Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-OswzRevrV2DebcIQRHsYjkREFE.roa
File: 1-OswzRevrV2DebcIQRHsYjkREFE.roa (raw, json)
Hash identifier: P7qDnBUcDVovbH517fq2GYmB24DHk22bZU1xMQXyG9U=
Subject key identifier: F8:EB:30:CD:17:AF:AD:5D:83:79:B7:08:41:11:EC:62:39:11:10:51
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019427B5F96F2355C1DE5D347FC8FEFEC5BF
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-OswzRevrV2DebcIQRHsYjkREFE.roa
Signing time: Thu 02 Jan 2025 15:50:24 +0000
ROA not before: Thu 02 Jan 2025 15:50:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 85.133.234.0/24 maxlen: 24
85.133.246.0/24 maxlen: 24
85.133.251.0/24 maxlen: 24
85.133.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f9:6f:23:55:c1:de:5d:34:7f:c8:fe:fe:c5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 15:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8eb30cd17afad5d8379b7084111ec6239111051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:29:6a:79:58:03:09:e3:21:50:22:5a:c3:
eb:44:25:08:b5:1f:d0:01:dc:d0:24:92:1f:98:8a:
47:18:60:db:c9:1e:15:90:f8:87:53:c7:8b:2c:45:
89:a2:2a:4a:72:f4:68:a0:16:2d:69:76:92:a3:b9:
64:0f:e6:fa:6c:5c:d1:2a:dc:fc:fd:5a:1f:96:f1:
3f:7f:c1:39:c9:9b:26:3e:52:42:cd:bd:3b:da:32:
93:b2:6d:06:a5:da:4c:d5:99:0a:ea:13:77:43:df:
bc:95:9f:61:63:64:cb:db:bc:4d:86:fe:38:06:b9:
96:83:0a:65:70:99:9b:56:0d:1e:c4:38:1e:ae:8f:
3b:26:15:b3:8a:b9:5d:f2:c4:74:7d:c0:d3:e2:aa:
d0:99:91:cb:3c:98:98:ef:94:f7:23:d2:a2:5b:51:
49:dd:2a:a2:a8:32:93:e5:3c:70:f8:cd:ab:51:5b:
8e:4e:79:25:3a:01:8e:38:53:cb:46:ba:9e:42:36:
b3:0a:bd:1c:e7:40:90:cf:83:7e:ab:55:f5:23:49:
63:56:66:18:a1:be:6f:dc:bd:9d:a1:57:f5:18:26:
aa:ae:a6:a8:f4:c1:68:44:22:70:8c:27:06:71:52:
ab:bf:a4:57:f9:b4:e5:fd:57:9b:b7:f7:3c:ef:f5:
a6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EB:30:CD:17:AF:AD:5D:83:79:B7:08:41:11:EC:62:39:11:10:51
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1-OswzRevrV2DebcIQRHsYjkREFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.234.0/24
85.133.246.0/24
85.133.251.0-85.133.252.255
Signature Algorithm: sha256WithRSAEncryption
98:de:ef:56:8a:93:f1:61:46:77:41:28:a9:e3:f4:b9:97:ba:
f4:e4:50:58:f5:5c:0b:50:cb:0e:9f:4f:99:54:a0:37:55:9a:
e4:ce:be:c9:a7:ca:2a:9b:2c:88:3c:63:28:5b:7a:31:c3:d6:
a5:5e:53:d5:49:17:fd:e9:91:20:3b:d7:84:4f:c4:57:a0:7d:
39:e0:74:a8:ba:f2:bb:a5:02:68:a3:50:54:48:85:0d:c0:8e:
f0:24:3f:12:af:8f:f4:92:79:fc:19:dc:54:62:8e:ec:1f:14:
14:97:d0:fc:5d:b0:62:e7:a1:eb:bb:8b:1c:7e:d3:fb:29:77:
cc:5c:4b:d7:70:d3:fb:57:d0:74:0e:43:fb:dd:cf:16:70:23:
e5:ed:67:21:2e:db:88:dc:a2:df:a3:70:03:f6:7f:f1:6a:85:
c1:5b:bf:83:eb:84:bf:1b:57:5e:bc:e2:65:22:50:13:2a:17:
fc:8f:e3:cc:c2:cf:3e:20:4a:bb:9e:38:a5:ea:4a:5f:eb:f0:
61:89:e2:0c:53:10:ae:8b:04:5f:01:00:a0:10:47:d3:de:06:
67:4d:19:27:96:ce:da:d8:80:bf:f8:27:53:bb:ee:df:75:da:
df:21:85:b7:55:52:50:c5:de:68:5b:cd:60:dd:2d:0b:71:18:
f3:d3:f0:7a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQntflvI1XB3l00f8j+/sW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjUwMTAyMTU1MDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGViMzBjZDE3YWZhZDVkODM3OWI3MDg0MTExZWM2MjM5MTExMDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0YpanlYAwnjIVAiWsPrRCUItR/Q
AdzQJJIfmIpHGGDbyR4VkPiHU8eLLEWJoipKcvRooBYtaXaSo7lkD+b6bFzRKtz8
/VoflvE/f8E5yZsmPlJCzb072jKTsm0GpdpM1ZkK6hN3Q9+8lZ9hY2TL27xNhv44
BrmWgwplcJmbVg0exDgero87JhWzirld8sR0fcDT4qrQmZHLPJiY75T3I9KiW1FJ
3SqiqDKT5Txw+M2rUVuOTnklOgGOOFPLRrqeQjazCr0c50CQz4N+q1X1I0ljVmYY
ob5v3L2doVf1GCaqrqao9MFoRCJwjCcGcVKrv6RX+bTl/Vebt/c87/WmfwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFPjrMM0Xr61dg3m3CEER7GI5ERBRMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvMS1Pc3d6UmV2clYyRGViY0lRUkhzWWprUkVGRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjAvZWY1MzZjLTAzZDMtNGFjNS1iMTI1LTVkMWZhNjZjMzYz
Yi8xL3pWNDVaWW8tOXZFOG9oekJHazR6NjgyVVp3SS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAzBggrBgEFBQcBBwEB/wQkMCIwIAQCAAEwGgMEAFWF6gME
AFWF9jAMAwQAVYX7AwQAVYX8MA0GCSqGSIb3DQEBCwUAA4IBAQCY3u9WipPxYUZ3
QSip4/S5l7r05FBY9VwLUMsOn0+ZVKA3VZrkzr7Jp8oqmyyIPGMoW3oxw9alXlPV
SRf96ZEgO9eET8RXoH054HSouvK7pQJoo1BUSIUNwI7wJD8Sr4/0knn8GdxUYo7s
HxQUl9D8XbBi56Hru4scftP7KXfMXEvXcNP7V9B0DkP73c8WcCPl7WchLtuI3KLf
o3AD9n/xaoXBW7+D64S/G1devOJlIlATKhf8j+PMws8+IEq7njil6kpf6/BhieIM
UxCuiwRfAQCgEEfT3gZnTRknls7a2IC/+CdTu+7fddrfIYW3VVJQxd5oW81g3S0L
cRjz0/B6
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:05 2025 by rpki-client