Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/Ow6xOfingvBCtHoNkaHGobxC5yY.roa
File: Ow6xOfingvBCtHoNkaHGobxC5yY.roa (raw, json)
Hash identifier: NhFSRa+v/S1zW+iyQy+gxANBr6Bnqty2hhUOwum97Kc=
Subject key identifier: 3B:0E:B1:39:F8:A7:82:F0:42:B4:7A:0D:91:A1:C6:A1:BC:42:E7:26
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 0195E8236A0C1A84F0B94433D3CC0F14A357
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/Ow6xOfingvBCtHoNkaHGobxC5yY.roa
Signing time: Sun 30 Mar 2025 17:39:49 +0000
ROA not before: Sun 30 Mar 2025 17:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48753
IP address blocks: 5.10.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e8:23:6a:0c:1a:84:f0:b9:44:33:d3:cc:0f:14:a3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Mar 30 17:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b0eb139f8a782f042b47a0d91a1c6a1bc42e726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:9a:ba:58:28:64:c6:b8:22:b8:02:6c:2a:
c3:9f:26:99:be:22:12:22:ab:ed:a9:32:8b:72:19:
91:2b:c5:13:6a:12:6d:e3:40:c6:88:44:ee:01:f2:
f0:46:2a:6f:74:29:64:33:c3:97:c3:60:e8:a1:ea:
51:98:a7:b9:86:9c:e5:5c:52:70:2a:ca:b8:6c:29:
b9:74:6c:a8:da:02:02:b8:e1:7b:a8:9e:ea:02:07:
7c:ff:05:2f:7e:41:a6:a5:9d:b2:92:a3:73:6c:b3:
f7:fd:f5:71:e9:bb:0c:90:a4:68:68:28:bd:29:7a:
62:36:ce:3a:9d:48:33:1e:66:9e:d8:6d:1d:73:26:
4e:c5:36:64:9a:e9:ea:f7:c4:b6:b0:ad:11:e6:18:
cd:56:7c:60:7c:c5:f3:81:ee:af:30:7c:0a:4a:35:
f1:a9:ff:45:eb:56:87:ec:ef:7f:c9:ae:8d:7d:27:
87:c9:c5:3d:91:06:fb:85:94:98:b1:82:ff:f7:a3:
91:79:fe:ce:06:ab:48:b0:51:f8:11:ef:88:a3:4f:
fd:85:c2:39:b6:d6:87:35:69:57:1f:0d:1a:06:a8:
d2:25:d2:11:43:eb:a9:47:da:ca:f3:e3:24:6e:00:
36:ff:3e:95:00:d2:e1:24:0d:43:22:f3:c7:2c:ca:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0E:B1:39:F8:A7:82:F0:42:B4:7A:0D:91:A1:C6:A1:BC:42:E7:26
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/Ow6xOfingvBCtHoNkaHGobxC5yY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:10:b8:0d:3b:c2:7b:f8:bb:0f:b8:cd:c3:f7:6a:22:a8:fc:
74:bf:94:38:21:ff:77:e3:25:89:c1:86:02:ff:21:24:08:34:
91:88:58:6e:c8:fc:6f:f2:71:90:62:1b:67:e7:34:25:a6:8e:
6b:c1:f5:ba:30:37:83:6d:6b:2c:fd:a9:d1:26:b9:a7:90:ae:
9d:0c:33:9c:64:01:dc:3b:09:a3:16:64:97:ac:08:ee:6e:68:
d1:35:83:31:e2:e2:2e:80:c3:70:e3:7e:c7:41:6b:df:30:43:
42:7a:52:9b:02:05:20:d3:bb:1d:b8:e5:96:c7:84:e2:8b:4e:
7b:95:09:73:25:a8:9b:da:07:9d:3a:83:a0:7f:8b:93:2a:75:
28:eb:e8:d0:6f:3a:31:c2:a8:8d:2d:e5:0e:b7:6b:da:e0:a8:
bd:29:fc:8d:fc:be:e6:97:f2:ca:95:80:df:5d:55:87:ae:70:
15:09:fc:77:05:68:5c:7c:69:45:74:22:59:f8:ba:73:5d:7f:
fa:8a:6c:5d:4d:a1:a5:3c:65:45:cf:36:f1:4a:ee:f6:72:4a:
41:29:46:dd:02:9b:6d:ab:66:94:f0:a8:24:64:e7:ad:ce:c8:
59:74:ea:ee:a2:74:33:44:8a:fa:40:7d:b2:b0:1a:79:db:dd:
c0:fb:fa:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXoI2oMGoTwuUQz08wPFKNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi
NzEzMmYwHhcNMjUwMzMwMTczOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjBlYjEzOWY4YTc4MmYwNDJiNDdhMGQ5MWExYzZhMWJjNDJlNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2qaulgoZMa4IrgCbCrDnyaZviIS
IqvtqTKLchmRK8UTahJt40DGiETuAfLwRipvdClkM8OXw2DooepRmKe5hpzlXFJw
Ksq4bCm5dGyo2gICuOF7qJ7qAgd8/wUvfkGmpZ2ykqNzbLP3/fVx6bsMkKRoaCi9
KXpiNs46nUgzHmae2G0dcyZOxTZkmunq98S2sK0R5hjNVnxgfMXzge6vMHwKSjXx
qf9F61aH7O9/ya6NfSeHycU9kQb7hZSYsYL/96ORef7OBqtIsFH4Ee+Io0/9hcI5
ttaHNWlXHw0aBqjSJdIRQ+upR9rK8+MkbgA2/z6VANLhJA1DIvPHLMp8CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDsOsTn4p4LwQrR6DZGhxqG8QucmMB8GA1UdIwQY
MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt
ZGVlNzY4NjAwMTNkLzEvT3c2eE9maW5ndkJDdEhvTmthSEdvYnhDNXlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk
LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQrZMA0G
CSqGSIb3DQEBCwUAA4IBAQB6ELgNO8J7+LsPuM3D92oiqPx0v5Q4If934yWJwYYC
/yEkCDSRiFhuyPxv8nGQYhtn5zQlpo5rwfW6MDeDbWss/anRJrmnkK6dDDOcZAHc
OwmjFmSXrAjubmjRNYMx4uIugMNw437HQWvfMENCelKbAgUg07sduOWWx4Tii057
lQlzJaib2gedOoOgf4uTKnUo6+jQbzoxwqiNLeUOt2va4Ki9KfyN/L7ml/LKlYDf
XVWHrnAVCfx3BWhcfGlFdCJZ+LpzXX/6imxdTaGlPGVFzzbxSu72ckpBKUbdAptt
q2aU8KgkZOetzshZdOruonQzRIr6QH2ysBp5293A+/rB
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:03:50 2025 by rpki-client