Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa
File: O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa (raw, json)
Hash identifier: g8MzInjaeIjPLeGBhJPRfcI+t8p/SupgeCBEHS1Ipd4=
Subject key identifier: 3B:B8:3C:93:2B:85:E2:D3:0C:E3:EB:E4:ED:8E:BD:39:0E:D7:1E:89
Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Certificate serial: 019424B36CF614778236E1A67BDF6667FFC8
Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa
Signing time: Thu 02 Jan 2025 01:48:46 +0000
ROA not before: Thu 02 Jan 2025 01:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 128.0.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 19:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:6c:f6:14:77:82:36:e1:a6:7b:df:66:67:ff:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6
Validity
Not Before: Jan 2 01:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bb83c932b85e2d30ce3ebe4ed8ebd390ed71e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:80:f2:92:a7:d1:01:93:b7:48:f8:91:aa:
8a:7a:e3:c0:5a:d3:21:ba:1a:93:07:f0:5d:f6:dc:
58:09:dc:e8:ae:bb:98:18:a0:72:21:67:18:ad:a6:
17:fe:02:45:19:64:40:8e:b9:f8:41:91:97:18:b9:
39:68:37:9b:b7:c8:c7:63:83:b9:be:4f:db:47:e1:
c6:0b:18:11:4a:d2:11:b1:30:c2:e1:ed:55:e8:78:
0d:05:d6:86:f3:fd:8a:58:6b:ec:09:1e:94:91:48:
11:6d:50:b7:cc:da:ed:62:de:67:df:ba:6b:af:e5:
fd:d9:49:24:2e:9c:6c:c8:e8:ce:e2:49:37:05:16:
af:80:e3:5f:fd:f2:25:78:7c:16:0a:40:d5:b5:d5:
f6:55:3b:c9:99:e0:01:6a:eb:29:df:85:a2:14:75:
81:10:57:65:b8:92:22:6b:3d:64:39:35:35:5f:5f:
ad:e4:5a:31:43:8a:88:4d:f2:85:24:a4:b3:17:5f:
01:03:02:7d:a7:59:ec:f6:6f:2d:07:98:28:bd:08:
d3:2d:13:69:a6:86:ce:84:88:26:5e:e1:3b:6b:14:
5b:65:0b:dd:cf:9b:c7:26:47:f5:12:57:5f:9e:75:
e8:d2:29:30:81:65:45:7c:6b:3f:39:76:39:99:c0:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:3C:93:2B:85:E2:D3:0C:E3:EB:E4:ED:8E:BD:39:0E:D7:1E:89
X509v3 Authority Key Identifier:
keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/O7g8kyuF4tMM4-vk7Y69OQ7XHok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.0.45.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c7:fc:19:cd:d2:5e:b1:51:65:ca:49:45:cf:29:bb:b2:83:
55:72:70:5f:c6:9f:40:60:65:54:0d:98:54:c8:f9:68:92:5e:
6d:4a:7b:3d:ed:0f:08:4d:18:a9:cb:90:2a:f8:d4:d6:18:9f:
e7:33:be:5d:ee:f9:1b:80:f6:71:a1:25:84:73:ae:e9:2e:b9:
1e:cd:cc:d0:75:bf:89:87:64:45:be:ff:2f:16:8f:17:50:75:
5c:9f:00:09:50:b0:d1:db:18:f2:d8:bb:a8:7f:ef:65:e7:35:
66:b9:b4:55:06:d7:98:8d:f2:4c:c7:ca:ca:60:0e:99:45:21:
20:95:76:e1:f0:d5:32:73:b0:0c:2f:7e:8f:f4:e3:59:47:63:
ca:b9:41:cd:71:3d:a4:96:80:9a:4a:70:41:13:b7:b9:7c:81:
a6:c9:1a:0b:15:fe:f5:75:7a:1d:8a:27:3d:4e:a6:67:5d:71:
6b:66:f8:55:fa:2c:12:30:ce:c9:14:fa:d7:e1:4a:06:03:ed:
a5:4a:12:eb:d0:b9:70:b5:ff:b7:6d:00:e1:68:73:5d:12:76:
4d:6d:20:0b:c3:45:db:db:f5:94:fd:94:0c:c1:43:c9:a3:7b:
a9:38:9c:49:f3:aa:d9:ad:cb:e9:07:8c:a0:78:98:6b:95:bd:
16:81:a6:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks2z2FHeCNuGme99mZ//IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk
ODVjZDYwHhcNMjUwMTAyMDE0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmI4M2M5MzJiODVlMmQzMGNlM2ViZTRlZDhlYmQzOTBlZDcxZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuASA8pKn0QGTt0j4kaqKeuPAWtMh
uhqTB/Bd9txYCdzorruYGKByIWcYraYX/gJFGWRAjrn4QZGXGLk5aDebt8jHY4O5
vk/bR+HGCxgRStIRsTDC4e1V6HgNBdaG8/2KWGvsCR6UkUgRbVC3zNrtYt5n37pr
r+X92UkkLpxsyOjO4kk3BRavgONf/fIleHwWCkDVtdX2VTvJmeABausp34WiFHWB
EFdluJIiaz1kOTU1X1+t5FoxQ4qITfKFJKSzF18BAwJ9p1ns9m8tB5govQjTLRNp
pobOhIgmXuE7axRbZQvdz5vHJkf1EldfnnXo0ikwgWVFfGs/OXY5mcCyzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDu4PJMrheLTDOPr5O2OvTkO1x6JMB8GA1UdIwQY
MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct
NjQ5NDVhNGY4ZTEyLzEvTzdnOGt5dUY0dE1NNC12azdZNjlPUTdYSG9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy
LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAAtMA0G
CSqGSIb3DQEBCwUAA4IBAQCqx/wZzdJesVFlyklFzym7soNVcnBfxp9AYGVUDZhU
yPlokl5tSns97Q8ITRipy5Aq+NTWGJ/nM75d7vkbgPZxoSWEc67pLrkezczQdb+J
h2RFvv8vFo8XUHVcnwAJULDR2xjy2Luof+9l5zVmubRVBteYjfJMx8rKYA6ZRSEg
lXbh8NUyc7AML36P9ONZR2PKuUHNcT2kloCaSnBBE7e5fIGmyRoLFf71dXodiic9
TqZnXXFrZvhV+iwSMM7JFPrX4UoGA+2lShLr0Llwtf+3bQDhaHNdEnZNbSALw0Xb
2/WU/ZQMwUPJo3upOJxJ86rZrcvpB4ygeJhrlb0WgaaF
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:16:08 2025 by rpki-client