Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/OazFtN4IiCarucNk5wRvdseM_QM.roa
File: OazFtN4IiCarucNk5wRvdseM_QM.roa (raw, json)
Hash identifier: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=
Subject key identifier: 39:AC:C5:B4:DE:08:88:26:AB:B9:C3:64:E7:04:6F:76:C7:8C:FD:03
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 019421B1EC21B050BC5F91CE014FEAC972CF
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/OazFtN4IiCarucNk5wRvdseM_QM.roa
Signing time: Wed 01 Jan 2025 11:48:15 +0000
ROA not before: Wed 01 Jan 2025 11:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203164
IP address blocks: 185.150.60.0/22 maxlen: 22
185.150.60.0/23 maxlen: 23
185.150.60.0/24 maxlen: 24
185.150.61.0/24 maxlen: 24
185.150.62.0/23 maxlen: 23
185.150.62.0/24 maxlen: 24
185.150.63.0/24 maxlen: 24
2a07:6e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ec:21:b0:50:bc:5f:91:ce:01:4f:ea:c9:72:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39acc5b4de088826abb9c364e7046f76c78cfd03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:e9:c7:44:e1:ae:0a:f1:d8:48:4c:29:a7:
b4:73:17:d9:53:f5:02:df:18:45:e7:3e:bf:a9:32:
db:92:bf:d4:4e:fe:c0:ef:32:92:74:c7:07:c8:42:
1c:79:a1:c7:88:f7:fd:f3:d8:34:16:c1:4f:97:1e:
31:ef:6b:3b:1d:82:90:57:28:1e:75:4d:7a:26:8f:
73:73:3d:f8:39:b6:66:5d:f1:94:79:1f:00:3a:73:
30:d4:c4:c9:2d:ee:88:40:99:c0:a6:49:61:e1:75:
c4:79:bb:d4:6f:38:d4:c0:f7:ec:7a:65:c2:df:89:
4f:0b:4f:21:88:ce:90:85:43:96:e6:e8:60:91:1b:
ad:1f:06:eb:42:33:08:52:4a:d8:d0:07:3a:6b:f3:
05:dc:8b:f7:18:6a:7f:89:2c:03:01:aa:15:12:48:
bc:9a:b7:e8:ae:e6:1e:2e:18:69:39:11:22:40:f6:
e8:1e:3d:a7:6b:46:94:3c:9c:1a:02:ff:6a:81:32:
76:47:b0:6c:ce:d5:40:bb:12:c1:25:75:a8:b3:07:
54:1e:59:94:13:c8:2c:f5:ea:dc:ab:4b:10:a6:c0:
4a:20:90:8d:d1:3e:aa:a3:0e:46:31:82:1e:2c:25:
4a:c7:f9:2d:c6:a6:70:fc:b3:1d:1c:65:ab:ea:e7:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AC:C5:B4:DE:08:88:26:AB:B9:C3:64:E7:04:6F:76:C7:8C:FD:03
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/OazFtN4IiCarucNk5wRvdseM_QM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.60.0/22
IPv6:
2a07:6e00::/29
Signature Algorithm: sha256WithRSAEncryption
23:84:77:62:e5:99:48:a3:f5:ad:58:bf:35:c5:d9:7a:a3:cc:
75:da:16:89:1d:a9:6e:b7:34:93:45:ba:c9:a4:66:60:87:51:
0b:ab:2c:11:5e:77:ab:b5:62:8b:cf:1f:5b:26:09:1d:2d:c3:
59:bc:6e:a9:34:2c:fd:b4:6c:a5:fb:6d:0d:47:61:14:d3:ba:
0b:10:af:d6:e8:e9:de:03:48:2f:fa:38:1b:89:fb:4c:53:a4:
8d:cf:7e:39:6d:c1:c8:81:30:34:04:ac:b7:76:a3:95:29:a4:
25:c5:1e:a5:d4:50:20:48:04:b1:0d:07:0d:f6:ed:6a:ad:d6:
a3:58:7b:1d:4c:3d:87:2a:6c:ac:16:7d:43:c4:e2:8a:d0:de:
be:15:c4:40:46:a8:92:de:93:36:08:ba:ef:0d:a4:1b:20:c2:
60:b3:fb:96:d8:52:dc:51:c4:5d:b9:e5:2a:98:18:8a:87:c2:
c7:3d:02:4d:6b:6c:51:28:ef:66:ae:da:68:6d:61:69:b9:bb:
1c:66:29:39:a7:70:a7:a8:6f:2e:8a:14:fa:87:35:62:a5:71:
23:03:4b:30:9d:59:46:e1:a4:3d:6b:59:62:2e:ac:cb:a1:95:
e2:bd:bf:9e:a1:84:5d:61:94:eb:9c:e3:43:ac:1e:6f:f0:fe:
84:f8:b1:88
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhsewhsFC8X5HOAU/qyXLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YTkwZjY4OTY2Nzg0NDJhZmFlZTFiYWFhYTZiMmEyZGVj
YWNkM2IwHhcNMjUwMTAxMTE0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWFjYzViNGRlMDg4ODI2YWJiOWMzNjRlNzA0NmY3NmM3OGNmZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHDpx0Thrgrx2EhMKae0cxfZU/UC
3xhF5z6/qTLbkr/UTv7A7zKSdMcHyEIceaHHiPf989g0FsFPlx4x72s7HYKQVyge
dU16Jo9zcz34ObZmXfGUeR8AOnMw1MTJLe6IQJnApklh4XXEebvUbzjUwPfsemXC
34lPC08hiM6QhUOW5uhgkRutHwbrQjMIUkrY0Ac6a/MF3Iv3GGp/iSwDAaoVEki8
mrforuYeLhhpOREiQPboHj2na0aUPJwaAv9qgTJ2R7BsztVAuxLBJXWoswdUHlmU
E8gs9ercq0sQpsBKIJCN0T6qow5GMYIeLCVKx/ktxqZw/LMdHGWr6ud9DQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDmsxbTeCIgmq7nDZOcEb3bHjP0DMB8GA1UdIwQY
MBaAFLSpD2iWZ4RCr67huqqmsqLeys07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEtrUGFKWm5oRUt2cnVHNnFxYXlvdDdLelRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9lNjE2MTQtZWJjNS00NzMxLTg1NjAt
OWQxODEyOTk5YTM1LzEvT2F6RnRONElpQ2FydWNOazV3UnZkc2VNX1FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9lNjE2MTQtZWJjNS00NzMxLTg1NjAtOWQxODEyOTk5YTM1
LzEvdEtrUGFKWm5oRUt2cnVHNnFxYXlvdDdLelRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZY8MA0E
AgACMAcDBQMqB24AMA0GCSqGSIb3DQEBCwUAA4IBAQAjhHdi5ZlIo/WtWL81xdl6
o8x12haJHalutzSTRbrJpGZgh1ELqywRXnertWKLzx9bJgkdLcNZvG6pNCz9tGyl
+20NR2EU07oLEK/W6OneA0gv+jgbiftMU6SNz345bcHIgTA0BKy3dqOVKaQlxR6l
1FAgSASxDQcN9u1qrdajWHsdTD2HKmysFn1DxOKK0N6+FcRARqiS3pM2CLrvDaQb
IMJgs/uW2FLcUcRdueUqmBiKh8LHPQJNa2xRKO9mrtpobWFpubscZik5p3CnqG8u
ihT6hzVipXEjA0swnVlG4aQ9a1liLqzLoZXivb+eoYRdYZTrnONDrB5v8P6E+LGI
-----END CERTIFICATE-----
Generated at Sun Apr 13 16:01:00 2025 by rpki-client