Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa
File: Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa (raw, json)
Hash identifier: A6c2c+PXtuhOYqewWMvzWTg68sLONrRYQPMKhm+zXUU=
Subject key identifier: 39:E9:B7:58:36:67:63:A7:12:21:A1:B2:2D:80:44:23:53:60:FD:F5
Certificate issuer: /CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Certificate serial: 01942143ED1052C15A2163B0ADA9E3926279
Authority key identifier: 81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41644
IP address blocks: 185.144.212.0/22 maxlen: 22
193.219.102.0/24 maxlen: 24
2001:3e40:1000::/36 maxlen: 36
2001:3e42:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ed:10:52:c1:5a:21:63:b0:ad:a9:e3:92:62:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c00cc8c73d1141c89254ed556a8d012ca90226
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39e9b758366763a71221a1b22d8044235360fdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:1e:5b:ce:f5:97:4d:a9:3c:c0:8a:79:83:
e4:1e:a9:02:c2:30:04:ec:76:70:43:d1:db:4b:62:
26:e0:65:f9:3d:16:8d:bf:79:f0:ba:15:70:fa:29:
4a:99:7c:62:0c:74:2a:cb:dd:f1:60:ba:9c:29:b4:
cf:1a:1d:5d:5f:d9:b5:4c:ca:99:52:4b:3f:58:ac:
71:ba:ec:4a:1f:ca:cc:71:70:55:c9:39:47:c0:68:
84:7f:9b:48:e4:a3:bb:c0:ae:ad:ff:57:f6:f9:3e:
6f:4c:b4:97:97:dc:df:1e:6d:7c:dd:45:4d:f7:eb:
af:1d:d5:dd:dd:0e:dc:40:40:08:f7:1f:b6:42:11:
ee:d2:cd:b8:f9:ae:67:29:78:16:3e:91:ac:fe:bf:
22:11:79:78:73:a1:ed:e4:06:e1:b1:78:2d:5e:22:
12:92:43:b4:d7:f5:d0:da:4b:9d:b2:66:b8:19:d3:
51:09:c5:d1:d9:df:00:39:80:17:1a:ce:27:92:d6:
55:4a:24:c5:23:65:c6:bc:b8:23:60:4a:80:3d:c5:
c8:af:9b:58:13:73:af:dd:96:22:47:18:f0:96:de:
c3:78:6d:7e:fb:9e:5e:42:f5:05:ce:23:c7:ee:ba:
bf:37:f5:51:c0:90:7c:b5:80:a0:55:94:47:2a:bf:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E9:B7:58:36:67:63:A7:12:21:A1:B2:2D:80:44:23:53:60:FD:F5
X509v3 Authority Key Identifier:
keyid:81:C0:0C:C8:C7:3D:11:41:C8:92:54:ED:55:6A:8D:01:2C:A9:02:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcAMyMc9EUHIklTtVWqNASypAiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/Oem3WDZnY6cSIaGyLYBEI1Ng_fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b4d4ea-f10b-4bcd-a3f5-905276c5c414/1/gcAMyMc9EUHIklTtVWqNASypAiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.212.0/22
193.219.102.0/24
IPv6:
2001:3e40:1000::/36
2001:3e42:1000::/36
Signature Algorithm: sha256WithRSAEncryption
