Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/o5rwtBSGBeueFoqXJnECfg6cmYA.roa
File: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (raw, json)
Hash identifier: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=
Subject key identifier: A3:9A:F0:B4:14:86:05:EB:9E:16:8A:97:26:71:02:7E:0E:9C:99:80
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019421B207690CF5732BB3B6B3BD487A55FA
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/o5rwtBSGBeueFoqXJnECfg6cmYA.roa
Signing time: Wed 01 Jan 2025 11:48:22 +0000
ROA not before: Wed 01 Jan 2025 11:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8342
IP address blocks: 95.181.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:07:69:0c:f5:73:2b:b3:b6:b3:bd:48:7a:55:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Jan 1 11:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a39af0b4148605eb9e168a972671027e0e9c9980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:e1:86:72:a2:54:e0:80:61:54:40:09:5d:
f6:45:64:f6:d0:b3:b1:6a:79:8b:8d:7d:bd:aa:ab:
11:a4:55:57:e2:5e:30:4e:c3:e6:ce:56:8d:ec:5a:
02:74:81:bb:73:d7:01:9e:51:7b:c2:ce:04:3a:83:
bd:94:3a:ea:c3:95:80:8b:29:72:14:b3:bc:81:03:
37:f0:e0:b0:f9:e2:cf:ee:fa:0e:58:d6:de:d3:71:
ec:08:12:5a:f1:82:8d:cd:cb:b2:20:9a:32:2e:c9:
3f:77:00:90:01:48:86:f9:0f:18:c5:55:5f:47:ba:
60:f4:a4:f7:69:06:fa:bf:ec:03:ac:ec:8a:f6:da:
05:a0:1b:27:9b:87:1a:42:9f:2f:c2:fa:fa:dd:46:
49:04:d0:a3:ff:ad:2e:4a:7b:95:64:36:45:da:3f:
e3:cb:2f:c5:bf:33:92:f8:c3:70:9b:e8:39:84:18:
32:13:82:98:a5:b9:ff:1f:87:f3:0b:c7:69:28:79:
08:43:6d:18:68:2f:03:47:2a:95:a5:04:7c:e4:92:
0f:64:59:bb:1d:79:21:8e:cb:e2:e5:4f:47:f8:f1:
14:c0:e0:c5:97:42:94:19:68:2d:37:e9:70:65:9a:
ae:89:f8:15:13:30:8e:34:2b:de:60:03:db:bb:5d:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9A:F0:B4:14:86:05:EB:9E:16:8A:97:26:71:02:7E:0E:9C:99:80
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/o5rwtBSGBeueFoqXJnECfg6cmYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.163.0/24
Signature Algorithm: sha256WithRSAEncryption
28:44:5f:14:6e:eb:96:95:53:07:02:ee:41:77:94:f3:de:2b:
77:8a:7e:96:9a:2a:94:71:25:5e:d7:45:ec:98:d1:b2:40:11:
9e:20:bc:94:90:ff:a2:48:43:07:69:a7:e9:0c:88:06:a5:77:
31:ab:1f:d9:73:4b:c6:59:e1:43:89:10:41:4b:86:74:5b:63:
0a:e0:cd:f0:98:ce:05:65:a8:af:bf:0b:98:b7:28:0e:5c:ae:
0e:df:aa:2d:9b:ff:13:1a:35:ce:87:63:37:29:00:fa:35:3d:
ac:49:cc:73:c8:a3:99:03:d8:83:e2:a5:cb:38:f1:c0:ca:7d:
8a:98:7e:c3:73:1c:01:33:86:80:b7:84:6c:f2:7d:b3:b9:b3:
a6:e6:02:c6:12:39:c9:32:66:71:b0:ba:e9:0a:a8:c9:3d:2f:
19:2e:6b:07:8e:0d:4c:71:9b:c0:42:cd:3f:e8:62:1f:2b:5b:
69:e1:bb:8b:78:af:83:04:9f:18:e5:2f:2f:d4:9f:b2:37:c5:
da:06:d3:30:5d:dd:6e:89:a0:46:26:7d:d9:17:70:ea:34:75:
95:d7:6a:55:10:d2:2c:11:d0:e4:54:b8:74:e8:16:ba:8e:95:
f9:67:d4:7d:31:60:8e:7a:c0:93:9f:45:dd:52:13:eb:bc:35:
c3:71:80:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsgdpDPVzK7O2s71IelX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1
YTNjMjAwHhcNMjUwMTAxMTE0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzlhZjBiNDE0ODYwNWViOWUxNjhhOTcyNjcxMDI3ZTBlOWM5OTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgfhhnKiVOCAYVRACV32RWT20LOx
anmLjX29qqsRpFVX4l4wTsPmzlaN7FoCdIG7c9cBnlF7ws4EOoO9lDrqw5WAiyly
FLO8gQM38OCw+eLP7voOWNbe03HsCBJa8YKNzcuyIJoyLsk/dwCQAUiG+Q8YxVVf
R7pg9KT3aQb6v+wDrOyK9toFoBsnm4caQp8vwvr63UZJBNCj/60uSnuVZDZF2j/j
yy/FvzOS+MNwm+g5hBgyE4KYpbn/H4fzC8dpKHkIQ20YaC8DRyqVpQR85JIPZFm7
HXkhjsvi5U9H+PEUwODFl0KUGWgtN+lwZZquifgVEzCONCveYAPbu11E7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKOa8LQUhgXrnhaKlyZxAn4OnJmAMB8GA1UdIwQY
MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvbzVyd3RCU0dCZXVlRm9xWEpuRUNmZzZjbVlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX7WjMA0G
CSqGSIb3DQEBCwUAA4IBAQAoRF8UbuuWlVMHAu5Bd5Tz3it3in6WmiqUcSVe10Xs
mNGyQBGeILyUkP+iSEMHaafpDIgGpXcxqx/Zc0vGWeFDiRBBS4Z0W2MK4M3wmM4F
ZaivvwuYtygOXK4O36otm/8TGjXOh2M3KQD6NT2sScxzyKOZA9iD4qXLOPHAyn2K
mH7DcxwBM4aAt4Rs8n2zubOm5gLGEjnJMmZxsLrpCqjJPS8ZLmsHjg1McZvAQs0/
6GIfK1tp4buLeK+DBJ8Y5S8v1J+yN8XaBtMwXd1uiaBGJn3ZF3DqNHWV12pVENIs
EdDkVLh06Ba6jpX5Z9R9MWCOesCTn0XdUhPrvDXDcYCD
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:48 2025 by rpki-client