Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/o3VA4_nj4CdIxtZ5jzCGfoIsxVk.roa
File: o3VA4_nj4CdIxtZ5jzCGfoIsxVk.roa (raw, json)
Hash identifier: BGiWLfVF3KxgYRKGd8qJ/7aLVEgsyj7Yqoq1vQFZroU=
Subject key identifier: A3:75:40:E3:F9:E3:E0:27:48:C6:D6:79:8F:30:86:7E:82:2C:C5:59
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFAAE3791821B47FEEFC1B353D8D321
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/o3VA4_nj4CdIxtZ5jzCGfoIsxVk.roa
Signing time: Wed 01 Jan 2025 03:48:29 +0000
ROA not before: Wed 01 Jan 2025 03:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208503
IP address blocks: 178.170.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:ae:37:91:82:1b:47:fe:ef:c1:b3:53:d8:d3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a37540e3f9e3e02748c6d6798f30867e822cc559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:33:6a:1f:3c:90:8d:35:e1:59:a4:4e:82:b2:
1e:17:ab:b6:e5:ba:31:a8:e5:da:62:64:86:a9:3d:
fe:28:42:ee:bd:f3:86:74:b6:3c:3f:c9:df:c8:db:
92:aa:c8:02:5a:1c:8e:ca:ce:44:f6:0b:90:5d:71:
11:f7:78:1d:35:eb:ed:5c:2a:b2:10:6f:52:8c:be:
88:c4:b6:f7:c2:73:a6:84:a4:cb:8b:9b:f4:a8:fe:
70:5f:f2:28:06:0f:f2:9e:96:1c:e3:7a:cd:2f:ce:
16:ad:9b:b8:9a:3a:8b:24:4f:ba:2f:7e:18:e5:68:
44:f8:90:39:8d:50:6a:21:f0:cb:2b:6e:fc:b7:17:
f9:e1:fc:74:cc:65:52:57:fe:92:11:96:29:d4:9d:
7a:93:86:ff:32:5f:22:d9:f3:4a:7f:29:f8:a8:15:
66:1e:c9:80:46:ca:b7:c1:88:64:b7:19:4b:29:ba:
c8:80:5c:85:6a:a3:1d:40:bc:1f:c3:e4:57:10:26:
1b:be:5d:48:25:16:80:e1:13:0b:a1:e5:bc:da:a2:
9e:78:2e:84:3f:13:8d:88:f9:85:38:0f:2c:61:7e:
a3:b0:5e:e2:c5:9a:6b:03:a9:88:79:7d:98:55:e0:
ac:d1:9d:32:76:ba:70:20:bc:dc:27:ab:66:0e:15:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:75:40:E3:F9:E3:E0:27:48:C6:D6:79:8F:30:86:7E:82:2C:C5:59
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/o3VA4_nj4CdIxtZ5jzCGfoIsxVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:ca:d6:06:45:0c:06:e9:d8:8b:2f:07:8b:9c:b9:24:22:64:
fe:40:e4:10:d3:28:ca:82:85:a0:a1:59:7e:e2:ca:97:59:b2:
45:f1:62:a8:82:67:a3:e5:b7:79:3f:2c:40:c6:56:d3:ea:fb:
e5:3d:65:64:49:40:55:8e:51:b3:9f:16:e4:8c:59:3b:b3:0c:
88:ea:a0:b1:91:3a:df:2f:a3:71:5b:ed:4b:e2:26:6b:3b:af:
e2:a4:6f:b8:8a:10:0a:cf:19:26:9a:72:c9:67:28:d6:69:b9:
73:f5:ac:d9:81:37:db:45:29:28:70:57:f4:d6:06:b6:16:6c:
75:c8:a8:5b:a5:fc:fa:91:84:79:00:28:2e:50:3d:26:69:9c:
8f:0d:8d:de:db:cb:b4:d4:4d:e2:67:96:51:05:15:81:8d:a3:
a3:ac:e6:f4:15:14:04:72:b3:f8:85:59:18:ee:5f:a2:3c:9b:
e2:1e:14:31:cd:1f:be:6a:8a:3f:f6:4d:86:81:77:a1:f5:d6:
b8:92:37:4d:67:a6:bc:a3:78:c8:c2:73:f1:16:3c:84:6b:39:
9a:70:c7:31:8f:27:4d:eb:93:ec:47:88:80:18:e1:a2:db:42:
62:45:16:19:2a:ff:f7:1d:c2:e5:32:ca:ce:9c:c5:f9:b8:de:
47:18:00:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+q43kYIbR/7vwbNT2NMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjUwMTAxMDM0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzc1NDBlM2Y5ZTNlMDI3NDhjNmQ2Nzk4ZjMwODY3ZTgyMmNjNTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TNqHzyQjTXhWaROgrIeF6u25box
qOXaYmSGqT3+KELuvfOGdLY8P8nfyNuSqsgCWhyOys5E9guQXXER93gdNevtXCqy
EG9SjL6IxLb3wnOmhKTLi5v0qP5wX/IoBg/ynpYc43rNL84WrZu4mjqLJE+6L34Y
5WhE+JA5jVBqIfDLK278txf54fx0zGVSV/6SEZYp1J16k4b/Ml8i2fNKfyn4qBVm
HsmARsq3wYhktxlLKbrIgFyFaqMdQLwfw+RXECYbvl1IJRaA4RMLoeW82qKeeC6E
PxONiPmFOA8sYX6jsF7ixZprA6mIeX2YVeCs0Z0ydrpwILzcJ6tmDhXUEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKN1QOP54+AnSMbWeY8whn6CLMVZMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvbzNWQTRfbmo0Q2RJeHRaNWp6Q0dmb0lzeFZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsqroMA0G
CSqGSIb3DQEBCwUAA4IBAQBqytYGRQwG6diLLweLnLkkImT+QOQQ0yjKgoWgoVl+
4sqXWbJF8WKogmej5bd5PyxAxlbT6vvlPWVkSUBVjlGznxbkjFk7swyI6qCxkTrf
L6NxW+1L4iZrO6/ipG+4ihAKzxkmmnLJZyjWablz9azZgTfbRSkocFf01ga2Fmx1
yKhbpfz6kYR5ACguUD0maZyPDY3e28u01E3iZ5ZRBRWBjaOjrOb0FRQEcrP4hVkY
7l+iPJviHhQxzR++aoo/9k2GgXeh9da4kjdNZ6a8o3jIwnPxFjyEazmacMcxjydN
65PsR4iAGOGi20JiRRYZKv/3HcLlMsrOnMX5uN5HGAAZ
-----END CERTIFICATE-----
Generated at Thu Apr 10 13:45:50 2025 by rpki-client