Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ChwL_auELAjP0K7rtPJCK_ZKQsk.roa
File: ChwL_auELAjP0K7rtPJCK_ZKQsk.roa (raw, json)
Hash identifier: bXzWluGex8TcZK8kowuijNvM2wPM/EIhTgePOlms570=
Subject key identifier: 0A:1C:0B:FD:AB:84:2C:08:CF:D0:AE:EB:B4:F2:42:2B:F6:4A:42:C9
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0197C0EFADA07E11C8B1EE7D5A609808D11A
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ChwL_auELAjP0K7rtPJCK_ZKQsk.roa
Signing time: Mon 30 Jun 2025 13:03:42 +0000
ROA not before: Mon 30 Jun 2025 13:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 212.116.228.0/22 maxlen: 24
212.116.229.0/24 maxlen: 24
212.116.236.0/24 maxlen: 24
212.116.238.0/23 maxlen: 24
212.116.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ef:ad:a0:7e:11:c8:b1:ee:7d:5a:60:98:08:d1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 30 13:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a1c0bfdab842c08cfd0aeebb4f2422bf64a42c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:6d:3e:3e:33:26:06:c1:63:3c:5f:f2:36:
46:96:d9:3b:b4:e4:c3:81:06:e3:81:13:31:4b:8d:
68:4e:fb:8d:92:b8:87:7a:42:6b:ac:d7:89:de:55:
02:44:85:d3:2d:42:ed:d2:d5:14:33:3b:6e:7f:9a:
20:72:4d:c2:c5:79:92:5a:cc:79:32:9b:52:24:5d:
64:79:64:e8:b4:db:99:2b:87:a1:d2:8c:99:ed:78:
f4:82:36:29:1a:ff:4e:3e:62:95:91:07:86:ba:b0:
62:02:fa:11:d5:e3:e7:fc:1c:63:54:4e:1b:72:f4:
a7:ed:2f:5f:cd:cf:38:59:5c:d8:b8:be:5b:d0:8d:
03:4d:27:a2:46:a7:cb:4d:0a:fd:67:f9:aa:9a:b1:
a6:b3:61:5a:e7:2e:cd:3c:b0:14:b6:5f:c0:dc:6f:
88:3f:3d:38:57:a8:b3:0d:7c:30:cb:b5:b2:df:05:
e7:37:ce:23:d4:94:b0:5c:84:34:70:c9:e3:fc:2f:
23:ca:85:5c:40:d3:db:1d:d9:1c:76:bd:0d:a4:f3:
7e:4f:b6:a4:e8:5d:9b:f1:b3:9d:16:52:9f:13:08:
2a:23:16:fa:b4:e7:8a:9d:e7:c3:3b:09:e8:29:95:
9e:03:0d:0e:ae:95:d8:07:98:51:c1:07:5a:53:d4:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1C:0B:FD:AB:84:2C:08:CF:D0:AE:EB:B4:F2:42:2B:F6:4A:42:C9
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/ChwL_auELAjP0K7rtPJCK_ZKQsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.228.0/22
212.116.236.0/24
212.116.238.0/23
212.116.244.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:aa:68:d8:9d:07:fd:a7:8e:e3:38:ad:7b:15:f1:ef:45:d9:
0a:88:38:ed:60:df:51:7b:ea:a5:eb:c5:3b:66:6a:c7:3b:13:
ba:35:2f:12:aa:da:74:6f:21:f7:21:80:fd:85:5f:83:09:65:
61:bd:7a:e6:27:5e:81:40:28:42:34:62:06:9e:50:47:8a:e7:
2e:69:dc:24:7a:68:0b:54:cf:2d:da:d2:c5:f5:a6:ce:3b:c1:
ea:76:68:ef:3c:c5:e1:ec:9b:ff:49:5f:ba:f2:7f:11:61:4b:
72:8f:e2:8c:af:f7:e1:93:2b:5b:d3:f5:ab:d7:79:1d:d0:e7:
33:dd:1b:55:c2:d0:a9:32:0a:90:9b:61:91:10:a5:27:07:77:
fe:e2:cc:30:22:e7:43:dc:b5:75:a9:df:63:73:36:b4:f6:45:
fe:f6:bf:40:47:fa:ab:d2:75:a8:ab:53:c3:ff:35:1c:7c:14:
57:56:a7:cf:ca:14:98:71:33:ab:e3:6a:df:ee:41:bd:4c:52:
87:d7:ac:ca:a5:ac:a1:48:07:c6:71:af:e7:53:0c:94:a8:02:
37:0a:74:72:c1:8f:e0:b4:b1:07:ed:20:60:81:36:89:0e:35:
88:e5:91:a8:be:62:d4:63:e4:b0:69:dd:bf:31:d1:00:f0:dd:
77:a6:cf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:15:39 2025 by rpki-client