Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa
File: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (raw, json)
Hash identifier: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=
Subject key identifier: A1:0E:A2:BB:94:78:16:99:B4:62:3C:6E:C3:5A:8B:5E:77:08:E1:26
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 0194258F7E4D485CCD2EEDFF9C67A045CC8C
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211841
IP address blocks: 194.127.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7e:4d:48:5c:cd:2e:ed:ff:9c:67:a0:45:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a10ea2bb94781699b4623c6ec35a8b5e7708e126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:5d:b8:9a:80:83:56:00:e4:cb:4c:d1:ab:
47:12:6a:44:7f:a9:04:60:9d:1d:4f:d2:63:0f:a7:
a1:79:59:05:17:84:16:38:60:4b:b9:cf:f5:27:b1:
f4:61:90:ac:31:20:30:93:e8:9c:15:a7:65:da:0b:
85:51:51:b2:0d:33:a3:00:3b:e0:78:bf:d7:df:d3:
c8:76:f0:4b:eb:0a:cc:a0:37:2f:32:0a:70:24:95:
30:3a:75:80:36:42:77:76:fe:cd:5f:e8:0b:70:68:
a7:f1:03:e3:08:b3:47:d8:a4:a6:17:f0:3e:ec:c2:
9e:45:26:36:18:80:01:c3:f2:82:fe:fc:db:0c:75:
94:52:27:9e:44:62:6b:75:f7:4f:74:18:26:f3:3d:
07:19:a0:76:2f:cb:5c:39:55:a3:c2:05:29:53:a2:
fd:6b:b1:8e:17:06:cd:b7:a0:d1:f3:50:86:6a:82:
fa:5c:37:7a:1b:d0:4e:d7:0f:6e:3a:af:88:c9:9a:
4d:7e:4c:50:a7:3b:d2:4d:16:af:79:61:4e:91:05:
42:60:3f:0b:a5:8a:03:a1:22:08:33:56:65:a5:08:
61:99:42:f6:b0:8f:8e:f8:8a:e1:10:e0:4c:81:5f:
82:f5:6c:21:b6:ed:f9:94:93:55:f8:d2:24:9c:8e:
ee:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0E:A2:BB:94:78:16:99:B4:62:3C:6E:C3:5A:8B:5E:77:08:E1:26
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ee:da:a4:25:94:be:ff:33:52:0e:ca:1d:4f:af:01:b9:c1:
9e:a0:4a:48:07:78:d1:da:c5:93:16:52:80:b5:32:bc:0e:17:
af:6a:c1:f0:37:7e:be:02:c3:44:20:5b:a7:dc:61:48:d9:32:
5d:e1:06:f5:b0:75:da:74:7f:89:2a:e7:a0:61:db:89:bf:bf:
84:4c:33:70:63:21:46:37:e0:89:49:7c:6e:8e:c9:a1:cb:33:
ef:5f:7d:0b:94:1a:1a:c5:93:43:14:4f:94:83:d0:06:4f:c8:
8a:a2:93:f7:24:bb:35:3c:6f:d7:20:24:27:26:b1:f6:69:5b:
48:c4:2e:c0:17:a7:f9:bb:19:58:77:ee:63:e6:d4:d0:75:84:
db:79:40:2e:47:98:48:6f:fb:19:b7:79:7b:43:be:18:06:5f:
4e:f8:bc:f3:a2:d0:d7:2d:56:ab:e9:4f:6a:c1:34:42:58:a2:
e7:82:17:9a:62:6c:6b:0f:da:c7:d1:21:03:1a:f4:17:e6:7d:
b6:55:78:68:6a:4d:50:02:0b:f4:cf:af:d6:8d:9b:fd:4f:78:
70:2b:21:c0:63:85:36:28:62:4e:13:44:d4:0f:60:c4:85:93:
58:9c:07:b2:40:65:c8:d5:37:99:79:93:db:a8:68:4e:da:a2:
1a:63:5d:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj35NSFzNLu3/nGegRcyMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl
ODI2ZDQwHhcNMjUwMTAyMDU0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTBlYTJiYjk0NzgxNjk5YjQ2MjNjNmVjMzVhOGI1ZTc3MDhlMTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSdduJqAg1YA5MtM0atHEmpEf6kE
YJ0dT9JjD6eheVkFF4QWOGBLuc/1J7H0YZCsMSAwk+icFadl2guFUVGyDTOjADvg
eL/X39PIdvBL6wrMoDcvMgpwJJUwOnWANkJ3dv7NX+gLcGin8QPjCLNH2KSmF/A+
7MKeRSY2GIABw/KC/vzbDHWUUieeRGJrdfdPdBgm8z0HGaB2L8tcOVWjwgUpU6L9
a7GOFwbNt6DR81CGaoL6XDd6G9BO1w9uOq+IyZpNfkxQpzvSTRaveWFOkQVCYD8L
pYoDoSIIM1ZlpQhhmUL2sI+O+IrhEOBMgV+C9Wwhtu35lJNV+NIknI7u0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKEOoruUeBaZtGI8bsNai153COEmMB8GA1UdIwQY
MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt
M2RiY2RmNzc5ZjI0LzEvb1E2aXU1UjRGcG0wWWp4dXcxcUxYbmNJNFNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0
LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn+JMA0G
CSqGSIb3DQEBCwUAA4IBAQBr7tqkJZS+/zNSDsodT68BucGeoEpIB3jR2sWTFlKA
tTK8DhevasHwN36+AsNEIFun3GFI2TJd4Qb1sHXadH+JKuegYduJv7+ETDNwYyFG
N+CJSXxujsmhyzPvX30LlBoaxZNDFE+Ug9AGT8iKopP3JLs1PG/XICQnJrH2aVtI
xC7AF6f5uxlYd+5j5tTQdYTbeUAuR5hIb/sZt3l7Q74YBl9O+LzzotDXLVar6U9q
wTRCWKLngheaYmxrD9rH0SEDGvQX5n22VXhoak1QAgv0z6/WjZv9T3hwKyHAY4U2
KGJOE0TUD2DEhZNYnAeyQGXI1TeZeZPbqGhO2qIaY10K
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:35 2025 by rpki-client