0a:46:ec:c1:f6:b3:a3:4a:44:ab:f4:07:21:13:bf:4a:8b:d4:
48:fd:45:21:11:d0:24:b2:a3:39:1f:15:21:be:ae:30:a8:53:
89:3b:3d:ac:3f:c8:a5:d2:f4:89:36:d9:26:0e:5e:b0:24:89:
3a:13:14:ca:6e:a1:5b:43:6c:4d:30:51:ce:20:68:6c:b8:00:
a2:2b:14:40:9d:32:9c:14:0e:6e:87:dc:8f:a6:2e:cf:f9:41:
01:ce:20:35:f1:d9:70:c9:55:cd:90:9f:14:5e:d0:94:0f:7f:
1a:4e:d8:43:8e:b6:dd:e7:05:85:d5:a9:a8:49:89:aa:aa:d3:
c4:8e:a9:dc:ad:2c:ad:e0:8c:6e:a4:f5:a0:de:c0:53:e2:c8:
3c:b3:bd:ea:88:65:38:cd:8d:c0:4e:5e:14:ed:5e:d8:78:3d:
bd:c7:6d:76:54:ce:35:ff:2a:ba:6a:33:ee:ec:ab:49:ff:37:
fd:cc:db:93:55:3a:9c:f6:14:48:30:4e:79:8c:0e:90:38:94:
2a:3e:a4:f6:d2:52:63:e7:2b:db:4b:2d:e7:6c:5f:ab:27:5b:
0e:5b:ad:18:8d:ca:a9:c0:62:d1:69:d5:58:37:9f:93:0d:af:
4e:b8:53:e1:79:9d:0b:cf:99:26:d9:0e:c1:ce:29:85:41:bb:
24:f4:a4:99
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQhQ+0QUsFaIWOwranjkmJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzAwY2M4YzczZDExNDFjODkyNTRlZDU1NmE4ZDAxMmNh
OTAyMjYwHhcNMjUwMTAxMDk0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWU5Yjc1ODM2Njc2M2E3MTIyMWExYjIyZDgwNDQyMzUzNjBmZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs0eW871l02pPMCKeYPkHqkCwjAE
7HZwQ9HbS2Im4GX5PRaNv3nwuhVw+ilKmXxiDHQqy93xYLqcKbTPGh1dX9m1TMqZ
Uks/WKxxuuxKH8rMcXBVyTlHwGiEf5tI5KO7wK6t/1f2+T5vTLSXl9zfHm183UVN
9+uvHdXd3Q7cQEAI9x+2QhHu0s24+a5nKXgWPpGs/r8iEXl4c6Ht5AbhsXgtXiIS
kkO01/XQ2kudsma4GdNRCcXR2d8AOYAXGs4nktZVSiTFI2XGvLgjYEqAPcXIr5tY
E3Ov3ZYiRxjwlt7DeG1++55eQvUFziPH7rq/N/VRwJB8tYCgVZRHKr9inwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFDnpt1g2Z2OnEiGhsi2ARCNTYP31MB8GA1UdIwQY
MBaAFIHADMjHPRFByJJU7VVqjQEsqQImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUt
OTA1Mjc2YzVjNDE0LzEvT2VtM1dEWm5ZNmNTSWFHeUxZQkVJMU5nX2ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iNGQ0ZWEtZjEwYi00YmNkLWEzZjUtOTA1Mjc2YzVjNDE0
LzEvZ2NBTXlNYzlFVUhJa2xUdFZXcU5BU3lwQWlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuZDUAwQA
wdtmMBYEAgACMBADBgQgAT5AEAMGBCABPkIQMA0GCSqGSIb3DQEBCwUAA4IBAQAK
RuzB9rOjSkSr9AchE79Ki9RI/UUhEdAksqM5HxUhvq4wqFOJOz2sP8il0vSJNtkm
Dl6wJIk6ExTKbqFbQ2xNMFHOIGhsuACiKxRAnTKcFA5uh9yPpi7P+UEBziA18dlw
yVXNkJ8UXtCUD38aTthDjrbd5wWF1amoSYmqqtPEjqncrSyt4IxupPWg3sBT4sg8
s73qiGU4zY3ATl4U7V7YeD29x212VM41/yq6ajPu7KtJ/zf9zNuTVTqc9hRIME55
jA6QOJQqPqT20lJj5yvbSy3nbF+rJ1sOW60YjcqpwGLRadVYN5+TDa9OuFPheZ0L
z5km2Q7BzimFQbsk9KSZ
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:41 2025 by rpki-client