Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ofG8yjoX2iv8hvMpbbpBaZC9QfM.roa
File: ofG8yjoX2iv8hvMpbbpBaZC9QfM.roa (raw, json)
Hash identifier: KDIzJYYR2zOglkX2ggi6G9XMlNStiEu64vM2/HGSaW4=
Subject key identifier: A1:F1:BC:CA:3A:17:DA:2B:FC:86:F3:29:6D:BA:41:69:90:BD:41:F3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBB16259E2E853CD8F4AA16E3A91F9
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ofG8yjoX2iv8hvMpbbpBaZC9QfM.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.81.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b1:62:59:e2:e8:53:cd:8f:4a:a1:6e:3a:91:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1f1bcca3a17da2bfc86f3296dba416990bd41f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:ac:47:8a:19:13:53:2c:58:c1:49:b0:6a:
87:48:bd:fe:01:04:f6:53:57:ce:da:78:5b:40:59:
17:23:a7:fc:5e:6f:60:86:3b:33:4d:2c:1c:e8:3a:
1f:31:9d:86:7e:d3:f0:b2:1b:26:6b:fb:89:01:ed:
ce:b9:96:40:d5:8f:69:51:0e:db:db:a2:16:17:8e:
a3:37:08:6a:3b:1e:a9:35:ae:2b:3a:38:1a:29:e4:
2d:5e:ba:44:6a:9f:59:e0:0d:9c:9c:bb:a5:fc:46:
ea:4a:8e:64:a2:ce:9c:05:5d:ec:5b:3d:09:d2:75:
3f:c0:d5:25:0a:04:5f:e9:e0:aa:bd:ce:53:6f:ed:
7f:5c:78:24:a1:d8:b1:37:90:35:c7:7b:89:4c:32:
e0:0c:bb:c8:f1:ad:fd:fc:39:61:63:59:f7:1a:d9:
22:a1:66:3a:a8:89:55:e4:c2:27:74:d3:e3:0d:17:
99:49:26:fe:97:1b:54:f0:48:56:10:48:ef:d6:f1:
87:02:72:73:1b:65:6e:f5:db:37:f4:05:77:91:a0:
81:a4:5b:c9:c4:11:fd:0d:46:e7:b9:70:3c:3d:bd:
35:f8:dd:16:5f:55:c3:b6:c1:83:ea:bf:b1:8d:9d:
68:ea:36:ce:5c:9f:cf:67:eb:ff:c0:b7:68:88:cd:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F1:BC:CA:3A:17:DA:2B:FC:86:F3:29:6D:BA:41:69:90:BD:41:F3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ofG8yjoX2iv8hvMpbbpBaZC9QfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:38:67:97:41:75:1b:42:70:ee:65:3a:a8:5f:5f:50:5b:49:
d7:99:fa:49:e4:f3:07:9a:d0:38:a6:9d:15:89:cf:69:d1:29:
cd:f8:c0:e3:34:3e:41:fc:bb:72:29:7c:4f:1f:bb:8b:e6:f9:
8a:12:12:8d:07:2e:b9:c1:f4:a4:95:cb:20:e8:de:d6:af:d7:
63:8a:42:39:30:5a:c2:12:58:a0:94:d2:f2:73:ad:b1:e7:d3:
3b:50:86:30:a6:39:9b:f2:1a:35:70:c1:d4:1a:1f:0f:f7:de:
c8:24:5c:d2:fa:ce:67:13:51:de:af:c8:a8:63:a0:18:d2:16:
8e:d6:58:d1:29:e3:18:01:1e:0e:dc:6b:c8:f2:94:22:ec:f8:
05:fd:c4:4b:32:f5:b5:05:aa:3c:7b:0b:91:c4:c6:39:d6:58:
ac:19:6a:42:7e:03:49:f6:3b:0f:0a:6f:54:1b:8b:29:df:2d:
1e:50:7a:15:39:e9:8a:0c:6f:30:c1:d3:2e:8b:86:4e:ce:ce:
1c:36:3a:3f:b1:ae:3b:56:48:8a:44:aa:5d:25:73:42:34:a4:
33:ab:8c:fc:94:01:4f:cd:7b:c3:01:69:7a:48:36:f5:a2:d6:
42:de:f6:e8:fc:ce:ac:27:f3:a1:c4:5b:0e:8c:c2:98:53:c0:
7d:21:68:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+7FiWeLoU82PSqFuOpH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwMTAxMTc0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWYxYmNjYTNhMTdkYTJiZmM4NmYzMjk2ZGJhNDE2OTkwYmQ0MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDusR4oZE1MsWMFJsGqHSL3+AQT2
U1fO2nhbQFkXI6f8Xm9ghjszTSwc6DofMZ2GftPwshsma/uJAe3OuZZA1Y9pUQ7b
26IWF46jNwhqOx6pNa4rOjgaKeQtXrpEap9Z4A2cnLul/EbqSo5kos6cBV3sWz0J
0nU/wNUlCgRf6eCqvc5Tb+1/XHgkodixN5A1x3uJTDLgDLvI8a39/DlhY1n3Gtki
oWY6qIlV5MIndNPjDReZSSb+lxtU8EhWEEjv1vGHAnJzG2Vu9ds39AV3kaCBpFvJ
xBH9DUbnuXA8Pb01+N0WX1XDtsGD6r+xjZ1o6jbOXJ/PZ+v/wLdoiM2vawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKHxvMo6F9or/IbzKW26QWmQvUHzMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvb2ZHOHlqb1gyaXY4aHZNcGJicEJhWkM5UWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVFwMA0G
CSqGSIb3DQEBCwUAA4IBAQBbOGeXQXUbQnDuZTqoX19QW0nXmfpJ5PMHmtA4pp0V
ic9p0SnN+MDjND5B/LtyKXxPH7uL5vmKEhKNBy65wfSklcsg6N7Wr9djikI5MFrC
EliglNLyc62x59M7UIYwpjmb8ho1cMHUGh8P997IJFzS+s5nE1Her8ioY6AY0haO
1ljRKeMYAR4O3GvI8pQi7PgF/cRLMvW1Bao8ewuRxMY51lisGWpCfgNJ9jsPCm9U
G4sp3y0eUHoVOemKDG8wwdMui4ZOzs4cNjo/sa47VkiKRKpdJXNCNKQzq4z8lAFP
zXvDAWl6SDb1otZC3vbo/M6sJ/OhxFsOjMKYU8B9IWgh
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:46 2025 by rpki-client