Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/OwUb3qCvmdiyRmd8cLx8Je9uUxk.roa
File: OwUb3qCvmdiyRmd8cLx8Je9uUxk.roa (raw, json)
Hash identifier: atIx3Wbrqp85enT4nB4Os6srsGzi8BmryGvRtf7uqOE=
Subject key identifier: 3B:05:1B:DE:A0:AF:99:D8:B2:46:67:7C:70:BC:7C:25:EF:6E:53:19
Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial: 0194221F7AA763EA0426745A01E46E5EEFB2
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/OwUb3qCvmdiyRmd8cLx8Je9uUxk.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 2a01:e900:f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7a:a7:63:ea:04:26:74:5a:01:e4:6e:5e:ef:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b051bdea0af99d8b246677c70bc7c25ef6e5319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:6b:fc:7b:d5:d7:37:ee:b0:11:b8:45:23:
c7:be:a4:36:78:6e:7f:a9:33:06:ca:89:f5:dd:15:
e9:c7:bb:9f:87:e7:aa:47:b8:a8:e8:ae:26:aa:03:
f5:4e:17:d7:9d:d6:33:03:aa:ce:a2:2d:4d:7c:60:
d9:02:58:9c:4e:61:3f:56:e9:74:8c:20:21:be:97:
2e:41:cf:12:01:fb:08:84:39:d3:eb:57:2c:a4:3a:
73:f5:f4:35:7c:3e:e6:9c:1f:d7:3c:5b:49:f9:38:
ab:c0:d6:9a:19:6d:8c:7e:6b:3c:cc:7b:86:0e:6f:
9b:95:48:3e:5d:bc:68:b9:6a:e4:28:a4:1e:06:c3:
d4:22:fe:0f:6c:90:d6:16:b1:8c:bd:31:d3:6a:7c:
f1:d9:93:bb:0b:79:01:b2:77:5a:57:50:6f:37:e9:
66:d3:ae:f5:8a:77:68:75:9b:59:f3:30:e1:1b:76:
a4:1c:bf:5c:c4:4a:82:49:32:08:cd:71:5d:cd:ec:
25:8e:39:ed:fd:f4:e6:4a:28:ac:89:62:62:b9:42:
fc:ff:14:50:0c:f4:eb:b1:14:06:e0:99:3d:33:9f:
70:cb:fc:3f:8e:56:7c:f8:41:c1:7a:c9:f9:5c:98:
74:c2:93:8a:aa:d9:87:72:4e:4c:45:12:ae:2a:5a:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:1B:DE:A0:AF:99:D8:B2:46:67:7C:70:BC:7C:25:EF:6E:53:19
X509v3 Authority Key Identifier:
keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/OwUb3qCvmdiyRmd8cLx8Je9uUxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e900:f1::/48
Signature Algorithm: sha256WithRSAEncryption
37:e0:70:f9:e9:d5:1f:d8:ee:5d:0d:c4:3f:78:95:63:9a:84:
02:b9:9e:9a:b9:62:b2:53:b2:1e:28:fb:61:f8:2f:7f:b3:e0:
8f:79:3c:31:df:8b:20:62:e3:28:06:7f:61:21:99:ce:d0:14:
8a:2a:08:4d:58:d6:ee:3d:4d:6b:c5:a6:85:11:55:dd:3c:88:
6e:41:57:57:17:7f:97:85:29:0a:b4:d5:47:9b:b6:b4:9d:b8:
f2:a8:c1:db:04:db:d8:bb:d6:0e:2e:9c:30:17:29:df:22:ba:
82:c0:1a:52:c2:a0:16:75:9b:8d:31:59:12:50:fb:1e:43:31:
ed:fa:79:0c:c1:12:d3:ed:8e:a7:75:98:87:5e:0f:16:f4:45:
fe:87:75:c4:c2:b2:db:85:08:08:d9:cc:a5:21:8e:69:93:8e:
0a:6a:86:1b:c3:42:75:79:3a:63:81:77:3a:31:3f:4b:6a:c4:
50:97:22:87:48:b1:ab:1f:5d:40:59:b7:80:ea:3d:5f:3d:ec:
87:80:0c:f7:53:ac:6e:e2:96:b0:cf:73:16:02:50:09:a8:2b:
31:ee:37:85:ca:b9:3a:08:7a:15:26:ad:ab:d9:f9:84:9d:c6:
ea:4e:cb:7c:81:1a:99:d1:74:02:60:86:da:fb:c2:d5:35:b0:
bf:f0:f6:75
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQiH3qnY+oEJnRaAeRuXu+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi
NzgzYzIwHhcNMjUwMTAxMTM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjA1MWJkZWEwYWY5OWQ4YjI0NjY3N2M3MGJjN2MyNWVmNmU1MzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmJr/HvV1zfusBG4RSPHvqQ2eG5/
qTMGyon13RXpx7ufh+eqR7io6K4mqgP1ThfXndYzA6rOoi1NfGDZAlicTmE/Vul0
jCAhvpcuQc8SAfsIhDnT61cspDpz9fQ1fD7mnB/XPFtJ+TirwNaaGW2Mfms8zHuG
Dm+blUg+XbxouWrkKKQeBsPUIv4PbJDWFrGMvTHTanzx2ZO7C3kBsndaV1BvN+lm
0671indodZtZ8zDhG3akHL9cxEqCSTIIzXFdzewljjnt/fTmSiisiWJiuUL8/xRQ
DPTrsRQG4Jk9M59wy/w/jlZ8+EHBesn5XJh0wpOKqtmHck5MRRKuKlpzoQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDsFG96gr5nYskZnfHC8fCXvblMZMB8GA1UdIwQY
MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt
NDRmOGVkNWQ2MWQ3LzEvT3dVYjNxQ3ZtZGl5Um1kOGNMeDhKZTl1VXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3
LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgHpAADx
MA0GCSqGSIb3DQEBCwUAA4IBAQA34HD56dUf2O5dDcQ/eJVjmoQCuZ6auWKyU7Ie
KPth+C9/s+CPeTwx34sgYuMoBn9hIZnO0BSKKghNWNbuPU1rxaaFEVXdPIhuQVdX
F3+XhSkKtNVHm7a0nbjyqMHbBNvYu9YOLpwwFynfIrqCwBpSwqAWdZuNMVkSUPse
QzHt+nkMwRLT7Y6ndZiHXg8W9EX+h3XEwrLbhQgI2cylIY5pk44KaoYbw0J1eTpj
gXc6MT9LasRQlyKHSLGrH11AWbeA6j1fPeyHgAz3U6xu4pawz3MWAlAJqCsx7jeF
yrk6CHoVJq2r2fmEncbqTst8gRqZ0XQCYIba+8LVNbC/8PZ1
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:01 2025 by rpki-client