjREsuDoQhiFVc4i9P9qG+JJsmC4Q9DOL6y
uYjyYAP3nIeuZH+kKAUlav/zp8XDFMw5sJxmjXy4qMjc3PDpFYSXaQa455bfijsT
megmnbU9g27aqgVUeLuqn6h2/ErU0g27Dez6e985LqEs
-----END CERTIFICATE-----
Generated at Sun Apr 13 19:13:05 2025 by rpki-client