Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa
File: OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa (raw, json)
Hash identifier: Nbt+Vb6iqoAZa8JSy2lqdMELR5I1GGwPOjEC79BMqrA=
Subject key identifier: 38:78:5D:90:43:7E:0D:20:C1:56:11:3D:95:B1:19:F8:BD:45:0D:A5
Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Certificate serial: 0196596BF92008AEAB871BFF4DB557DEDE65
Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa
Signing time: Mon 21 Apr 2025 17:36:10 +0000
ROA not before: Mon 21 Apr 2025 17:36:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210513
IP address blocks: 62.3.56.0/24 maxlen: 24
185.65.255.0/24 maxlen: 24
2a12:100::/29 maxlen: 29
2a12:100:12::/48 maxlen: 48
2a12:100:13::/48 maxlen: 48
2a12:100:14::/48 maxlen: 48
2a12:100:16::/48 maxlen: 48
2a12:100:17::/48 maxlen: 48
2a12:100:18::/48 maxlen: 48
2a12:100:19::/48 maxlen: 48
2a12:100:1a::/48 maxlen: 48
2a12:100:1b::/48 maxlen: 48
2a12:100:1c::/48 maxlen: 48
2a12:100:1d::/48 maxlen: 48
2a12:100:22::/48 maxlen: 48
2a12:100:23::/48 maxlen: 48
2a12:100:24::/48 maxlen: 48
2a12:100:26::/48 maxlen: 48
2a12:100:27::/48 maxlen: 48
2a12:100:28::/48 maxlen: 48
2a12:100:29::/48 maxlen: 48
2a12:100:2a::/48 maxlen: 48
2a12:100:2b::/48 maxlen: 48
2a12:100:2c::/48 maxlen: 48
2a12:100:2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:6b:f9:20:08:ae:ab:87:1b:ff:4d:b5:57:de:de:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c
Validity
Not Before: Apr 21 17:36:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38785d90437e0d20c156113d95b119f8bd450da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:86:b5:90:28:70:47:d2:8d:ee:7b:ad:a7:
50:bb:fc:08:1b:dd:69:13:2f:05:99:d7:19:72:84:
5f:c3:38:3f:3b:b9:40:8d:d6:90:ff:5e:11:e6:64:
3a:b1:62:51:4f:fb:92:5f:c8:53:db:00:b4:67:94:
06:75:7a:4b:0c:6e:c9:03:bf:00:c7:fa:75:a0:7f:
8f:14:1f:a2:94:a9:83:a7:86:6d:0d:af:f1:5a:8a:
a0:39:64:b0:9f:ed:07:04:32:29:48:37:ab:76:1e:
dc:33:d6:71:0c:71:8b:96:a2:a4:2b:ee:48:f1:21:
9e:ea:e3:12:34:69:8e:15:45:bb:f0:8f:aa:be:8f:
42:da:83:05:4a:c1:05:61:cd:05:3b:75:29:af:0d:
2d:4b:30:7a:64:a0:42:f3:9e:a3:1f:1c:81:2b:80:
80:f1:1a:7d:5a:e2:78:c2:42:55:ab:e8:5d:d6:66:
bd:8f:55:e4:d8:02:b8:20:22:28:53:62:07:8d:4e:
d3:75:6b:51:cb:c0:46:6b:69:6c:a6:cc:6a:03:b9:
38:64:6a:07:55:9b:fd:a3:90:24:40:ac:c4:03:3b:
a5:8b:9f:8c:2c:e8:a2:e6:01:24:38:4c:74:45:26:
35:f9:27:37:87:4a:1a:57:48:66:22:d3:75:e3:91:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:78:5D:90:43:7E:0D:20:C1:56:11:3D:95:B1:19:F8:BD:45:0D:A5
