Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa
File: 0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa (raw, json)
Hash identifier: vbFOlrrgXdMpjETv1aLsSB82Hd5tfAVSxkqVBCr2Gvg=
Subject key identifier: D1:B3:B5:67:9A:8C:2F:D3:29:FE:27:E7:4A:49:C4:CF:87:89:B7:30
Certificate issuer: /CN=113d5e831c330d3cb51d476e0c163540f25e0372
Certificate serial: 019422FB8D9766A64A16B3413FD1BC5F1DC2
Authority key identifier: 11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa
Signing time: Wed 01 Jan 2025 17:48:18 +0000
ROA not before: Wed 01 Jan 2025 17:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8698
IP address blocks: 155.131.55.0/24 maxlen: 24
155.192.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8d:97:66:a6:4a:16:b3:41:3f:d1:bc:5f:1d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=113d5e831c330d3cb51d476e0c163540f25e0372
Validity
Not Before: Jan 1 17:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1b3b5679a8c2fd329fe27e74a49c4cf8789b730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:72:b6:33:c4:6f:ea:1d:f1:23:56:bb:2e:
cf:d5:72:38:ad:7d:5d:7d:5d:10:e9:10:d3:54:5c:
c8:e3:70:1a:af:ab:5c:f1:7c:df:3c:61:66:2d:8d:
d3:4e:39:12:03:fc:1d:c0:61:f7:64:2a:9d:f0:25:
7c:a9:e8:d9:2f:51:25:6c:59:d5:ac:6b:bc:c6:cf:
71:c9:d3:b5:ae:ba:48:a4:01:2c:1a:f2:b0:cc:9b:
24:e2:66:ff:3f:48:35:2e:62:91:2d:0b:ae:50:93:
0a:a2:ff:5c:4b:f8:d2:a9:fe:2a:49:5e:15:41:7f:
1d:48:8a:7a:ef:b0:a3:ad:ce:e4:67:b9:e1:96:d8:
11:9f:d4:20:79:99:b9:7f:70:74:4b:19:0f:92:5e:
da:5c:d6:9c:35:89:34:18:f1:18:81:34:a0:d9:27:
54:e8:e4:57:1e:56:65:4b:b3:a1:9b:9e:36:8b:42:
8b:4f:72:27:b3:a5:f5:65:1a:51:ca:24:4a:d6:17:
07:b5:12:0f:b0:3f:86:eb:20:f5:61:1a:c0:11:e8:
ef:b6:ba:57:cf:43:b3:d9:b5:de:8d:65:dc:bb:2d:
cf:08:93:21:40:d3:72:c4:84:f2:1a:90:02:9e:22:
84:ea:17:96:e2:1e:cd:05:02:75:f6:93:06:dd:cc:
28:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B3:B5:67:9A:8C:2F:D3:29:FE:27:E7:4A:49:C4:CF:87:89:B7:30
X509v3 Authority Key Identifier:
keyid:11:3D:5E:83:1C:33:0D:3C:B5:1D:47:6E:0C:16:35:40:F2:5E:03:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET1egxwzDTy1HUduDBY1QPJeA3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/0bO1Z5qML9Mp_ifnSknEz4eJtzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe8993-9178-4424-a108-33f396ab56f2/1/ET1egxwzDTy1HUduDBY1QPJeA3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.131.55.0/24
155.192.55.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5e:73:e2:69:d2:a2:98:dd:24:e9:85:96:d4:30:57:de:a2:
