Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/o0m8fWeQnLg_XbqIRRPxINGkNnk.roa
File: o0m8fWeQnLg_XbqIRRPxINGkNnk.roa (raw, json)
Hash identifier: hFBwillrrnPw4RwjJ9B6leCvzXkiINuH8WcY9jtsCtk=
Subject key identifier: A3:49:BC:7D:67:90:9C:B8:3F:5D:BA:88:45:13:F1:20:D1:A4:36:79
Certificate issuer: /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial: 019427B54F69DFD3E4261C2B863EBBC1B527
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/o0m8fWeQnLg_XbqIRRPxINGkNnk.roa
Signing time: Thu 02 Jan 2025 15:49:41 +0000
ROA not before: Thu 02 Jan 2025 15:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211018
IP address blocks: 194.99.159.0/24 maxlen: 24
2a11:8e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4f:69:df:d3:e4:26:1c:2b:86:3e:bb:c1:b5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a349bc7d67909cb83f5dba884513f120d1a43679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4b:a0:29:09:83:cd:ed:56:7f:ae:7e:96:ae:
26:34:68:59:11:cb:bf:83:9a:6c:00:e2:2d:c0:b2:
9a:0e:e5:7e:15:87:2f:d1:05:73:16:89:8a:21:e7:
18:ab:0c:8a:11:b0:a7:02:db:8e:4c:df:ba:d2:f8:
46:18:54:31:ed:ca:49:a7:ac:56:f0:2b:b2:16:0a:
68:11:1b:f5:5f:6b:ac:79:57:ab:30:35:59:df:1d:
92:8d:27:d9:b9:ca:06:bd:e6:f1:ec:8f:5c:0d:04:
84:66:14:68:44:59:ce:21:96:db:01:02:6c:c2:f9:
c2:8a:62:a3:b1:d4:94:21:07:a6:d6:5b:bf:0b:d7:
99:41:e3:db:8c:78:e1:2e:2a:7c:4d:71:5e:83:34:
2f:64:aa:bc:b9:8e:bc:ff:07:4c:81:18:83:e9:c8:
7e:f7:df:6e:fa:e7:06:e2:4b:46:9f:5c:c9:f7:9a:
9d:f4:86:73:15:d1:fb:73:9d:e4:6e:9b:e0:d5:a7:
be:1d:9e:04:d8:a1:80:28:42:c7:41:c0:1f:c2:43:
5a:59:bf:e2:cd:ad:b6:be:63:3a:e2:77:32:96:25:
2a:e0:4b:29:50:ac:37:ab:53:49:8b:db:ba:ee:da:
e8:f4:0b:bb:c9:c6:fd:68:a1:c7:d8:c3:0f:bb:f7:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:49:BC:7D:67:90:9C:B8:3F:5D:BA:88:45:13:F1:20:D1:A4:36:79
X509v3 Authority Key Identifier:
keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/o0m8fWeQnLg_XbqIRRPxINGkNnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.159.0/24
IPv6:
2a11:8e00::/29
Signature Algorithm: sha256WithRSAEncryption
8b:24:84:5d:2e:c4:1d:c7:07:46:52:88:68:c5:c5:7b:5a:7a:
b0:dc:2e:96:4b:a1:4c:34:b3:70:eb:a1:74:cc:dd:ce:13:32:
a1:33:92:69:83:72:f5:30:8e:50:f1:13:34:ff:68:d6:10:45:
50:e4:4b:8c:b4:b7:a1:a5:c0:49:9c:04:fd:c9:9b:fb:a5:75:
b7:5f:e5:ae:d2:d5:11:ce:fc:d0:f9:03:0d:54:d2:88:e0:be:
2f:6f:dc:4a:a2:69:70:24:ab:8a:da:3d:43:65:06:a2:f5:49:
bd:07:40:c3:e9:8a:99:7f:a3:de:84:a8:35:4c:15:a1:a2:62:
6b:f2:ce:17:54:9d:51:df:ab:e0:b5:6c:a1:15:cf:85:d9:c9:
aa:19:cd:f0:b9:9e:5a:7c:35:d1:ed:44:13:c8:ff:02:ca:1d:
8e:2c:e2:0e:73:07:7c:fe:7b:58:69:40:d5:4e:13:d2:3f:60:
67:ba:e4:ad:c9:05:f1:a0:6f:66:6d:d5:cf:e6:66:a4:7b:27:
32:96:54:11:72:43:c1:c1:78:6f:e4:73:ca:26:8a:51:e0:15:
86:9e:06:f0:d2:ad:aa:72:dc:62:f4:64:3c:bc:c6:51:b3:3e:
bc:d1:f6:e1:82:6c:0d:7b:03:b4:5e:f5:93:5c:70:ea:f1:83:
ad:b4:a9:44
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQntU9p39PkJhwrhj67wbUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YWVmMTkwZjQ0YmZjMWRiMGM1MGYxYTczZmRmMDE3MDgx
YWZlMTYwHhcNMjUwMTAyMTU0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzQ5YmM3ZDY3OTA5Y2I4M2Y1ZGJhODg0NTEzZjEyMGQxYTQzNjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00ugKQmDze1Wf65+lq4mNGhZEcu/
g5psAOItwLKaDuV+FYcv0QVzFomKIecYqwyKEbCnAtuOTN+60vhGGFQx7cpJp6xW
8CuyFgpoERv1X2useVerMDVZ3x2SjSfZucoGvebx7I9cDQSEZhRoRFnOIZbbAQJs
wvnCimKjsdSUIQem1lu/C9eZQePbjHjhLip8TXFegzQvZKq8uY68/wdMgRiD6ch+
999u+ucG4ktGn1zJ95qd9IZzFdH7c53kbpvg1ae+HZ4E2KGAKELHQcAfwkNaWb/i
za22vmM64ncyliUq4EspUKw3q1NJi9u67tro9Au7ycb9aKHH2MMPu/djhQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKNJvH1nkJy4P126iEUT8SDRpDZ5MB8GA1UdIwQY
MBaAFAeu8ZD0S/wdsMUPGnP98BcIGv4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYt
ZWY0NDU4ZWEyMGNkLzEvbzBtOGZXZVFuTGdfWGJxSVJSUHhJTkdrTm5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9kNjk1MjUtN2NmYi00N2M4LTljNGYtZWY0NDU4ZWEyMGNk
LzEvQjY3eGtQUkxfQjJ3eFE4YWNfM3dGd2dhX2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwmOfMA0E
AgACMAcDBQMqEY4AMA0GCSqGSIb3DQEBCwUAA4IBAQCLJIRdLsQdxwdGUohoxcV7
Wnqw3C6WS6FMNLNw66F0zN3OEzKhM5Jpg3L1MI5Q8RM0/2jWEEVQ5EuMtLehpcBJ
nAT9yZv7pXW3X+Wu0tURzvzQ+QMNVNKI4L4vb9xKomlwJKuK2j1DZQai9Um9B0DD
6YqZf6PehKg1TBWhomJr8s4XVJ1R36vgtWyhFc+F2cmqGc3wuZ5afDXR7UQTyP8C
yh2OLOIOcwd8/ntYaUDVThPSP2BnuuStyQXxoG9mbdXP5makeycyllQRckPBwXhv
5HPKJopR4BWGngbw0q2qctxi9GQ8vMZRsz680fbhgmwNewO0XvWTXHDq8YOttKlE
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:44:07 2025 by rpki-client