X509v3 Authority Key Identifier:
keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/OHhdkEN-DSDBVhE9lbEZ-L1FDaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.56.0/24
185.65.255.0/24
IPv6:
2a12:100::/29
Signature Algorithm: sha256WithRSAEncryption
88:dc:15:13:b1:7b:74:44:9f:0f:88:92:89:e8:99:65:6b:24:
8e:9c:9d:c8:e8:77:0d:64:63:1e:31:99:bb:ac:3a:4b:ba:63:
2a:b0:c2:f9:95:aa:eb:5f:df:e6:51:75:42:9d:bf:b4:df:0e:
c7:b8:1e:f0:02:05:2b:6a:5e:fc:02:57:44:7b:cc:d5:cc:49:
42:fa:4a:ee:e6:68:2a:53:0a:57:3e:10:b1:af:29:8b:85:56:
4a:55:3d:bc:4d:bf:64:49:b5:10:30:0c:f7:a3:2d:ac:65:93:
55:22:7c:6e:9f:5c:36:27:c9:97:88:a0:96:86:9a:37:d7:49:
10:a1:cd:92:d5:06:42:03:33:f6:5d:61:67:8f:0e:7f:34:05:
ec:32:17:4d:93:fa:b3:b1:22:0a:d6:68:3a:de:55:d1:f4:2b:
db:72:8f:e1:33:9e:e6:9b:c3:73:42:95:96:7b:86:23:1c:ae:
18:c0:3b:1d:bc:20:ad:a6:5f:03:27:3d:dc:c6:08:ec:e9:77:
9a:c8:48:2d:d8:b1:d2:37:49:1c:f0:c3:be:4b:83:ab:b4:dc:
7b:7a:52:ab:83:ec:91:0d:34:f7:b2:82:56:d0:3f:9f:4c:f9:
71:dd:90:9f:ba:ab:10:f1:a4:52:5d:6f:32:5c:ca:69:a0:ec:
e4:da:bc:0a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZZZa/kgCK6rhxv/TbVX3t5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx
MDc1OGMwHhcNMjUwNDIxMTczNjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODc4NWQ5MDQzN2UwZDIwYzE1NjExM2Q5NWIxMTlmOGJkNDUwZGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupeGtZAocEfSje57radQu/wIG91p
Ey8FmdcZcoRfwzg/O7lAjdaQ/14R5mQ6sWJRT/uSX8hT2wC0Z5QGdXpLDG7JA78A
x/p1oH+PFB+ilKmDp4ZtDa/xWoqgOWSwn+0HBDIpSDerdh7cM9ZxDHGLlqKkK+5I
8SGe6uMSNGmOFUW78I+qvo9C2oMFSsEFYc0FO3Uprw0tSzB6ZKBC856jHxyBK4CA
8Rp9WuJ4wkJVq+hd1ma9j1Xk2AK4ICIoU2IHjU7TdWtRy8BGa2lspsxqA7k4ZGoH
VZv9o5AkQKzEAzuli5+MLOii5gEkOEx0RSY1+Sc3h0oaV0hmItN145EjBwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDh4XZBDfg0gwVYRPZWxGfi9RQ2lMB8GA1UdIwQY
MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt
Nzk0NDk3NjU5OWQ4LzEvT0hoZGtFTi1EU0RCVmhFOWxiRVotTDFGRGFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4
LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAPgM4AwQA
uUH/MA0EAgACMAcDBQMqEgEAMA0GCSqGSIb3DQEBCwUAA4IBAQCI3BUTsXt0RJ8P
iJKJ6JllaySOnJ3I6HcNZGMeMZm7rDpLumMqsML5larrX9/mUXVCnb+03w7HuB7w
AgUral78AldEe8zVzElC+kru5mgqUwpXPhCxrymLhVZKVT28Tb9kSbUQMAz3oy2s
ZZNVInxun1w2J8mXiKCWhpo310kQoc2S1QZCAzP2XWFnjw5/NAXsMhdNk/qzsSIK
1mg63lXR9Cvbco/hM57mm8NzQpWWe4YjHK4YwDsdvCCtpl8DJz3cxgjs6XeayEgt
2LHSN0kc8MO+S4OrtNx7elKrg+yRDTT3soJW0D+fTPlx3ZCfuqsQ8aRSXW8yXMpp
oOzk2rwK
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:21:45 2025 by rpki-client