Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/ofJM-BOf8d42dE82c9Ub9dgl42A.roa
File: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (raw, json)
Hash identifier: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=
Subject key identifier: A1:F2:4C:F8:13:9F:F1:DE:36:74:4F:36:73:D5:1B:F5:D8:25:E3:60
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 019424B262B2AC5E74A75CD4180DE00D84A5
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/ofJM-BOf8d42dE82c9Ub9dgl42A.roa
Signing time: Thu 02 Jan 2025 01:47:37 +0000
ROA not before: Thu 02 Jan 2025 01:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51814
IP address blocks: 185.107.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:62:b2:ac:5e:74:a7:5c:d4:18:0d:e0:0d:84:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 2 01:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1f24cf8139ff1de36744f3673d51bf5d825e360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:91:42:b7:00:d6:83:9a:7d:1a:85:b3:b9:
e1:d2:54:7d:f1:f4:01:5e:db:8e:a7:5d:62:55:63:
87:f0:00:04:4f:0a:64:62:39:a4:f9:ba:c2:d2:6d:
9f:84:00:8a:9e:bb:39:5a:03:fc:59:a7:fa:f2:9d:
a3:ee:9f:19:86:4a:a2:21:be:d8:2f:f7:a0:7a:c8:
4b:fc:cd:38:89:fc:1f:59:e4:20:c9:8d:f2:a3:d5:
aa:2a:6a:fc:93:4d:6d:51:9f:4b:6d:b1:f8:76:de:
fa:35:98:16:fa:35:3e:7e:44:28:9a:cb:b6:03:d5:
0e:75:77:39:ec:ae:f5:1d:0e:2f:da:f2:bd:4c:23:
48:a8:6e:9f:60:7e:e3:99:76:21:f8:e2:56:2b:cc:
12:c9:28:3b:f5:05:bf:e4:2c:61:eb:8e:88:e1:e6:
c1:36:20:ee:ae:55:9f:c3:fe:b0:97:98:58:7f:fa:
a5:ca:0d:70:6a:a6:10:6a:6c:6a:c5:2d:48:09:75:
2c:3e:e9:ae:3c:21:e0:06:93:b4:64:e7:f9:d6:62:
58:72:b4:76:1a:ee:a5:58:83:bb:df:a3:0b:d2:f6:
65:94:87:cb:75:aa:68:51:97:52:cf:fc:0a:40:dc:
32:87:04:e4:d4:8b:d0:32:42:91:82:66:ca:ef:b0:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:4C:F8:13:9F:F1:DE:36:74:4F:36:73:D5:1B:F5:D8:25:E3:60
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/ofJM-BOf8d42dE82c9Ub9dgl42A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.133.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b4:2b:e9:e1:a1:21:a5:f8:a3:40:33:c0:eb:a9:2c:2f:6b:
82:40:18:d7:03:9c:65:62:96:41:40:c9:8e:71:60:25:c5:80:
6d:60:bb:ce:5c:ec:ff:a4:e9:f2:76:56:15:db:e1:d7:cb:3b:
b2:74:e8:5e:eb:eb:f5:d6:d4:04:14:a1:4b:7e:29:3e:01:7b:
0e:e4:3e:1c:30:f0:3d:c9:ef:eb:01:ad:0c:07:d2:5b:c6:bc:
0b:2b:82:c9:f9:96:50:c8:19:b5:0b:08:1f:5f:63:48:d5:fd:
17:eb:cc:56:db:0f:5e:3e:95:45:9f:77:66:27:0c:dc:a1:33:
98:b7:bd:de:6f:75:52:eb:7a:73:c1:df:cc:91:6d:d6:e0:00:
7a:6c:97:72:77:55:80:32:c2:a5:37:36:d1:fd:89:c3:75:9c:
bc:df:ef:c0:7a:a4:02:67:e8:ea:81:1a:f6:6a:72:44:78:fe:
77:1a:57:c8:ad:6c:7d:ad:8e:b5:54:17:03:ed:20:1e:bc:8d:
2b:37:93:31:87:8c:e5:2f:7c:eb:5a:d7:44:ce:d5:74:8e:81:
f8:88:ba:69:2e:dc:7b:39:40:02:95:87:23:f4:ef:44:6b:a1:
4b:54:a7:f9:ef:5b:17:de:72:ed:14:d5:27:f4:25:f4:97:a8:
88:42:18:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksmKyrF50p1zUGA3gDYSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw
NmViNzkwHhcNMjUwMTAyMDE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWYyNGNmODEzOWZmMWRlMzY3NDRmMzY3M2Q1MWJmNWQ4MjVlMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHuRQrcA1oOafRqFs7nh0lR98fQB
XtuOp11iVWOH8AAETwpkYjmk+brC0m2fhACKnrs5WgP8Waf68p2j7p8ZhkqiIb7Y
L/egeshL/M04ifwfWeQgyY3yo9WqKmr8k01tUZ9LbbH4dt76NZgW+jU+fkQomsu2
A9UOdXc57K71HQ4v2vK9TCNIqG6fYH7jmXYh+OJWK8wSySg79QW/5Cxh646I4ebB
NiDurlWfw/6wl5hYf/qlyg1waqYQamxqxS1ICXUsPumuPCHgBpO0ZOf51mJYcrR2
Gu6lWIO736ML0vZllIfLdapoUZdSz/wKQNwyhwTk1IvQMkKRgmbK77AInQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKHyTPgTn/HeNnRPNnPVG/XYJeNgMB8GA1UdIwQY
MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt
MWUwZThiOTA5ZTM0LzEvb2ZKTS1CT2Y4ZDQyZEU4MmM5VWI5ZGdsNDJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0
LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWuFMA0G
CSqGSIb3DQEBCwUAA4IBAQBDtCvp4aEhpfijQDPA66ksL2uCQBjXA5xlYpZBQMmO
cWAlxYBtYLvOXOz/pOnydlYV2+HXyzuydOhe6+v11tQEFKFLfik+AXsO5D4cMPA9
ye/rAa0MB9JbxrwLK4LJ+ZZQyBm1CwgfX2NI1f0X68xW2w9ePpVFn3dmJwzcoTOY
t73eb3VS63pzwd/MkW3W4AB6bJdyd1WAMsKlNzbR/YnDdZy83+/AeqQCZ+jqgRr2
anJEeP53GlfIrWx9rY61VBcD7SAevI0rN5Mxh4zlL3zrWtdEztV0joH4iLppLtx7
OUAClYcj9O9Ea6FLVKf571sX3nLtFNUn9CX0l6iIQhhK
-----END CERTIFICATE-----
Generated at Wed Apr 9 05:32:33 2025 by rpki-client