Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/oOVgWaswWK83lx4bnEkW14OhMKs.roa
File: oOVgWaswWK83lx4bnEkW14OhMKs.roa (raw, json)
Hash identifier: YCwyUpEoklqLQv5It7tbrU/sEyoMqDnHIRoTVUyhsOs=
Subject key identifier: A0:E5:60:59:AB:30:58:AF:37:97:1E:1B:9C:49:16:D7:83:A1:30:AB
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 019424B38FEB03F71CF0EDB06793B5608872
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/oOVgWaswWK83lx4bnEkW14OhMKs.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24940
IP address blocks: 185.112.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8f:eb:03:f7:1c:f0:ed:b0:67:93:b5:60:88:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a0e56059ab3058af37971e1b9c4916d783a130ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8b:d0:a3:be:bd:39:b7:36:14:84:4b:68:10:
a5:29:e5:88:65:0f:00:67:78:1d:00:c8:c1:d6:4e:
06:03:7d:d2:3e:0b:4a:59:d3:22:c8:bd:85:2d:70:
75:fe:fc:20:83:2f:34:f2:dc:e8:b4:93:79:1d:a0:
8d:ae:a2:3d:98:4f:88:21:79:39:e0:c0:91:3e:bf:
dd:6d:b3:bc:27:27:e7:e8:70:8e:59:3e:f4:08:69:
0d:45:9f:51:75:71:40:bc:55:ea:f9:54:5f:d7:4a:
82:e4:06:7c:45:21:df:db:29:64:ed:9b:a1:3e:c1:
2c:5d:d8:b8:f4:8e:9f:8d:a5:b7:65:ac:b4:2a:25:
3e:11:8b:0d:aa:c6:52:37:f4:c9:35:b1:3c:14:d4:
56:1f:9d:e0:70:0c:ed:42:06:1c:ec:b7:45:4d:df:
10:d0:55:08:6f:74:c9:2b:96:80:15:fa:40:39:af:
fc:b3:5f:80:83:b6:81:63:dd:2e:e4:7b:8f:d5:a9:
a6:3c:2d:f5:30:5c:3a:d3:68:3f:b5:ac:5a:37:70:
a6:f4:61:68:94:3a:38:65:42:6f:29:e8:c9:b9:5e:
28:f9:6a:73:a2:6e:c5:51:29:ea:37:bc:cb:ea:dc:
38:ba:54:a4:4f:0f:d7:28:94:44:be:84:91:3a:7d:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:60:59:AB:30:58:AF:37:97:1E:1B:9C:49:16:D7:83:A1:30:AB
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/oOVgWaswWK83lx4bnEkW14OhMKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.180.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:fd:38:a3:6b:96:ab:28:24:a5:6a:46:da:c6:d2:84:34:33:
65:39:1f:d1:d6:3d:ec:e7:9c:b9:95:16:55:d7:1a:4a:a7:73:
0c:b8:46:84:ae:87:2e:e2:27:96:b3:3f:fb:6d:1c:75:e0:22:
67:64:4b:06:7b:39:30:23:d1:a8:fe:e6:46:af:b8:9a:4f:24:
bd:e2:35:8c:9c:34:3f:24:dd:81:10:a1:09:46:c0:bc:03:de:
6b:fe:39:79:4b:98:25:8b:60:75:c5:e7:71:bb:35:33:7d:a9:
08:9a:74:55:b3:75:6b:5f:64:25:f3:c9:b6:cb:4e:fa:43:4f:
f8:2d:f7:61:32:2c:3f:39:3d:27:39:51:ef:db:5e:43:ff:94:
1a:c9:88:e2:7d:f3:36:5f:94:d0:6e:c5:35:7d:e3:16:ff:e6:
a3:8a:d0:99:1f:c8:88:b4:61:aa:f8:a6:d8:45:6b:65:30:41:
51:8e:30:a8:b8:f7:20:69:5c:81:61:a0:12:34:7c:f6:04:55:
97:88:e2:4f:1c:47:63:c8:02:13:bf:00:e6:54:a5:3a:fa:c6:
ac:f1:e8:91:59:0b:89:0e:0f:fa:cf:94:af:54:20:b4:2f:20:
fa:d9:f0:69:b7:a4:39:94:cc:2a:0b:2f:d3:7c:e7:25:4f:e8:
eb:3f:03:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks4/rA/cc8O2wZ5O1YIhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MDBkNTAxM2MxMjg1MjI0MjM0MzA5M2NiZjUxNDhkNGVh
ZWFhZjkwHhcNMjUwMTAyMDE0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGU1NjA1OWFiMzA1OGFmMzc5NzFlMWI5YzQ5MTZkNzgzYTEzMGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYvQo769Obc2FIRLaBClKeWIZQ8A
Z3gdAMjB1k4GA33SPgtKWdMiyL2FLXB1/vwggy808tzotJN5HaCNrqI9mE+IIXk5
4MCRPr/dbbO8Jyfn6HCOWT70CGkNRZ9RdXFAvFXq+VRf10qC5AZ8RSHf2ylk7Zuh
PsEsXdi49I6fjaW3Zay0KiU+EYsNqsZSN/TJNbE8FNRWH53gcAztQgYc7LdFTd8Q
0FUIb3TJK5aAFfpAOa/8s1+Ag7aBY90u5HuP1ammPC31MFw602g/taxaN3Cm9GFo
lDo4ZUJvKejJuV4o+Wpzom7FUSnqN7zL6tw4ulSkTw/XKJREvoSROn0o9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKDlYFmrMFivN5ceG5xJFteDoTCrMB8GA1UdIwQY
MBaAFHQA1QE8EoUiQjQwk8v1FI1Orqr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85NWQ3MWQtZjQxYi00MTcxLTgzNTAt
ZTA4OTJhMjhhYWM5LzEvb09WZ1dhc3dXSzgzbHg0Ym5Fa1cxNE9oTUtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85NWQ3MWQtZjQxYi00MTcxLTgzNTAtZTA4OTJhMjhhYWM5
LzEvZEFEVkFUd1NoU0pDTkRDVHlfVVVqVTZ1cXZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXC0MA0G
CSqGSIb3DQEBCwUAA4IBAQBu/Tija5arKCSlakbaxtKENDNlOR/R1j3s55y5lRZV
1xpKp3MMuEaErocu4ieWsz/7bRx14CJnZEsGezkwI9Go/uZGr7iaTyS94jWMnDQ/
JN2BEKEJRsC8A95r/jl5S5gli2B1xedxuzUzfakImnRVs3VrX2Ql88m2y076Q0/4
LfdhMiw/OT0nOVHv215D/5QayYjiffM2X5TQbsU1feMW/+ajitCZH8iItGGq+KbY
RWtlMEFRjjCouPcgaVyBYaASNHz2BFWXiOJPHEdjyAITvwDmVKU6+sas8eiRWQuJ
Dg/6z5SvVCC0LyD62fBpt6Q5lMwqCy/TfOclT+jrPwOU
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:42:15 2025 by rpki-client