Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/OMxHi5JK05DSMGK7ve_zhY-IUTA.roa
File: OMxHi5JK05DSMGK7ve_zhY-IUTA.roa (raw, json)
Hash identifier: 35sYR6BG69zLQEok7pk/D7dgz6S6dUuxJp8Ecka7Hac=
Subject key identifier: 38:CC:47:8B:92:4A:D3:90:D2:30:62:BB:BD:EF:F3:85:8F:88:51:30
Certificate issuer: /CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc
Certificate serial: 0194236990701FD3DE157350AB5B86676C2B
Authority key identifier: 5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/OMxHi5JK05DSMGK7ve_zhY-IUTA.roa
Signing time: Wed 01 Jan 2025 19:48:28 +0000
ROA not before: Wed 01 Jan 2025 19:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47176
IP address blocks: 5.183.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:90:70:1f:d3:de:15:73:50:ab:5b:86:67:6c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a081a52ac9cb0856df6563ed87d38b0caca7ccc
Validity
Not Before: Jan 1 19:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38cc478b924ad390d23062bbbdeff3858f885130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:4a:7b:69:58:46:eb:96:21:6f:8c:96:1e:
26:75:3e:ec:75:d9:dd:4f:b3:99:dd:8f:9c:74:55:
02:41:f4:0a:25:72:51:e7:cd:96:7c:d3:77:3b:42:
58:96:fd:68:d5:0c:dc:56:72:c4:b9:20:0a:76:59:
cf:84:fa:20:7d:34:5e:08:db:6a:1e:54:14:4e:56:
aa:34:43:46:98:c6:df:bf:a2:77:08:ad:15:b2:4e:
95:22:50:de:f4:2a:0a:be:7a:c3:14:0a:64:1b:30:
33:b0:45:1e:e8:05:ce:11:3e:ea:5a:b2:52:9f:f1:
c7:01:90:07:c6:40:d9:f8:b0:e5:04:fe:a1:25:f4:
ee:bf:a3:4b:2b:0b:ff:aa:42:8e:37:3c:7f:24:79:
da:3c:29:37:84:80:77:f4:a3:dc:03:64:fd:1b:ab:
29:da:61:7d:d3:5b:a4:07:db:76:fc:54:21:b2:06:
16:29:7b:43:8c:e1:0f:d7:88:b8:7f:dd:a4:08:a0:
9f:6b:d6:c3:d3:d5:56:b5:f3:d6:1b:d5:90:20:c4:
6d:56:8e:8e:7b:06:f2:a9:f0:e0:5f:80:8d:00:ad:
6d:46:a9:28:31:51:c2:6d:86:72:d3:7b:8d:6e:f3:
57:aa:18:75:7a:08:fe:16:0d:59:07:d6:66:3b:47:
d6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CC:47:8B:92:4A:D3:90:D2:30:62:BB:BD:EF:F3:85:8F:88:51:30
X509v3 Authority Key Identifier:
keyid:5A:08:1A:52:AC:9C:B0:85:6D:F6:56:3E:D8:7D:38:B0:CA:CA:7C:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WggaUqycsIVt9lY-2H04sMrKfMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/OMxHi5JK05DSMGK7ve_zhY-IUTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c6f31a-7ca7-48c4-93ff-c480da0264ca/1/WggaUqycsIVt9lY-2H04sMrKfMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.4.0/24
Signature Algorithm: sha256WithRSAEncryption
29:7d:1d:14:18:87:1e:b1:f8:06:4f:34:e6:4a:a0:95:42:da:
