Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/Owr-ZMF3IU6-HlxUQdHnIeiL4P0.roa
File: Owr-ZMF3IU6-HlxUQdHnIeiL4P0.roa (raw, json)
Hash identifier: P/0Xq7jm9FfNGJ2i4ahCVuaX5VvDxfSb57nEi8i1Tlk=
Subject key identifier: 3B:0A:FE:64:C1:77:21:4E:BE:1E:5C:54:41:D1:E7:21:E8:8B:E0:FD
Certificate issuer: /CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Certificate serial: 019425FC0F97AD8D9B2653F52B72618F450C
Authority key identifier: 1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/Owr-ZMF3IU6-HlxUQdHnIeiL4P0.roa
Signing time: Thu 02 Jan 2025 07:47:43 +0000
ROA not before: Thu 02 Jan 2025 07:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57152
IP address blocks: 5.250.255.0/24 maxlen: 24
185.123.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:0f:97:ad:8d:9b:26:53:f5:2b:72:61:8f:45:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7433fafa59f0d512a2bebb097e69463cc06759
Validity
Not Before: Jan 2 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b0afe64c177214ebe1e5c5441d1e721e88be0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:44:04:fe:f4:27:d5:68:83:cd:50:9e:65:
13:64:96:c1:09:11:8c:fc:41:3f:8e:79:5d:ba:6a:
45:86:d0:b1:33:ab:1c:2c:b3:dd:f5:0e:f7:9e:af:
97:b8:91:d5:c7:11:85:cd:c8:21:f8:31:94:9b:1f:
7b:91:62:cd:38:81:8f:45:66:3a:9a:cf:33:87:1a:
74:ad:05:37:81:22:1b:e6:bd:23:5e:e4:50:41:12:
bd:19:25:f6:68:42:48:7f:40:11:23:43:5b:5e:e9:
b7:5d:db:57:fc:0c:4b:a1:67:cf:8d:b7:3d:32:44:
f7:df:bb:b1:80:e2:93:8c:5b:ee:13:61:81:7d:a1:
e2:4f:e5:d9:b1:d1:40:cb:9a:b8:e3:5b:e9:c3:43:
7a:e5:b9:13:d7:bc:21:ed:55:b0:47:73:7f:92:a9:
d1:6c:b2:b4:ff:4a:07:a2:0d:0d:e7:92:fd:2c:82:
06:8f:43:26:c9:d0:a4:91:5a:61:22:98:8c:27:dd:
98:d4:e5:bc:dc:88:e6:a1:f9:7d:c9:75:8f:01:7a:
a4:6c:02:d0:3c:d4:05:94:8b:94:61:00:b3:ce:6d:
9b:29:d1:d4:26:9b:82:b7:d9:54:f1:f0:7b:f8:0f:
8c:c8:3f:d7:67:50:6d:86:66:ff:6f:52:07:4a:f8:
e6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0A:FE:64:C1:77:21:4E:BE:1E:5C:54:41:D1:E7:21:E8:8B:E0:FD
X509v3 Authority Key Identifier:
keyid:1C:74:33:FA:FA:59:F0:D5:12:A2:BE:BB:09:7E:69:46:3C:C0:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHQz-vpZ8NUSor67CX5pRjzAZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/Owr-ZMF3IU6-HlxUQdHnIeiL4P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/39a5b5-3c51-46e2-9479-12f41a0cc0c1/1/HHQz-vpZ8NUSor67CX5pRjzAZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.255.0/24
185.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
20:81:0e:c4:c5:09:3b:d6:1a:4c:fb:2e:51:46:8e:87:c9:18:
bd:db:95:54:8e:90:f5:22:e2:8d:c9:91:61:f0:6a:1e:24:b8:
87:a8:06:9d:7a:85:f0:89:5e:02:b2:af:13:75:b9:bb:a7:f3:
a1:bf:64:0c:f2:fa:23:e8:5d:9f:9f:58:28:aa:6d:e1:90:a2:
7d:b6:44:90:dd:84:ef:e8:83:fc:85:53:ab:dd:64:a8:c6:70:
36:7b:52:2d:da:b1:4e:62:8f:62:cd:30:04:d6:2c:27:f7:e3:
74:b6:92:5e:f9:f0:6e:89:a6:7b:6f:a2:84:32:c8:ac:80:da:
9f:cc:a8:d6:6f:dc:8d:9b:d0:fd:99:03:91:13:7c:93:c3:32:
e4:22:7a:be:df:73:9b:d4:99:84:63:44:1f:84:67:ec:ad:fc:
57:be:07:42:89:d2:b7:51:e9:d6:45:e0:8b:12:8c:cd:3f:8b:
ac:65:93:2b:2b:5f:ee:75:89:61:04:0d:99:cb:e6:ce:2f:b3:
8b:42:73:4d:99:97:73:4b:da:fe:60:44:a7:56:d1:2a:a7:3d:
ed:26:04:f6:3a:6f:e2:36:40:31:7e:5e:6d:2a:ac:6a:51:ee:
c4:bf:fb:47:1c:55:e0:c0:c1:52:98:7e:a8:c5:c2:b8:0e:00:
6c:df:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:23 2025 by rpki-client