Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/OoklI3kvpUu2QON6vzr_znMlb4o.roa
File: OoklI3kvpUu2QON6vzr_znMlb4o.roa (raw, json)
Hash identifier: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=
Subject key identifier: 3A:89:25:23:79:2F:A5:4B:B6:40:E3:7A:BF:3A:FF:CE:73:25:6F:8A
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194228E06BA6E9AE1D69C6C62D5E4621680
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/OoklI3kvpUu2QON6vzr_znMlb4o.roa
Signing time: Wed 01 Jan 2025 15:48:40 +0000
ROA not before: Wed 01 Jan 2025 15:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44558
IP address blocks: 92.45.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:06:ba:6e:9a:e1:d6:9c:6c:62:d5:e4:62:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 1 15:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a892523792fa54bb640e37abf3affce73256f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:09:b5:dc:3c:f3:14:aa:83:dc:59:ab:19:63:
13:ca:8b:45:f3:9c:7e:ff:10:2a:f0:c3:c8:a9:87:
19:83:94:9f:c5:ff:4f:18:8c:af:64:4e:43:ba:9f:
6c:56:c1:0f:3e:1d:71:47:d4:2f:62:fa:53:4b:55:
c5:56:f7:8d:db:30:a1:c9:d0:6f:b0:50:43:d7:63:
cf:ed:73:db:a2:a3:c6:c1:fb:11:d2:08:99:39:00:
6b:e3:99:25:f0:f6:e2:8f:ad:2d:a5:58:99:0c:68:
cf:26:e4:31:4b:71:38:b0:84:c1:c5:80:88:47:f7:
e4:16:d0:2f:ee:70:f8:e8:3f:bb:bf:04:c7:c6:cc:
67:f1:da:69:f8:f9:e7:ae:a3:5a:e0:01:c6:cd:33:
ab:c5:d0:da:63:b1:f6:1f:ac:ed:d3:63:0d:72:05:
7f:99:1f:3b:6a:09:ae:6e:7e:e5:f8:be:86:b3:b8:
f1:9f:7a:52:47:4a:e2:01:2f:8d:0d:ab:8e:f4:90:
98:0c:d4:51:42:9d:14:1c:da:6d:92:3b:25:b1:e1:
6c:2e:50:47:88:cb:c7:0c:9a:fc:cc:93:0d:a9:90:
8f:39:29:fe:25:b0:f0:00:d7:70:67:b6:e7:08:5c:
1a:20:55:fa:b7:fa:9e:ac:ac:e7:1d:66:3c:59:ae:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:89:25:23:79:2F:A5:4B:B6:40:E3:7A:BF:3A:FF:CE:73:25:6F:8A
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/OoklI3kvpUu2QON6vzr_znMlb4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.45.100.0/24
Signature Algorithm: sha256WithRSAEncryption
03:51:f9:39:9c:b0:b4:2e:4a:24:7a:6b:00:55:cc:2b:4a:52:
8a:b6:ad:9c:6e:e7:a5:80:64:03:9f:e3:83:c2:82:b8:b3:43:
99:27:de:96:e5:a8:e7:d5:49:fc:e0:23:38:74:60:9a:16:94:
56:03:bb:28:98:56:d8:1b:da:f7:e9:69:0e:dc:98:29:ab:de:
7d:71:5c:66:fc:7a:1f:75:3c:e1:d3:af:c9:69:c4:4e:99:44:
c1:e8:2e:e3:fb:92:c5:d7:97:87:24:36:cc:b8:f5:d6:e4:65:
55:b8:c3:00:11:f8:9c:67:d2:da:e9:4d:0f:44:40:53:a7:de:
9d:d9:e0:83:a2:ca:a6:65:e6:cd:10:1c:a6:ad:07:91:5e:ce:
56:be:ba:0e:b5:79:b3:6b:a0:eb:42:89:2a:9a:e8:a8:33:8a:
2c:61:01:ed:3b:6a:bd:c7:28:df:38:cb:04:d9:2a:f9:e8:15:
00:5a:44:3c:e9:fc:16:3f:1d:cf:a9:ba:b5:61:a3:bb:3f:71:
19:7a:b8:b4:f4:c4:15:c2:93:6e:8f:5b:25:22:43:a7:87:38:
e9:92:d4:54:7c:38:9c:5c:6d:fc:40:f8:73:bf:15:5a:f1:65:
ea:41:c9:b9:b0:f8:f8:72:08:50:3e:42:4c:35:78:75:f9:87:
1b:6c:72:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijga6bprh1pxsYtXkYhaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw
NGNlMmIwHhcNMjUwMTAxMTU0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTg5MjUyMzc5MmZhNTRiYjY0MGUzN2FiZjNhZmZjZTczMjU2ZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQm13DzzFKqD3FmrGWMTyotF85x+
/xAq8MPIqYcZg5Sfxf9PGIyvZE5Dup9sVsEPPh1xR9QvYvpTS1XFVveN2zChydBv
sFBD12PP7XPboqPGwfsR0giZOQBr45kl8Pbij60tpViZDGjPJuQxS3E4sITBxYCI
R/fkFtAv7nD46D+7vwTHxsxn8dpp+PnnrqNa4AHGzTOrxdDaY7H2H6zt02MNcgV/
mR87agmubn7l+L6Gs7jxn3pSR0riAS+NDauO9JCYDNRRQp0UHNptkjslseFsLlBH
iMvHDJr8zJMNqZCPOSn+JbDwANdwZ7bnCFwaIFX6t/qerKznHWY8Wa4c/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDqJJSN5L6VLtkDjer86/85zJW+KMB8GA1UdIwQY
MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt
NWQ1ODRmYmM1ZDI3LzEvT29rbEkza3ZwVXUyUU9ONnZ6cl96bk1sYjRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3
LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXC1kMA0G
CSqGSIb3DQEBCwUAA4IBAQADUfk5nLC0LkokemsAVcwrSlKKtq2cbuelgGQDn+OD
woK4s0OZJ96W5ajn1Un84CM4dGCaFpRWA7somFbYG9r36WkO3Jgpq959cVxm/Hof
dTzh06/JacROmUTB6C7j+5LF15eHJDbMuPXW5GVVuMMAEficZ9La6U0PREBTp96d
2eCDosqmZebNEBymrQeRXs5WvroOtXmza6DrQokqmuioM4osYQHtO2q9xyjfOMsE
2Sr56BUAWkQ86fwWPx3Pqbq1YaO7P3EZeri09MQVwpNuj1slIkOnhzjpktRUfDic
XG38QPhzvxVa8WXqQcm5sPj4cghQPkJMNXh1+YcbbHL/
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:56:07 2025 by rpki-client