Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa
File: ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa (raw, json)
Hash identifier: bLNeuXUfAO52F/EGBeoEWZNzHoJs12X+xc+mr+Ggzjo=
Subject key identifier: A1:FB:1B:46:9D:9F:77:92:C2:64:BE:6D:D0:86:86:36:37:5B:19:5D
Certificate issuer: /CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Certificate serial: 019427B6328DB1E73A473F615736B6B262DA
Authority key identifier: 35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa
Signing time: Thu 02 Jan 2025 15:50:39 +0000
ROA not before: Thu 02 Jan 2025 15:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25091
IP address blocks: 185.247.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:32:8d:b1:e7:3a:47:3f:61:57:36:b6:b2:62:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3594cacdd935e45cf71c616780a1b1d4aa68c7b5
Validity
Not Before: Jan 2 15:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1fb1b469d9f7792c264be6dd0868636375b195d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:97:2a:69:c6:1c:e4:49:ef:6a:53:13:a8:
6c:e0:65:03:47:aa:ac:19:fb:ae:35:39:1f:3c:4d:
7f:00:48:74:fc:bc:a9:c9:02:80:97:52:0e:51:78:
35:51:f2:3b:e0:39:25:16:10:e0:82:e5:24:60:b8:
d4:e9:20:b8:66:78:f1:40:72:ff:3d:d8:c1:62:17:
f1:93:c0:75:af:ad:8b:da:95:18:27:50:81:c0:00:
3b:9e:65:ce:04:a4:5e:a2:92:b1:2d:5e:86:62:15:
40:66:a9:e0:7d:2f:55:d9:35:9a:83:20:de:1f:be:
75:ef:48:e9:a8:92:04:55:19:c2:0d:32:ae:30:29:
42:52:3c:20:c7:c5:ca:c3:71:a3:cd:05:2c:73:7e:
64:01:d6:97:b1:b6:d4:eb:f3:0d:c6:c7:88:68:0c:
ad:0b:1e:4b:7d:1f:1e:65:96:55:42:97:37:69:2d:
1f:b7:07:4d:ea:be:ce:1b:e5:8a:ae:4c:df:b8:d0:
40:21:06:4d:ac:46:b7:b0:87:42:a3:b8:42:71:92:
ce:a2:9e:4e:14:16:a2:90:11:3e:be:06:92:d6:9b:
28:56:19:69:77:70:44:f1:b4:ed:66:26:43:a3:40:
d1:18:15:4d:57:68:28:45:d2:02:61:fb:94:e7:de:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FB:1B:46:9D:9F:77:92:C2:64:BE:6D:D0:86:86:36:37:5B:19:5D
X509v3 Authority Key Identifier:
keyid:35:94:CA:CD:D9:35:E4:5C:F7:1C:61:67:80:A1:B1:D4:AA:68:C7:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZTKzdk15Fz3HGFngKGx1Kpox7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/ofsbRp2fd5LCZL5t0IaGNjdbGV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb245-42a2-498f-b7b2-4abdc2bb9fa3/1/NZTKzdk15Fz3HGFngKGx1Kpox7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.76.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:12:14:85:e1:88:42:92:df:eb:51:8b:c2:df:28:4f:95:e1:
60:dd:cd:82:46:4b:d3:98:c1:85:7f:7f:79:74:0f:04:cb:5c:
5d:2c:21:a7:e2:f8:10:3e:83:3e:4b:95:36:95:23:c0:e5:40:
92:ea:a8:77:9e:c3:e9:52:44:0a:99:8b:1a:c3:9c:8d:52:61:
aa:4c:ec:c8:11:2d:0b:cb:c2:18:b1:f5:ae:34:d9:70:46:de:
8a:8d:97:43:62:64:5e:4b:34:ec:4e:91:f5:86:b1:5e:a6:4f:
4f:a3:e8:cc:80:a7:4b:d6:90:69:60:53:16:02:d8:3e:39:65:
5d:1f:0c:0c:6b:f4:86:0a:ec:52:2b:57:d2:1b:52:16:3b:97:
88:14:50:dd:d4:45:11:73:62:91:fa:8d:ad:00:67:bd:29:32:
42:05:2d:8c:82:83:d7:d5:f2:e5:03:2b:49:24:80:39:47:0c:
22:ff:32:14:22:7f:58:08:8a:f4:cd:b6:7d:8c:46:8c:98:ff:
aa:29:50:6d:e4:2d:9f:80:3e:f8:27:1b:11:97:56:3a:68:4d:
a7:dd:de:c8:a9:56:24:1c:6a:46:0a:56:eb:f9:22:2d:73:37:
26:fb:69:27:71:9e:8a:25:c9:3d:5d:35:ec:f9:68:21:55:35:
04:73:0d:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntjKNsec6Rz9hVza2smLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1OTRjYWNkZDkzNWU0NWNmNzFjNjE2NzgwYTFiMWQ0YWE2
OGM3YjUwHhcNMjUwMTAyMTU1MDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMWZiMWI0NjlkOWY3NzkyYzI2NGJlNmRkMDg2ODYzNjM3NWIxOTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVOXKmnGHORJ72pTE6hs4GUDR6qs
GfuuNTkfPE1/AEh0/LypyQKAl1IOUXg1UfI74DklFhDgguUkYLjU6SC4ZnjxQHL/
PdjBYhfxk8B1r62L2pUYJ1CBwAA7nmXOBKReopKxLV6GYhVAZqngfS9V2TWagyDe
H75170jpqJIEVRnCDTKuMClCUjwgx8XKw3GjzQUsc35kAdaXsbbU6/MNxseIaAyt
Cx5LfR8eZZZVQpc3aS0ftwdN6r7OG+WKrkzfuNBAIQZNrEa3sIdCo7hCcZLOop5O
FBaikBE+vgaS1psoVhlpd3BE8bTtZiZDo0DRGBVNV2goRdICYfuU596yfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKH7G0adn3eSwmS+bdCGhjY3WxldMB8GA1UdIwQY
MBaAFDWUys3ZNeRc9xxhZ4ChsdSqaMe1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjIt
NGFiZGMyYmI5ZmEzLzEvb2ZzYlJwMmZkNUxDWkw1dDBJYUdOamRiR1YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS81Y2IyNDUtNDJhMi00OThmLWI3YjItNGFiZGMyYmI5ZmEz
LzEvTlpUS3pkazE1RnozSEdGbmdLR3gxS3BveDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufdMMA0G
CSqGSIb3DQEBCwUAA4IBAQCcEhSF4YhCkt/rUYvC3yhPleFg3c2CRkvTmMGFf395
dA8Ey1xdLCGn4vgQPoM+S5U2lSPA5UCS6qh3nsPpUkQKmYsaw5yNUmGqTOzIES0L
y8IYsfWuNNlwRt6KjZdDYmReSzTsTpH1hrFepk9Po+jMgKdL1pBpYFMWAtg+OWVd
HwwMa/SGCuxSK1fSG1IWO5eIFFDd1EURc2KR+o2tAGe9KTJCBS2MgoPX1fLlAytJ
JIA5Rwwi/zIUIn9YCIr0zbZ9jEaMmP+qKVBt5C2fgD74JxsRl1Y6aE2n3d7IqVYk
HGpGClbr+SItczcm+2kncZ6KJck9XTXs+WghVTUEcw1z
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:17:29 2025 by rpki-client