Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o-5cE3cStTngg4bpvtZi5sQOeqQ.roa
File: o-5cE3cStTngg4bpvtZi5sQOeqQ.roa (raw, json)
Hash identifier: lHhD5ddH+166b6Vhe/KxGEh4dnt8eEsQixdGS/EXd10=
Subject key identifier: A3:EE:5C:13:77:12:B5:39:E0:83:86:E9:BE:D6:62:E6:C4:0E:7A:A4
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 0195FB46672CC63EAF2A88C8D007B1081521
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o-5cE3cStTngg4bpvtZi5sQOeqQ.roa
Signing time: Thu 03 Apr 2025 10:50:49 +0000
ROA not before: Thu 03 Apr 2025 10:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 217.60.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fb:46:67:2c:c6:3e:af:2a:88:c8:d0:07:b1:08:15:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Apr 3 10:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3ee5c137712b539e08386e9bed662e6c40e7aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:25:fd:93:2f:cd:6e:a7:95:3c:87:0c:ac:
f8:24:01:a8:e2:e3:16:8e:68:08:9c:d7:7e:97:e5:
a5:41:f4:cf:5c:1f:de:42:8c:40:72:77:ee:13:3c:
cb:c9:d4:ca:d9:68:08:b2:f4:16:d2:90:44:4e:c1:
fe:88:be:4a:ec:05:9a:e7:54:8b:11:7e:52:15:df:
b6:ef:3c:3c:5e:7a:15:90:40:6d:39:47:50:d6:b8:
1a:bd:df:64:0a:80:7a:ed:14:1e:85:40:ce:df:5c:
78:9f:26:04:bd:48:64:83:d4:ad:6b:98:04:cb:c1:
e7:d5:85:f2:24:b0:44:17:2d:ea:73:75:55:9c:2b:
c5:4f:bf:87:a5:79:6e:7c:ec:dd:38:5e:24:78:0a:
1b:c0:b1:12:59:fc:a8:c0:21:f9:5d:11:09:4f:14:
7a:5e:fb:b0:e0:86:f2:d6:dc:78:90:7d:f0:f0:c3:
6c:68:6f:24:c5:bf:6c:99:58:cd:15:66:63:f3:d5:
b8:a4:b6:e1:42:3b:35:69:7e:a5:b9:07:4e:20:06:
f3:2b:d7:76:a1:c4:f0:eb:f2:91:42:72:57:13:55:
c0:d8:c3:fc:0b:70:fe:b9:e1:b0:a4:f0:a2:ce:8e:
23:b8:55:1b:4d:8e:b4:40:b0:d9:73:71:41:49:54:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EE:5C:13:77:12:B5:39:E0:83:86:E9:BE:D6:62:E6:C4:0E:7A:A4
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/o-5cE3cStTngg4bpvtZi5sQOeqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.244.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:85:ae:58:f4:f8:43:6f:98:8c:65:1b:50:7e:00:44:92:7c:
58:7c:a7:fe:23:7a:53:08:68:c3:b5:a9:bb:f7:d3:33:58:cd:
90:e8:6d:70:62:2f:b2:c2:25:93:be:1e:9e:46:1b:40:88:7d:
03:0e:d8:87:6a:6d:af:20:e1:67:80:ee:1c:cc:3a:41:45:ab:
51:68:c6:ee:cb:65:08:34:a1:a2:b9:6c:68:e8:3c:4f:7c:e2:
77:68:7a:0a:9b:92:4f:5f:4c:8b:f7:50:ac:dc:e6:b2:5b:6a:
9f:1e:b8:49:ad:a8:64:f4:7c:dd:5f:27:d1:76:8d:fb:48:90:
46:3b:81:c0:c4:4e:c4:63:ab:40:7f:1f:96:27:c9:4a:e3:20:
46:5b:b6:05:86:0c:86:48:d3:a3:1a:9e:79:73:17:03:05:bf:
df:a9:35:fb:d6:3a:79:cb:a6:fc:3d:c1:d4:7d:69:59:f1:ab:
64:d0:3d:f2:7e:12:36:8f:26:95:68:1b:5d:4b:75:52:ae:99:
e4:ec:ea:bc:3c:8e:99:6f:c8:30:18:05:8b:7e:be:c3:53:2d:
95:2f:35:f3:fc:e8:35:6b:44:68:c0:97:97:de:a2:ab:7a:2a:
e5:6a:7c:54:13:08:4d:12:d2:26:21:1c:4c:5f:44:c8:a1:b4:
22:87:2a:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZX7Rmcsxj6vKojI0AexCBUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjUwNDAzMTA1MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2VlNWMxMzc3MTJiNTM5ZTA4Mzg2ZTliZWQ2NjJlNmM0MGU3YWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva0l/ZMvzW6nlTyHDKz4JAGo4uMW
jmgInNd+l+WlQfTPXB/eQoxAcnfuEzzLydTK2WgIsvQW0pBETsH+iL5K7AWa51SL
EX5SFd+27zw8XnoVkEBtOUdQ1rgavd9kCoB67RQehUDO31x4nyYEvUhkg9Sta5gE
y8Hn1YXyJLBEFy3qc3VVnCvFT7+HpXlufOzdOF4keAobwLESWfyowCH5XREJTxR6
Xvuw4Iby1tx4kH3w8MNsaG8kxb9smVjNFWZj89W4pLbhQjs1aX6luQdOIAbzK9d2
ocTw6/KRQnJXE1XA2MP8C3D+ueGwpPCizo4juFUbTY60QLDZc3FBSVS1cwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKPuXBN3ErU54IOG6b7WYubEDnqkMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvby01Y0UzY1N0VG5nZzRicHZ0Wmk1c1FPZXFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Tz0MA0G
CSqGSIb3DQEBCwUAA4IBAQBrha5Y9PhDb5iMZRtQfgBEknxYfKf+I3pTCGjDtam7
99MzWM2Q6G1wYi+ywiWTvh6eRhtAiH0DDtiHam2vIOFngO4czDpBRatRaMbuy2UI
NKGiuWxo6DxPfOJ3aHoKm5JPX0yL91Cs3OayW2qfHrhJrahk9HzdXyfRdo37SJBG
O4HAxE7EY6tAfx+WJ8lK4yBGW7YFhgyGSNOjGp55cxcDBb/fqTX71jp5y6b8PcHU
fWlZ8atk0D3yfhI2jyaVaBtdS3VSrpnk7Oq8PI6Zb8gwGAWLfr7DUy2VLzXz/Og1
a0RowJeX3qKreirlanxUEwhNEtImIRxMX0TIobQihyrT
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:14 2025 by rpki-client