Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/OsEqbh-MgAhZY6dEETKTLoVhiek.roa
File: OsEqbh-MgAhZY6dEETKTLoVhiek.roa (raw, json)
Hash identifier: 8l+J0cXRIwFphYGIY8ShZlRzu2XOdk8YK7YXmH85akQ=
Subject key identifier: 3A:C1:2A:6E:1F:8C:80:08:59:63:A7:44:11:32:93:2E:85:61:89:E9
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 019422FC0B2FBEDBCAC32321F35D96E45AC9
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/OsEqbh-MgAhZY6dEETKTLoVhiek.roa
Signing time: Wed 01 Jan 2025 17:48:50 +0000
ROA not before: Wed 01 Jan 2025 17:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208207
IP address blocks: 193.151.229.0/24 maxlen: 24
2001:67c:27f4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0b:2f:be:db:ca:c3:23:21:f3:5d:96:e4:5a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ac12a6e1f8c80085963a7441132932e856189e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:cc:bb:03:59:cf:07:54:df:f0:c8:8a:9c:
6c:80:75:d6:55:59:93:64:ae:14:dd:66:32:74:ab:
f6:18:f5:3c:07:8f:23:01:8c:0c:f5:5d:3a:2c:cf:
59:92:0c:74:5a:81:39:92:e7:08:44:4b:e3:52:96:
01:24:99:fc:c0:43:5e:5b:bd:fe:8d:86:98:54:98:
d3:b1:e7:c5:d2:ae:98:c5:81:2f:b9:8e:1b:5b:c4:
e2:60:62:fb:16:65:84:85:9b:10:19:8c:46:fd:35:
0f:a7:fb:95:cb:17:d8:36:7b:4b:c8:51:7c:af:6e:
cf:ad:72:ad:df:67:60:3c:74:11:db:df:de:09:64:
ac:dd:93:76:dc:39:3d:13:a5:0a:f9:18:11:51:4a:
09:60:58:ec:1f:79:96:6b:47:5b:db:b4:91:6f:64:
bb:c7:2f:a6:0d:e0:56:ef:45:cb:1c:aa:9b:5b:ff:
12:40:02:43:89:d2:58:be:c0:2f:c4:c1:3d:11:f6:
58:2b:41:c1:b6:55:48:5b:c2:b9:aa:ec:f3:80:fd:
d6:d2:4e:5a:1e:03:07:4d:d9:53:da:17:6a:45:8f:
a4:d0:89:99:6d:5c:5c:6e:10:77:70:50:c1:1b:c5:
29:aa:15:d3:1c:a3:2f:45:5d:9b:a5:55:36:fb:e4:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:2A:6E:1F:8C:80:08:59:63:A7:44:11:32:93:2E:85:61:89:E9
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/OsEqbh-MgAhZY6dEETKTLoVhiek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.229.0/24
IPv6:
2001:67c:27f4::/48
Signature Algorithm: sha256WithRSAEncryption
a3:a9:52:fa:23:46:ca:ab:0b:90:d8:82:5e:aa:36:9a:b4:86:
ec:3e:ef:05:ab:83:49:8b:bc:d3:f1:c8:72:f0:cc:cb:45:36:
7b:2e:64:9c:9e:7f:b2:81:bd:80:17:ad:e6:a4:d8:a9:16:11:
54:da:3a:19:69:e2:c6:56:c9:6b:1a:46:63:7a:28:fa:03:21:
05:5c:e1:0e:3c:9f:86:da:ea:44:5b:1c:10:50:05:de:2d:4d:
11:23:d1:e0:22:a6:c8:0e:97:50:5c:62:da:59:f7:88:f9:0c:
97:51:84:8f:c9:64:9a:4d:55:18:49:00:2c:20:7f:e7:c3:8c:
54:ba:5b:9d:a1:8a:ba:92:57:39:30:99:84:4b:d7:f9:82:af:
ca:a7:1a:78:6a:3f:c2:e9:30:f4:3d:d6:b7:46:e4:be:ee:e7:
09:cd:f6:b8:49:3d:0d:1b:a9:2c:1e:0a:4d:12:a7:25:a0:08:
ac:cd:c9:41:fd:fd:e3:ed:5c:5a:77:21:e6:22:38:66:8e:60:
ca:66:80:03:ec:ba:8e:07:f8:99:5f:5c:85:41:f6:08:d1:08:
d5:a0:f6:07:5f:cc:88:8d:ea:cc:d5:04:a0:ca:40:a1:1a:5f:
aa:d9:40:0c:ea:8d:70:41:09:8a:c8:18:60:24:e1:00:8e:97:
3a:71:19:f4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQi/AsvvtvKwyMh812W5FrJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYTcxZmY5NTZhYjhmOGY3ZTdmNTlkNDA5YWM3YWY3YTJi
MGE4NjQwHhcNMjUwMTAxMTc0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWMxMmE2ZTFmOGM4MDA4NTk2M2E3NDQxMTMyOTMyZTg1NjE4OWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYXMuwNZzwdU3/DIipxsgHXWVVmT
ZK4U3WYydKv2GPU8B48jAYwM9V06LM9Zkgx0WoE5kucIREvjUpYBJJn8wENeW73+
jYaYVJjTsefF0q6YxYEvuY4bW8TiYGL7FmWEhZsQGYxG/TUPp/uVyxfYNntLyFF8
r27PrXKt32dgPHQR29/eCWSs3ZN23Dk9E6UK+RgRUUoJYFjsH3mWa0db27SRb2S7
xy+mDeBW70XLHKqbW/8SQAJDidJYvsAvxME9EfZYK0HBtlVIW8K5quzzgP3W0k5a
HgMHTdlT2hdqRY+k0ImZbVxcbhB3cFDBG8UpqhXTHKMvRV2bpVU2++R5KQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDrBKm4fjIAIWWOnRBEyky6FYYnpMB8GA1UdIwQY
MBaAFAynH/lWq4+Pfn9Z1AmseveisKhkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZWI4NWUtYmJiMC00ZGE3LWE0ZTAt
ZDJlYTYwMDRkNTUzLzEvT3NFcWJoLU1nQWhaWTZkRUVUS1RMb1ZoaWVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ZWI4NWUtYmJiMC00ZGE3LWE0ZTAtZDJlYTYwMDRkNTUz
LzEvREtjZi1WYXJqNDktZjFuVUNheDY5Nkt3cUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwZflMA8E
AgACMAkDBwAgAQZ8J/QwDQYJKoZIhvcNAQELBQADggEBAKOpUvojRsqrC5DYgl6q
Npq0huw+7wWrg0mLvNPxyHLwzMtFNnsuZJyef7KBvYAXreak2KkWEVTaOhlp4sZW
yWsaRmN6KPoDIQVc4Q48n4ba6kRbHBBQBd4tTREj0eAipsgOl1BcYtpZ94j5DJdR
hI/JZJpNVRhJACwgf+fDjFS6W52hirqSVzkwmYRL1/mCr8qnGnhqP8LpMPQ91rdG
5L7u5wnN9rhJPQ0bqSweCk0SpyWgCKzNyUH9/ePtXFp3IeYiOGaOYMpmgAPsuo4H
+JlfXIVB9gjRCNWg9gdfzIiN6szVBKDKQKEaX6rZQAzqjXBBCYrIGGAk4QCOlzpx
GfQ=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:44 2025 by rpki-client