Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/Ouc3RvEDnyO6PZ6J8vBTm0umZLo.roa
File: Ouc3RvEDnyO6PZ6J8vBTm0umZLo.roa (raw, json)
Hash identifier: O9/4o6Al8uD1wslgbyQKwgMo1+JOp/WhUeraCAmbd1Q=
Subject key identifier: 3A:E7:37:46:F1:03:9F:23:BA:3D:9E:89:F2:F0:53:9B:4B:A6:64:BA
Certificate issuer: /CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Certificate serial: 019420D636BC204FD751FFC98D295ADA0E8F
Authority key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/Ouc3RvEDnyO6PZ6J8vBTm0umZLo.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 176.123.0.0/21 maxlen: 21
176.123.0.0/24 maxlen: 24
176.123.1.0/24 maxlen: 24
176.123.2.0/24 maxlen: 24
176.123.3.0/24 maxlen: 24
176.123.4.0/24 maxlen: 24
176.123.5.0/24 maxlen: 24
176.123.6.0/24 maxlen: 24
176.123.7.0/24 maxlen: 24
176.123.8.0/22 maxlen: 22
176.123.8.0/24 maxlen: 24
176.123.9.0/24 maxlen: 24
176.123.10.0/24 maxlen: 24
176.123.11.0/24 maxlen: 24
2001:678:6d4::/48 maxlen: 48
2001:678:6d4:9990::/60 maxlen: 60
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:36:bc:20:4f:d7:51:ff:c9:8d:29:5a:da:0e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ae73746f1039f23ba3d9e89f2f0539b4ba664ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:b5:db:66:38:20:b4:a3:33:95:ff:56:70:
59:b1:19:b6:d5:10:bc:52:e1:2b:f6:f5:fb:10:48:
d6:fd:6d:d1:0c:31:8f:0f:83:26:d7:a8:9e:1a:a8:
86:30:73:4e:80:24:b3:bd:69:ab:6e:da:e2:81:a2:
2b:1a:40:d1:a7:d6:34:52:ab:0b:28:c5:a9:28:18:
df:fe:3e:f8:bb:58:39:9f:bd:a9:29:66:d2:47:62:
d9:39:a5:3f:77:a2:52:29:f8:bd:64:e6:8d:78:a7:
7e:96:ab:16:de:04:6c:6b:9d:70:25:29:5f:ac:64:
9f:73:48:ec:87:62:ed:45:fb:c2:ce:2e:f4:31:b4:
b9:45:e5:b9:63:5a:d1:4e:2b:5e:ab:d2:12:5f:e5:
86:b4:27:9f:2b:22:e7:37:3b:8c:ec:f9:b7:eb:70:
b9:4c:be:ac:8d:f6:99:e4:da:47:48:6c:13:3a:9c:
5c:e1:d0:9a:70:9d:84:95:c0:7e:3d:36:a6:51:9a:
6f:5e:c1:ea:ad:be:43:e7:fa:36:27:0b:d2:1b:0e:
3e:be:a1:4a:42:87:cc:73:d3:5a:2b:7c:63:1e:04:
c2:fa:92:29:43:31:c9:59:84:8a:3b:e9:4a:26:34:
32:ce:0e:b6:38:41:50:fa:ec:33:de:95:0c:3f:e3:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:37:46:F1:03:9F:23:BA:3D:9E:89:F2:F0:53:9B:4B:A6:64:BA
X509v3 Authority Key Identifier:
keyid:8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/Ouc3RvEDnyO6PZ6J8vBTm0umZLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.0.0-176.123.11.255
IPv6:
2001:678:6d4::/48
Signature Algorithm: sha256WithRSAEncryption
27:81:1b:a8:2b:98:a8:83:9f:39:a6:1f:84:d6:87:ab:c2:2b:
