Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa
File: OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa (raw, json)
Hash identifier: Adg8t51EAwBbzjl4kDJAi92mlZw1Om+k918pc8UAy2M=
Subject key identifier: 3A:6C:11:A0:9D:C9:3E:EE:57:D3:C5:E9:FD:7D:7F:DE:A1:35:23:B9
Certificate issuer: /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial: 019425FD9A8587F6F32DDC13897B17B4BF5E
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa
Signing time: Thu 02 Jan 2025 07:49:24 +0000
ROA not before: Thu 02 Jan 2025 07:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211216
IP address blocks: 81.31.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9a:85:87:f6:f3:2d:dc:13:89:7b:17:b4:bf:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Validity
Not Before: Jan 2 07:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a6c11a09dc93eee57d3c5e9fd7d7fdea13523b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:81:dc:54:3c:6c:ba:42:95:15:1c:7d:ac:
8f:e1:d1:89:cb:fd:f4:94:4d:51:4a:76:7b:4d:35:
a8:8e:8e:18:8a:7e:59:27:74:92:b3:11:f6:d0:d4:
6d:80:1f:29:29:4e:2d:b5:df:1b:44:1b:91:11:c3:
ab:d0:f3:85:c4:68:eb:42:76:f1:b3:27:b7:2b:13:
ba:d4:3a:ef:73:fa:ee:cf:bb:3d:c3:1f:6a:dd:7b:
3f:bd:88:4f:43:23:7c:e2:86:e8:a3:c5:44:61:90:
cc:2a:95:29:55:50:8c:03:53:75:af:15:82:bc:ef:
38:d4:51:84:10:04:d8:9d:e6:b6:f4:3f:30:2f:05:
d3:e0:24:9f:36:b0:f2:4f:d8:ff:1f:07:f7:ca:1b:
94:45:48:60:e8:d6:fe:68:8b:9b:e6:48:c5:14:ec:
66:6d:1c:58:72:04:9d:0a:06:81:44:8c:ef:9d:45:
0c:2a:a1:93:ce:4a:93:35:9a:db:dc:16:10:eb:77:
ba:2c:df:e0:77:8b:a8:6f:bc:1b:bf:e6:90:42:c6:
4f:36:b8:46:48:a2:9f:19:6e:5e:78:9d:9b:39:2f:
74:91:4c:12:82:16:9d:14:a2:1d:d9:01:f0:e0:48:
70:7d:89:ad:d9:c4:53:1a:6f:83:76:36:6c:75:cd:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6C:11:A0:9D:C9:3E:EE:57:D3:C5:E9:FD:7D:7F:DE:A1:35:23:B9
X509v3 Authority Key Identifier:
keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.196.0/24
Signature Algorithm: sha256WithRSAEncryption
26:96:0f:3a:ad:7c:f5:0e:cb:77:71:ca:9b:48:af:59:ba:73:
ca:8c:fe:61:36:97:e8:71:0c:d0:aa:db:3f:ca:d3:fd:0a:e3:
47:6a:53:ad:cf:f4:e4:3d:60:96:46:3b:82:57:d7:09:56:a7:
71:60:b1:40:69:7f:e8:8e:45:2b:2a:0a:cc:77:76:e6:ac:b2:
d2:db:7d:bf:5a:54:6d:ed:3c:6a:c7:99:9d:c2:5e:27:b3:5d:
5c:15:a6:32:8b:2c:32:8b:f3:62:91:67:d3:e8:de:69:69:ab:
eb:e9:6f:81:c2:12:fa:28:18:42:ec:35:37:3c:a3:75:00:90:
69:fc:d6:11:94:4c:03:e3:21:48:d9:e9:00:65:db:17:35:49:
32:ac:bc:96:55:33:f2:9a:5c:90:92:f5:39:fd:94:95:a6:8a:
f7:8a:9f:0c:77:0c:3c:aa:8c:e0:92:e0:87:fb:67:e9:65:27:
b3:37:83:f1:ad:91:c5:32:40:02:d7:88:86:dc:53:f9:9b:f5:
da:4b:74:fb:02:81:4a:4c:2d:e2:45:ce:12:01:d1:71:c6:43:
ac:17:9f:5a:0e:b4:89:9f:0f:2a:ae:9e:29:3d:95:95:29:59:
0f:27:60:23:71:fc:03:3a:0d:20:e5:95:fa:b0:71:6d:4e:5d:
08:c5:70:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/ZqFh/bzLdwTiXsXtL9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMTM2ZTAxZmZhZjg1M2RiYjJhNWNmY2ZlNWQxYjY3ZDIw
YzIwYjUwHhcNMjUwMTAyMDc0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTZjMTFhMDlkYzkzZWVlNTdkM2M1ZTlmZDdkN2ZkZWExMzUyM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKeB3FQ8bLpClRUcfayP4dGJy/30
lE1RSnZ7TTWojo4Yin5ZJ3SSsxH20NRtgB8pKU4ttd8bRBuREcOr0POFxGjrQnbx
sye3KxO61Drvc/ruz7s9wx9q3Xs/vYhPQyN84oboo8VEYZDMKpUpVVCMA1N1rxWC
vO841FGEEATYnea29D8wLwXT4CSfNrDyT9j/Hwf3yhuURUhg6Nb+aIub5kjFFOxm
bRxYcgSdCgaBRIzvnUUMKqGTzkqTNZrb3BYQ63e6LN/gd4uob7wbv+aQQsZPNrhG
SKKfGW5eeJ2bOS90kUwSghadFKId2QHw4EhwfYmt2cRTGm+DdjZsdc26QQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDpsEaCdyT7uV9PF6f19f96hNSO5MB8GA1UdIwQY
MBaAFM8TbgH/r4U9uypc/P5dG2fSDCC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MDI1NjQtNTBhNS00ZmFkLWExMmYt
NjVkYmE2M2IxYTgyLzEvT213Um9KM0pQdTVYMDhYcF9YMV8zcUUxSTdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83MDI1NjQtNTBhNS00ZmFkLWExMmYtNjVkYmE2M2IxYTgy
LzEvenhOdUFmLXZoVDI3S2x6OF9sMGJaOUlNSUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR/EMA0G
CSqGSIb3DQEBCwUAA4IBAQAmlg86rXz1Dst3ccqbSK9ZunPKjP5hNpfocQzQqts/
ytP9CuNHalOtz/TkPWCWRjuCV9cJVqdxYLFAaX/ojkUrKgrMd3bmrLLS232/WlRt
7Txqx5mdwl4ns11cFaYyiywyi/NikWfT6N5paavr6W+BwhL6KBhC7DU3PKN1AJBp
/NYRlEwD4yFI2ekAZdsXNUkyrLyWVTPymlyQkvU5/ZSVpor3ip8Mdww8qozgkuCH
+2fpZSezN4PxrZHFMkAC14iG3FP5m/XaS3T7AoFKTC3iRc4SAdFxxkOsF59aDrSJ
nw8qrp4pPZWVKVkPJ2AjcfwDOg0g5ZX6sHFtTl0IxXAc
-----END CERTIFICATE-----
Generated at Sun Feb 2 08:48:09 2025 by rpki-client