5c:cb:27:2c:48:6f:f6:10:0a:1d:59:1f:13:fb:e1:d8:b7:41:
75:5f:6d:43:15:a4:7a:28:d9:c0:47:63:58:38:88:88:10:0c:
06:a0:d4:61:eb:06:3d:9c:02:e1:62:cd:2b:81:9c:e0:83:8e:
30:56:be:f3:c5:d5:66:cb:64:b0:ac:6d:e5:5b:4d:b4:8e:d8:
05:09:2d:02:2a:4b:76:8b:d5:f6:ae:97:2a:1e:76:9d:31:ee:
88:28:ef:ec:d3:60:27:78:04:3c:1a:de:85:af:42:c3:9b:72:
a2:88:7e:e2:29:da:f0:39:31:0c:bf:41:79:7b:e1:ce:86:c7:
16:e8:6c:9c:03:bb:cb:af:cc:e9:76:5f:06:12:7f:ba:5d:04:
b7:f9:a3:49:6f:32:d4:22:17:8d:cc:30:1a:e8:f1:d3:3d:8c:
f5:78:62:9d:73:87:98:57:d2:4f:bf:3a:f5:ee:da:d7:cd:6b:
8d:cd:c9:96:ee:fc:d4:83:fc:2c:8b:19:bc:e5:81:c8:e9:a7:
28:a8:1b:07:6f:5e:62:9f:d9:ef:64:47:1b:4f:50:da:15:a5:
59:f8:0b:94:b2:db:fd:18:09:09:48:9e:2b:92:e6:03:1d:bb:
29:1e:d4:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaZBwH9PeFXNQq1uGZ2wrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMDgxYTUyYWM5Y2IwODU2ZGY2NTYzZWQ4N2QzOGIwY2Fj
YTdjY2MwHhcNMjUwMTAxMTk0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGNjNDc4YjkyNGFkMzkwZDIzMDYyYmJiZGVmZjM4NThmODg1MTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmZKe2lYRuuWIW+Mlh4mdT7sddnd
T7OZ3Y+cdFUCQfQKJXJR582WfNN3O0JYlv1o1QzcVnLEuSAKdlnPhPogfTReCNtq
HlQUTlaqNENGmMbfv6J3CK0Vsk6VIlDe9CoKvnrDFApkGzAzsEUe6AXOET7qWrJS
n/HHAZAHxkDZ+LDlBP6hJfTuv6NLKwv/qkKONzx/JHnaPCk3hIB39KPcA2T9G6sp
2mF901ukB9t2/FQhsgYWKXtDjOEP14i4f92kCKCfa9bD09VWtfPWG9WQIMRtVo6O
ewbyqfDgX4CNAK1tRqkoMVHCbYZy03uNbvNXqhh1egj+Fg1ZB9ZmO0fWfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDjMR4uSStOQ0jBiu73v84WPiFEwMB8GA1UdIwQY
MBaAFFoIGlKsnLCFbfZWPth9OLDKynzMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dnYVVxeWNzSVZ0OWxZLTJIMDRzTXJLZk13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jNmYzMWEtN2NhNy00OGM0LTkzZmYt
YzQ4MGRhMDI2NGNhLzEvT014SGk1SkswNURTTUdLN3ZlX3poWS1JVVRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9jNmYzMWEtN2NhNy00OGM0LTkzZmYtYzQ4MGRhMDI2NGNh
LzEvV2dnYVVxeWNzSVZ0OWxZLTJIMDRzTXJLZk13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbcEMA0G
CSqGSIb3DQEBCwUAA4IBAQApfR0UGIcesfgGTzTmSqCVQtpcyycsSG/2EAodWR8T
++HYt0F1X21DFaR6KNnAR2NYOIiIEAwGoNRh6wY9nALhYs0rgZzgg44wVr7zxdVm
y2SwrG3lW020jtgFCS0CKkt2i9X2rpcqHnadMe6IKO/s02AneAQ8Gt6Fr0LDm3Ki
iH7iKdrwOTEMv0F5e+HOhscW6GycA7vLr8zpdl8GEn+6XQS3+aNJbzLUIheNzDAa
6PHTPYz1eGKdc4eYV9JPvzr17trXzWuNzcmW7vzUg/wsixm85YHI6acoqBsHb15i
n9nvZEcbT1DaFaVZ+AuUstv9GAkJSJ4rkuYDHbspHtS5
-----END CERTIFICATE-----
Generated at Thu Apr 17 07:31:29 2025 by rpki-client