11:2c:81:9e:d3:27:36:c5:65:9a:4c:21:bc:3b:b2:c6:22:14:
9c:db:80:33:02:18:49:ad:88:28:bd:3d:61:a4:42:c1:db:ea:
78:a8:81:7f:3f:a8:12:f9:27:f6:ab:bc:3b:61:f9:fb:18:d0:
bb:de:27:d4:a4:bf:ca:d1:0a:a8:81:75:99:14:50:78:6b:3d:
3d:c9:65:a5:25:7e:0b:ac:68:fc:b9:62:29:71:c4:30:9f:a7:
59:33:15:84:16:31:4d:c8:80:e2:e5:12:d8:c0:b9:0d:81:c2:
8b:e1:1d:75:2d:cf:26:80:ff:6c:63:a2:1f:51:b0:14:6b:30:
97:a7:07:48:2f:38:8d:23:1b:9a:50:c8:00:48:37:9f:4b:94:
5b:bf:e9:e0:43:44:b1:cd:35:da:eb:7c:65:c6:b8:f3:9a:b6:
6d:15:7e:80:29:b8:c0:ab:0c:bb:72:b8:57:49:93:0f:6b:1c:
23:13:cd:d6:f8:b5:eb:19:14:cd:19:8b:d1:fd:57:49:b2:73:
b3:48:f6:f4:05:d8:02:1d:04:57:60:c9:47:80:cb:7e:8c:6b:
c4:93:2b:59:57:c6:a6:f1:56:6d:e4:7c:0d:6d:f2:2d:ee:d2:
3e:af:7d:78
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQg1ja8IE/XUf/JjSla2g6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZDI2YWQ2ZjkxYmE0NDcyODE0YmFlNDg0YThkZjFmNjM0
YzMzNDEwHhcNMjUwMTAxMDc0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWU3Mzc0NmYxMDM5ZjIzYmEzZDllODlmMmYwNTM5YjRiYTY2NGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+q122Y4ILSjM5X/VnBZsRm21RC8
UuEr9vX7EEjW/W3RDDGPD4Mm16ieGqiGMHNOgCSzvWmrbtrigaIrGkDRp9Y0UqsL
KMWpKBjf/j74u1g5n72pKWbSR2LZOaU/d6JSKfi9ZOaNeKd+lqsW3gRsa51wJSlf
rGSfc0jsh2LtRfvCzi70MbS5ReW5Y1rRTiteq9ISX+WGtCefKyLnNzuM7Pm363C5
TL6sjfaZ5NpHSGwTOpxc4dCacJ2ElcB+PTamUZpvXsHqrb5D5/o2JwvSGw4+vqFK
QofMc9NaK3xjHgTC+pIpQzHJWYSKO+lKJjQyzg62OEFQ+uwz3pUMP+NdFwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDrnN0bxA58juj2eifLwU5tLpmS6MB8GA1UdIwQY
MBaAFI/Satb5G6RHKBS65ISo3x9jTDNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZGFkOGYtYjkxOS00NWQxLWFmMTgt
NjM3NDJkMTlhMDEyLzEvT3VjM1J2RURueU82UFo2Sjh2QlRtMHVtWkxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jZGFkOGYtYjkxOS00NWQxLWFmMTgtNjM3NDJkMTlhMDEy
LzEvajlKcTF2a2JwRWNvRkxya2hLamZIMk5NTTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjATBAIAATANMAsDAwCwewME
ArB7CDAPBAIAAjAJAwcAIAEGeAbUMA0GCSqGSIb3DQEBCwUAA4IBAQAngRuoK5io
g585ph+E1oerwisRLIGe0yc2xWWaTCG8O7LGIhSc24AzAhhJrYgovT1hpELB2+p4
qIF/P6gS+Sf2q7w7Yfn7GNC73ifUpL/K0QqogXWZFFB4az09yWWlJX4LrGj8uWIp
ccQwn6dZMxWEFjFNyIDi5RLYwLkNgcKL4R11Lc8mgP9sY6IfUbAUazCXpwdILziN
IxuaUMgASDefS5Rbv+ngQ0SxzTXa63xlxrjzmrZtFX6AKbjAqwy7crhXSZMPaxwj
E83W+LXrGRTNGYvR/VdJsnOzSPb0BdgCHQRXYMlHgMt+jGvEkytZV8am8VZt5HwN
bfIt7tI+r314
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:21 2025 by rpki-client