Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa
File: OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa (raw, json)
Hash identifier: GAxHkIIERYjerOgQkJ6KzahFSgbI1tnYkcltOUuSvzI=
Subject key identifier: 39:62:AA:90:AF:96:C3:74:50:98:7D:7A:C4:DC:55:5A:22:EF:3B:C2
Certificate issuer: /CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Certificate serial: 019420686F182BA1D9C42F82DB8C6E404C85
Authority key identifier: 81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa
Signing time: Wed 01 Jan 2025 05:48:22 +0000
ROA not before: Wed 01 Jan 2025 05:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209448
IP address blocks: 5.253.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6f:18:2b:a1:d9:c4:2f:82:db:8c:6e:40:4c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a021d540ed7d82c690adc04fbd9dd6ee50e8d5
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3962aa90af96c37450987d7ac4dc555a22ef3bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:f5:5b:8c:1e:44:82:f4:e6:62:25:5f:51:
31:be:78:46:13:31:f0:31:6f:ff:fa:46:75:52:c1:
41:4d:a8:bc:29:44:8a:62:fd:38:6e:b4:65:af:a5:
61:6d:93:0b:28:a9:26:5a:0c:35:80:af:32:fa:f9:
45:dc:7f:25:73:99:cb:a5:6a:0b:bd:33:35:59:24:
a3:49:43:f4:dc:8d:ef:66:1e:90:b8:d2:bb:3a:df:
3f:9e:81:73:b3:98:04:6d:69:8d:75:96:60:7e:61:
7e:f4:4e:06:e1:d1:b3:df:fa:c5:73:db:e2:2d:99:
4a:c0:42:88:6a:45:d1:a9:0b:26:85:10:0d:b9:65:
41:5b:cd:1a:e5:98:df:1c:6c:a9:6c:48:c8:e5:96:
6b:1e:13:ca:4c:2f:21:c9:1d:46:74:f9:7d:1f:84:
b0:a6:77:60:68:fa:8a:2f:68:0f:d7:b6:63:fe:73:
20:93:af:15:c3:81:f6:ae:b8:c5:e2:2e:c5:61:5d:
91:f6:4c:cb:fe:5c:a0:4d:f5:f3:eb:80:49:32:a8:
5b:e8:84:65:93:68:99:89:fc:c7:4d:bc:df:f9:4f:
dc:b7:38:36:be:3a:1c:06:de:79:79:7a:7d:c8:c5:
43:f1:c2:ef:25:08:be:a5:55:62:6a:6f:73:4a:af:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:62:AA:90:AF:96:C3:74:50:98:7D:7A:C4:DC:55:5A:22:EF:3B:C2
X509v3 Authority Key Identifier:
keyid:81:A0:21:D5:40:ED:7D:82:C6:90:AD:C0:4F:BD:9D:D6:EE:50:E8:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gaAh1UDtfYLGkK3AT72d1u5Q6NU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/OWKqkK-Ww3RQmH16xNxVWiLvO8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2b946-1b4a-4214-9234-ad027327f9d8/1/gaAh1UDtfYLGkK3AT72d1u5Q6NU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.164.0/22
Signature Algorithm: sha256WithRSAEncryption
87:7e:15:46:a4:53:84:df:54:38:81:91:5a:8a:ed:09:d2:30:
b8:a1:92:f1:fc:78:32:8e:a1:be:58:30:73:63:91:c7:ef:90:
23:46:88:e6:49:3a:bf:70:0c:bc:dc:48:55:38:43:c6:1e:8e:
2c:0a:3b:a1:5d:7c:af:9d:55:76:b1:55:78:f8:2f:86:53:b0:
17:9e:08:c3:d5:43:75:4c:f5:ff:75:6c:4d:f8:60:5b:bf:f2:
39:0a:1f:c2:a0:2c:53:dd:6b:e5:04:1a:b4:c9:ad:1c:7d:b1:
56:1b:d1:d8:81:ad:10:2a:ca:94:e1:94:05:33:d2:53:43:46:
31:eb:92:a5:4e:7a:03:56:70:c7:22:71:49:b3:c0:28:0a:8d:
f8:34:e8:74:77:51:16:81:c1:61:f0:dc:b5:df:6d:1a:87:00:
29:3e:7f:1d:64:ac:1d:a7:fb:72:d8:d9:40:1e:de:df:d0:16:
14:9e:76:96:c7:c3:b5:42:dc:c1:e4:c3:db:5e:7c:7c:91:6e:
ea:ca:d7:6a:17:29:e9:47:19:0e:47:a1:77:37:6b:e8:c4:2e:
a9:2e:0f:67:16:df:62:95:3a:07:e7:98:22:ac:9f:c2:b0:10:
e4:a5:70:a3:15:ab:35:39:6b:c1:7c:24:78:c5:18:5d:53:e1:
64:8a:ab:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:19:22 2025 by rpki-client