da:25:78:2e:40:93:da:9f:8a:a1:7d:a7:82:8c:b2:66:c6:01:
a0:35:d0:6a:9c:b8:da:81:f0:72:81:b6:38:ef:94:b3:3f:0f:
56:27:6f:c1:e2:77:64:fa:81:99:54:47:bd:35:dc:11:ae:fc:
dc:b2:b8:30:f7:dd:73:c5:1e:f7:ea:d1:20:92:3d:8a:68:29:
be:3f:3d:dc:65:e2:d4:ae:d9:1b:de:97:f1:0b:46:ad:e6:3c:
9f:14:7f:40:31:0e:7b:10:c0:0e:a6:37:48:ca:7c:15:02:7e:
a6:10:37:f0:75:a0:49:39:4b:8e:26:68:0e:6d:da:12:4a:90:
bd:14:66:2d:dc:88:70:40:56:d5:31:06:7e:0d:fc:10:08:83:
66:bd:c7:6b:90:7f:90:ec:d0:ec:21:2f:2e:c0:38:d1:d2:94:
75:d7:f2:05:d9:59:41:01:e5:c3:3a:7b:c7:8d:d0:02:4f:0f:
0b:7c:9c:33:dd:cc:4f:c7:9f:f7:20:1f:02:f9:2d:a4:a5:45:
cb:b0:36:63:c9:6b:0c:74:53:42:05:e3:17:e5:fe:fa:86:2a:
77:d8:8f:07:3e:95:36:f2:9d:49:92:2c:db:99:42:46:7e:b2:
38:ef:81:91
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQi+42XZqZKFrNBP9G8Xx3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2Q1ZTgzMWMzMzBkM2NiNTFkNDc2ZTBjMTYzNTQwZjI1
ZTAzNzIwHhcNMjUwMTAxMTc0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWIzYjU2NzlhOGMyZmQzMjlmZTI3ZTc0YTQ5YzRjZjg3ODliNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwulytjPEb+od8SNWuy7P1XI4rX1d
fV0Q6RDTVFzI43Aar6tc8XzfPGFmLY3TTjkSA/wdwGH3ZCqd8CV8qejZL1ElbFnV
rGu8xs9xydO1rrpIpAEsGvKwzJsk4mb/P0g1LmKRLQuuUJMKov9cS/jSqf4qSV4V
QX8dSIp677Cjrc7kZ7nhltgRn9QgeZm5f3B0SxkPkl7aXNacNYk0GPEYgTSg2SdU
6ORXHlZlS7Ohm542i0KLT3Ins6X1ZRpRyiRK1hcHtRIPsD+G6yD1YRrAEejvtrpX
z0Oz2bXejWXcuy3PCJMhQNNyxITyGpACniKE6heW4h7NBQJ19pMG3cwoPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNGztWeajC/TKf4n50pJxM+HibcwMB8GA1UdIwQY
MBaAFBE9XoMcMw08tR1HbgwWNUDyXgNyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQxZWd4d3pEVHkxSFVkdURCWTFRUEplQTNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTg5OTMtOTE3OC00NDI0LWExMDgt
MzNmMzk2YWI1NmYyLzEvMGJPMVo1cU1MOU1wX2lmblNrbkV6NGVKdHpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9mZTg5OTMtOTE3OC00NDI0LWExMDgtMzNmMzk2YWI1NmYy
LzEvRVQxZWd4d3pEVHkxSFVkdURCWTFRUEplQTNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAm4M3AwQA
m8A3MA0GCSqGSIb3DQEBCwUAA4IBAQCBXnPiadKimN0k6YWW1DBX3qLaJXguQJPa
n4qhfaeCjLJmxgGgNdBqnLjagfBygbY475SzPw9WJ2/B4ndk+oGZVEe9NdwRrvzc
srgw991zxR736tEgkj2KaCm+Pz3cZeLUrtkb3pfxC0at5jyfFH9AMQ57EMAOpjdI
ynwVAn6mEDfwdaBJOUuOJmgObdoSSpC9FGYt3IhwQFbVMQZ+DfwQCINmvcdrkH+Q
7NDsIS8uwDjR0pR11/IF2VlBAeXDOnvHjdACTw8LfJwz3cxPx5/3IB8C+S2kpUXL
sDZjyWsMdFNCBeMX5f76hip32I8HPpU28p1JkizbmUJGfrI474GR
-----END CERTIFICATE-----
Generated at Sun Apr 13 12:13:59 2025 by rpki-client