Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/OEOJwFAahZvwzj87JFWa_SbOMWg.roa
File: OEOJwFAahZvwzj87JFWa_SbOMWg.roa (raw, json)
Hash identifier: kgzUW534tMtjzd2PJ6OMYeaWjMtd+g/tt/n2DYdbR1k=
Subject key identifier: 38:43:89:C0:50:1A:85:9B:F0:CE:3F:3B:24:55:9A:FD:26:CE:31:68
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA3F80105DD2A751F3286DB2AF29EB
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/OEOJwFAahZvwzj87JFWa_SbOMWg.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216081
IP address blocks: 37.114.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3f:80:10:5d:d2:a7:51:f3:28:6d:b2:af:29:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=384389c0501a859bf0ce3f3b24559afd26ce3168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:29:74:2f:f9:14:e8:6f:b2:88:a4:54:2e:
8f:93:58:40:51:52:85:7a:09:2a:36:08:69:a1:86:
bf:61:5c:6e:22:9c:22:2d:e6:b8:d0:5f:59:d1:a9:
4c:41:9e:0a:e6:ec:98:52:04:dc:83:5e:63:b3:ca:
a2:90:48:48:b3:5f:56:b5:a5:9f:da:2c:26:56:5d:
ac:b5:4c:c1:97:d2:e9:60:8e:6f:40:45:56:b9:13:
16:99:12:2c:7f:d9:2e:b6:05:db:e2:26:8f:a8:95:
36:48:64:32:bb:e7:cc:6d:d8:ef:4e:7b:8c:a1:5e:
ba:49:1f:08:5e:62:71:da:a8:53:cf:bb:18:b1:11:
f2:bc:8d:13:31:02:17:9f:d6:c1:d1:a0:25:64:66:
9e:a8:b6:b6:6d:a0:42:30:34:8c:4c:d0:df:91:83:
61:d2:11:50:74:ba:94:88:8b:c7:78:5c:ae:5c:8b:
b2:3f:81:86:8f:8d:83:b3:a3:e9:d8:f8:ad:ef:d3:
e9:5e:a6:9f:6a:81:e9:c4:6b:24:7c:a1:cd:f2:0e:
d5:75:ce:86:bd:36:fe:61:17:da:d4:1b:1b:64:fc:
5b:e0:ff:b5:82:d5:13:c6:3b:2e:b5:0e:0b:d8:f8:
b2:e9:53:e2:67:45:ac:b6:a3:e5:fe:ca:0e:ae:f9:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:89:C0:50:1A:85:9B:F0:CE:3F:3B:24:55:9A:FD:26:CE:31:68
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/OEOJwFAahZvwzj87JFWa_SbOMWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:32:c2:4a:f1:98:8c:f4:04:0b:51:7e:99:74:b4:3c:99:7c:
18:74:79:1b:70:02:30:2a:5b:13:07:0d:ed:7a:70:ea:c6:88:
ee:21:51:69:d8:c2:bd:85:7c:a3:00:ef:e3:10:15:c9:8c:c6:
6d:b6:55:2c:b6:8b:42:ff:2f:26:a4:ec:44:5b:5f:c7:53:5a:
c8:14:6c:6a:ca:22:6a:72:2b:88:62:0b:36:3d:16:d7:f9:0a:
fc:50:4b:b3:2f:40:6b:f4:46:11:66:f9:23:79:83:88:ce:58:
71:67:68:6b:31:c5:55:0c:a7:f3:98:28:62:31:e7:e1:a3:c4:
e9:a9:64:04:57:96:85:1a:9e:8b:d7:1d:b1:aa:f4:e5:bc:ca:
4f:68:3b:fd:dc:18:79:6e:e5:ac:af:f6:7e:75:49:30:e9:c2:
ec:07:75:ce:0a:96:58:58:d8:7c:b4:05:b3:99:9b:c1:1e:3d:
39:a9:e2:25:60:9f:2e:8e:b2:8d:3d:63:63:bc:18:f6:c5:27:
81:3a:0a:70:48:5b:eb:7f:19:31:02:5b:e3:e1:26:35:bb:0f:
4d:6c:ae:e3:db:55:8f:1e:0c:e8:a3:de:3a:30:57:31:66:7b:
89:b0:57:ea:5c:a2:22:35:7a:f7:ce:79:fa:2f:b6:35:e2:65:
bd:04:57:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+j+AEF3Sp1HzKG2yrynrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjUwMTAxMDM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODQzODljMDUwMWE4NTliZjBjZTNmM2IyNDU1OWFmZDI2Y2UzMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS8pdC/5FOhvsoikVC6Pk1hAUVKF
egkqNghpoYa/YVxuIpwiLea40F9Z0alMQZ4K5uyYUgTcg15js8qikEhIs19WtaWf
2iwmVl2stUzBl9LpYI5vQEVWuRMWmRIsf9kutgXb4iaPqJU2SGQyu+fMbdjvTnuM
oV66SR8IXmJx2qhTz7sYsRHyvI0TMQIXn9bB0aAlZGaeqLa2baBCMDSMTNDfkYNh
0hFQdLqUiIvHeFyuXIuyP4GGj42Ds6Pp2Pit79PpXqafaoHpxGskfKHN8g7Vdc6G
vTb+YRfa1BsbZPxb4P+1gtUTxjsutQ4L2Piy6VPiZ0WstqPl/soOrvlXAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhDicBQGoWb8M4/OyRVmv0mzjFoMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvT0VPSndGQWFoWnZ3emo4N0pGV2FfU2JPTVdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJXI9MA0G
CSqGSIb3DQEBCwUAA4IBAQANMsJK8ZiM9AQLUX6ZdLQ8mXwYdHkbcAIwKlsTBw3t
enDqxojuIVFp2MK9hXyjAO/jEBXJjMZttlUstotC/y8mpOxEW1/HU1rIFGxqyiJq
ciuIYgs2PRbX+Qr8UEuzL0Br9EYRZvkjeYOIzlhxZ2hrMcVVDKfzmChiMefho8Tp
qWQEV5aFGp6L1x2xqvTlvMpPaDv93Bh5buWsr/Z+dUkw6cLsB3XOCpZYWNh8tAWz
mZvBHj05qeIlYJ8ujrKNPWNjvBj2xSeBOgpwSFvrfxkxAlvj4SY1uw9NbK7j21WP
Hgzoo946MFcxZnuJsFfqXKIiNXr3znn6L7Y14mW9BFfd
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:32:08 2025 by rpki-client