Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/OwUS3NXybv4j2e2fp7XuRCsj9G8.roa
File: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (raw, json)
Hash identifier: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=
Subject key identifier: 3B:05:12:DC:D5:F2:6E:FE:23:D9:ED:9F:A7:B5:EE:44:2B:23:F4:6F
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 019427B53EDD1D22393E7D64587BDE96EFE3
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/OwUS3NXybv4j2e2fp7XuRCsj9G8.roa
Signing time: Thu 02 Jan 2025 15:49:37 +0000
ROA not before: Thu 02 Jan 2025 15:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8749
IP address blocks: 45.140.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:3e:dd:1d:22:39:3e:7d:64:58:7b:de:96:ef:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Jan 2 15:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b0512dcd5f26efe23d9ed9fa7b5ee442b23f46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:87:fb:a4:37:2a:49:ff:ea:7b:4f:44:e3:35:
3e:5b:85:12:e9:d7:c4:e4:24:78:00:74:33:73:bd:
98:c0:df:fc:a8:49:ef:ab:e8:97:b5:37:f7:f4:e5:
94:b5:44:5a:97:b8:ca:45:23:6a:cf:41:0f:e3:5b:
80:3e:25:f9:3a:94:f7:47:cb:cf:c3:c1:0e:cb:f5:
5f:f5:35:d3:ed:a7:ec:ee:f4:37:16:b9:fc:97:3b:
cb:15:ef:07:aa:15:c9:a0:e5:ee:4c:dc:88:4e:9f:
c4:00:3b:af:a6:95:e4:c4:0e:44:f8:6f:fe:c9:e0:
9e:22:38:91:e9:41:4e:ab:5b:36:dd:d2:31:60:c1:
e6:24:5a:66:6c:e7:d3:68:af:0f:66:73:57:58:ad:
54:c2:41:ac:fb:d1:e6:aa:f9:15:0c:21:80:8f:0c:
00:bc:1f:51:be:8f:68:28:f0:30:99:4c:8b:7f:50:
44:b9:2a:03:cd:72:23:54:68:f7:fb:ae:a0:02:67:
29:55:ec:8c:51:e5:6d:c7:5c:ed:15:69:69:fd:bf:
14:f9:72:2f:08:c2:ed:f4:4c:dc:13:a6:e1:50:2c:
a2:e9:48:2d:ff:86:ad:d7:71:d8:54:86:85:c7:71:
1b:76:da:65:ef:32:53:c8:b8:f3:82:cc:f5:b0:70:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:12:DC:D5:F2:6E:FE:23:D9:ED:9F:A7:B5:EE:44:2B:23:F4:6F
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/OwUS3NXybv4j2e2fp7XuRCsj9G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:f2:3f:6f:5b:95:f3:81:e1:4c:e4:58:f2:db:7e:07:47:55:
99:2b:f1:17:43:da:d7:60:a5:c5:2e:8b:d4:e3:ca:79:14:6d:
37:e4:ba:a0:ed:89:d5:d5:25:34:15:29:01:c3:4b:cf:4d:bb:
fc:1b:f1:72:8e:b3:a1:41:06:b3:95:f5:07:4b:ed:ca:f8:cc:
8f:6f:bc:c0:85:fd:4f:d6:79:41:8e:db:0b:c3:cf:37:4c:cf:
03:a6:0e:b7:a7:ff:39:ff:20:3d:8c:46:91:6e:89:09:95:a4:
0c:33:d8:3e:71:a4:1c:91:36:08:20:52:c9:8b:9b:ff:56:7b:
e8:5f:79:5d:ee:38:4e:39:38:55:fd:9d:a6:1f:d1:22:e4:5e:
22:60:a0:4e:b8:ae:d2:45:94:2c:20:37:4d:8b:97:4b:91:4b:
af:18:43:41:bf:d4:60:5d:75:30:78:a4:64:0e:7c:1f:a9:d0:
43:3e:b5:12:33:46:f4:70:07:f3:62:d7:d4:c5:96:61:69:6a:
89:10:9b:b3:85:1a:35:eb:49:bf:1c:3c:a0:7b:4b:27:2b:0b:
44:55:e1:85:60:25:82:60:4c:49:88:f4:ed:37:0f:35:6a:6e:
df:79:c1:9e:b1:20:2a:ac:20:99:1a:d7:ee:7c:43:ca:8e:b6:
49:dd:f8:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntT7dHSI5Pn1kWHvelu/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMThkNjgxMTVkYzRiNzMwZjE1NzkwNmIwNDQyNmU1OTli
M2E4Y2EwHhcNMjUwMTAyMTU0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjA1MTJkY2Q1ZjI2ZWZlMjNkOWVkOWZhN2I1ZWU0NDJiMjNmNDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4If7pDcqSf/qe09E4zU+W4US6dfE
5CR4AHQzc72YwN/8qEnvq+iXtTf39OWUtURal7jKRSNqz0EP41uAPiX5OpT3R8vP
w8EOy/Vf9TXT7afs7vQ3Frn8lzvLFe8HqhXJoOXuTNyITp/EADuvppXkxA5E+G/+
yeCeIjiR6UFOq1s23dIxYMHmJFpmbOfTaK8PZnNXWK1UwkGs+9HmqvkVDCGAjwwA
vB9Rvo9oKPAwmUyLf1BEuSoDzXIjVGj3+66gAmcpVeyMUeVtx1ztFWlp/b8U+XIv
CMLt9EzcE6bhUCyi6Ugt/4at13HYVIaFx3Ebdtpl7zJTyLjzgsz1sHDgKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDsFEtzV8m7+I9ntn6e17kQrI/RvMB8GA1UdIwQY
MBaAFKAY1oEV3EtzDxV5BrBEJuWZs6jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2Qt
NWNiYzYzNmJkN2U3LzEvT3dVUzNOWHlidjRqMmUyZnA3WHVSQ3NqOUc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80NjQ2NjAtN2E2ZS00OWE3LTkwM2QtNWNiYzYzNmJkN2U3
LzEvb0JqV2dSWGNTM01QRlhrR3NFUW01Wm16cU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYxcMA0G
CSqGSIb3DQEBCwUAA4IBAQCL8j9vW5XzgeFM5Fjy234HR1WZK/EXQ9rXYKXFLovU
48p5FG035Lqg7YnV1SU0FSkBw0vPTbv8G/FyjrOhQQazlfUHS+3K+MyPb7zAhf1P
1nlBjtsLw883TM8Dpg63p/85/yA9jEaRbokJlaQMM9g+caQckTYIIFLJi5v/Vnvo
X3ld7jhOOThV/Z2mH9Ei5F4iYKBOuK7SRZQsIDdNi5dLkUuvGENBv9RgXXUweKRk
DnwfqdBDPrUSM0b0cAfzYtfUxZZhaWqJEJuzhRo160m/HDyge0snKwtEVeGFYCWC
YExJiPTtNw81am7fecGesSAqrCCZGtfufEPKjrZJ3fjB
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:44 2025 by rpki-client