Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/OXwNzP8LjbH6TWcdoNaukflgQIw.roa
File: OXwNzP8LjbH6TWcdoNaukflgQIw.roa (raw, json)
Hash identifier: 7FOkQ2B0o6NyuacIE5IJomlXcGtJ1C+uqMpIt2z5/74=
Subject key identifier: 39:7C:0D:CC:FF:0B:8D:B1:FA:4D:67:1D:A0:D6:AE:91:F9:60:40:8C
Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial: 0194258FA9908D3DDCE95BA335FC43904275
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/OXwNzP8LjbH6TWcdoNaukflgQIw.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39910
IP address blocks: 80.244.9.0/24 maxlen: 24
185.203.90.0/24 maxlen: 24
2a10:7a40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a9:90:8d:3d:dc:e9:5b:a3:35:fc:43:90:42:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=397c0dccff0b8db1fa4d671da0d6ae91f960408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:20:8e:ab:c7:2d:cc:00:22:66:3f:4c:56:
62:f4:10:41:c7:fc:7f:13:d6:57:b8:6e:ef:15:4e:
9d:56:b6:00:ee:ec:8e:ae:be:c7:56:1f:e9:b2:02:
4f:1d:5f:d9:a5:b7:8e:00:4a:fc:4a:58:34:3f:0b:
92:2a:e3:71:87:c7:8e:46:82:89:8f:5f:6b:7e:eb:
d6:7b:8e:4b:1c:46:1b:ec:ef:03:a9:fa:83:1e:10:
df:01:02:b1:b9:f7:e9:bf:41:cd:b2:79:99:b4:c0:
bc:6e:b6:7b:be:73:86:65:0d:f8:cd:b6:e0:bc:99:
70:e6:c2:33:41:3c:4b:65:0c:50:27:cb:ac:47:2e:
47:de:55:60:af:0b:8f:a8:66:07:a1:ac:28:ca:b6:
a9:d3:52:5f:09:37:4d:0a:39:1e:f7:f6:9d:a3:cd:
c7:42:10:45:e3:af:df:82:3d:37:06:02:b4:03:39:
d5:8c:f7:a4:93:19:a7:29:79:6d:8b:d3:08:fd:7c:
15:c5:bb:f9:e4:a0:fa:eb:19:ee:b9:d3:0e:7f:a0:
49:dc:9b:bf:47:a0:5a:d5:2e:45:54:15:90:0c:5c:
bf:bf:a8:0e:95:ce:10:62:af:0a:51:1d:0d:68:5e:
17:71:2c:da:4d:d1:f9:0c:f0:2d:40:a3:0a:c1:56:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7C:0D:CC:FF:0B:8D:B1:FA:4D:67:1D:A0:D6:AE:91:F9:60:40:8C
X509v3 Authority Key Identifier:
keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/OXwNzP8LjbH6TWcdoNaukflgQIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.9.0/24
185.203.90.0/24
IPv6:
2a10:7a40::/29
Signature Algorithm: sha256WithRSAEncryption
67:83:75:b6:86:40:4c:1a:24:02:31:a8:75:3b:9a:39:4c:f3:
c7:73:3e:e1:54:9c:70:e5:f7:45:ee:15:f0:18:b5:6a:04:86:
55:ef:0e:82:7f:4e:8b:72:7a:e9:27:e0:aa:cd:72:a3:5e:02:
2d:75:41:88:eb:a8:a0:c6:f7:a9:42:7f:be:03:90:8a:d0:ff:
62:de:04:92:7c:97:55:21:3f:6d:1c:3e:c5:de:4e:df:44:00:
c5:f6:18:65:c2:ba:9c:b6:c2:9c:38:04:dd:ed:fd:d9:7b:b1:
5a:c9:57:bb:72:c1:16:30:70:b5:b6:bc:11:17:ae:6c:53:58:
ea:74:f3:3d:e5:af:00:e8:6c:af:c5:84:52:b0:a5:02:a0:61:
b0:51:d1:35:1f:43:8e:d8:f6:02:84:73:e4:91:03:4c:cd:b7:
e2:7f:15:02:56:eb:a0:56:10:85:1e:2f:8a:27:d2:ab:b7:d0:
93:ab:35:c9:88:70:23:d5:0b:be:23:cf:c2:19:a8:61:45:3d:
29:f1:d6:ae:7e:27:ec:0a:f2:59:35:8e:38:cf:b1:3d:ab:a8:
b7:bd:9a:c8:f9:85:f9:ee:03:16:d4:0e:c3:33:a3:51:3b:95:
fb:fb:13:d7:cb:05:bd:b7:46:86:c2:fd:7e:d2:d2:dd:e0:69:
db:95:13:44
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQlj6mQjT3c6VujNfxDkEJ1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYTU4ZDVmMjcxMmNjYzAwNDRiNTllZmE3Y2JjM2U5OGM1
ZmMyNWMwHhcNMjUwMTAyMDU0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTdjMGRjY2ZmMGI4ZGIxZmE0ZDY3MWRhMGQ2YWU5MWY5NjA0MDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUsgjqvHLcwAImY/TFZi9BBBx/x/
E9ZXuG7vFU6dVrYA7uyOrr7HVh/psgJPHV/ZpbeOAEr8Slg0PwuSKuNxh8eORoKJ
j19rfuvWe45LHEYb7O8DqfqDHhDfAQKxuffpv0HNsnmZtMC8brZ7vnOGZQ34zbbg
vJlw5sIzQTxLZQxQJ8usRy5H3lVgrwuPqGYHoawoyrap01JfCTdNCjke9/ado83H
QhBF46/fgj03BgK0AznVjPekkxmnKXlti9MI/XwVxbv55KD66xnuudMOf6BJ3Ju/
R6Ba1S5FVBWQDFy/v6gOlc4QYq8KUR0NaF4XcSzaTdH5DPAtQKMKwVaQzwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDl8Dcz/C42x+k1nHaDWrpH5YECMMB8GA1UdIwQY
MBaAFFqljV8nEszABEtZ76fLw+mMX8JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUt
NTkxOTkzMzFlZTA5LzEvT1h3TnpQOExqYkg2VFdjZG9OYXVrZmxnUUl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUtNTkxOTkzMzFlZTA5
LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAUPQJAwQA
uctaMA0EAgACMAcDBQMqEHpAMA0GCSqGSIb3DQEBCwUAA4IBAQBng3W2hkBMGiQC
Mah1O5o5TPPHcz7hVJxw5fdF7hXwGLVqBIZV7w6Cf06LcnrpJ+CqzXKjXgItdUGI
66igxvepQn++A5CK0P9i3gSSfJdVIT9tHD7F3k7fRADF9hhlwrqctsKcOATd7f3Z
e7FayVe7csEWMHC1trwRF65sU1jqdPM95a8A6GyvxYRSsKUCoGGwUdE1H0OO2PYC
hHPkkQNMzbfifxUCVuugVhCFHi+KJ9Krt9CTqzXJiHAj1Qu+I8/CGahhRT0p8dau
fifsCvJZNY44z7E9q6i3vZrI+YX57gMW1A7DM6NRO5X7+xPXywW9t0aGwv1+0tLd
4GnblRNE
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:24 2025 by rpki-client