Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/OW3B1N5hPEzvlqiiwwyRQqXGtGw.roa
File: OW3B1N5hPEzvlqiiwwyRQqXGtGw.roa (raw, json)
Hash identifier: BA7rjKrivNOmsfVWQtK8ZoacgDY48HHJ2LHTpwM8by0=
Subject key identifier: 39:6D:C1:D4:DE:61:3C:4C:EF:96:A8:A2:C3:0C:91:42:A5:C6:B4:6C
Certificate issuer: /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial: 0194236A2B3E58A4447706E23891C32C24D3
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/OW3B1N5hPEzvlqiiwwyRQqXGtGw.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199967
IP address blocks: 185.230.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:2b:3e:58:a4:44:77:06:e2:38:91:c3:2c:24:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=396dc1d4de613c4cef96a8a2c30c9142a5c6b46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:03:9b:43:f3:61:fa:24:85:2c:30:ed:3f:
35:bf:d0:3d:f8:92:4d:db:ea:34:4c:97:7a:c8:b9:
96:88:e5:c5:25:14:01:3a:e6:32:7a:74:bd:7a:4e:
e6:ed:c6:a6:52:50:bc:94:cc:08:1e:52:f1:14:2a:
c8:18:13:15:8d:9b:56:48:94:9e:b5:0b:a4:a1:1a:
d4:e1:88:e2:f5:de:68:28:d7:be:0b:bc:41:be:8c:
dd:75:75:88:1b:30:e7:93:48:8f:a2:31:bd:63:c8:
b3:60:db:51:65:11:03:89:ab:c4:2a:ec:d4:92:c6:
26:e3:66:50:8c:01:ae:9e:4c:23:d0:b0:01:b3:fd:
5d:59:94:bf:a0:6e:28:b7:11:5a:aa:55:6d:8e:b6:
12:37:f1:2b:8d:0a:fd:be:d2:d1:a6:81:61:d2:da:
9a:0f:1e:ae:69:f5:7b:07:ac:0a:44:07:8a:58:b4:
3b:6a:27:6c:89:5e:a4:60:79:48:49:4b:4e:47:32:
19:78:31:15:3e:54:69:b2:d0:05:d8:24:94:e8:30:
7f:69:2d:9e:c4:72:31:ed:63:9c:60:f4:e7:80:1a:
26:bd:2d:d6:a7:84:88:bc:9b:8b:11:0e:97:57:3e:
75:ea:ad:c0:a1:54:e3:9f:2f:d3:36:4a:2b:e4:5e:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6D:C1:D4:DE:61:3C:4C:EF:96:A8:A2:C3:0C:91:42:A5:C6:B4:6C
X509v3 Authority Key Identifier:
keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/OW3B1N5hPEzvlqiiwwyRQqXGtGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.229.0/24
Signature Algorithm: sha256WithRSAEncryption
92:57:6d:99:e3:d0:13:11:ed:ae:66:5f:c6:0e:00:d7:a0:76:
e5:17:6d:ac:ee:c1:86:21:07:ee:b6:a4:fb:cc:a6:5e:82:d9:
46:c8:b9:65:df:4b:fa:9d:94:15:d6:1d:2a:0d:00:b8:06:7f:
9a:27:c7:d5:02:b9:3f:4e:95:46:4e:72:09:3f:1a:da:c5:20:
2d:a8:ac:6f:43:fa:78:f5:d0:7f:fc:8e:cd:38:a9:a2:c1:fa:
31:a5:f8:76:af:21:b9:53:dc:00:d9:fd:dd:27:bb:d2:d2:d2:
6a:d9:cd:15:0a:1a:8a:76:61:2a:9f:83:af:e2:90:c7:4d:ca:
a7:86:6f:24:5f:82:49:61:cb:c2:84:1b:6b:6a:e1:90:f5:fc:
b5:8b:1a:4a:77:83:69:72:64:62:9e:65:73:1e:8d:0c:1f:ec:
75:d9:07:47:6e:69:0b:b5:97:93:28:f5:e4:20:4c:cc:85:83:
dd:b8:36:20:09:10:9c:c6:a3:c6:b6:ff:79:8f:74:d0:97:bf:
c8:3d:95:c5:cb:84:a5:ba:cf:d7:30:60:f4:bb:84:de:f5:61:
33:86:76:11:dd:2c:f2:cc:0a:be:d3:d7:24:27:dd:c4:a1:a9:
1d:91:8f:a6:85:7c:cd:7a:ee:26:0e:f0:b1:60:a5:da:ca:8d:
fc:0c:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:36:53 2025 by rpki-client