Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/uz4ROTqTuXpLegHpSb5C4o-uARs.roa
File: uz4ROTqTuXpLegHpSb5C4o-uARs.roa (raw, json)
Hash identifier: WWYFULvWQz5EAB3/iAymE8vsgpPNJz7ubEMvoErlZzs=
Subject key identifier: BB:3E:11:39:3A:93:B9:7A:4B:7A:01:E9:49:BE:42:E2:8F:AE:01:1B
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01976F6E726895608F03C23A421ECB9A64BE
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/uz4ROTqTuXpLegHpSb5C4o-uARs.roa
Signing time: Sat 14 Jun 2025 17:13:18 +0000
ROA not before: Sat 14 Jun 2025 17:13:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63989
IP address blocks: 212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:6e:72:68:95:60:8f:03:c2:3a:42:1e:cb:9a:64:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 14 17:13:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb3e11393a93b97a4b7a01e949be42e28fae011b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1d:a9:15:8b:75:82:48:4e:5d:3f:4f:34:86:
fb:77:6f:4d:d4:00:c6:04:d6:27:d2:97:5c:a2:3a:
82:1d:f9:dd:91:cd:12:a2:d6:b4:d8:ad:1b:ee:12:
66:f9:af:a8:c1:11:c7:99:7d:ea:4f:dd:c1:e2:6d:
75:cb:d3:c1:af:a1:ea:1a:bd:14:b3:a2:d2:30:53:
1e:7e:59:c8:1b:c0:48:8c:6e:07:d0:25:76:12:2a:
7b:5d:53:35:c2:56:59:ad:a6:6f:b4:75:46:d8:f9:
45:06:21:c3:b6:be:d0:5f:d9:4d:c4:78:2e:0e:6f:
a8:d4:cf:91:b1:13:84:9d:28:fe:1f:18:34:1d:f3:
9a:59:9a:06:3c:81:59:37:64:ac:34:b5:43:99:b9:
86:7e:f7:23:cc:c3:fc:3d:c5:88:59:46:32:00:60:
94:2c:23:84:96:2f:f2:7c:25:dc:94:2f:4c:23:a4:
b7:af:ce:58:a3:46:08:36:bb:b1:72:8b:32:85:a0:
5f:6f:1f:0a:61:28:02:f3:1b:69:19:0d:76:7c:08:
85:21:41:69:5a:c9:81:5d:aa:cc:12:a7:6f:c5:c9:
36:ce:8f:e2:05:ee:e6:59:3d:30:31:ed:0e:25:f0:
de:72:da:0b:57:fb:7c:5b:a6:d8:51:9f:28:db:df:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3E:11:39:3A:93:B9:7A:4B:7A:01:E9:49:BE:42:E2:8F:AE:01:1B
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/uz4ROTqTuXpLegHpSb5C4o-uARs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:6f:19:3d:2b:20:55:42:30:d0:00:b1:c5:47:35:c9:4c:66:
5a:b3:3a:86:df:43:e4:f1:f1:7c:3c:1c:99:ca:36:f6:22:28:
2d:6e:26:dc:dd:e5:2f:fc:a0:3b:37:07:e8:f7:1d:b8:21:eb:
e9:a2:d0:76:63:ee:19:d9:8f:f6:68:23:fc:e8:ac:23:41:18:
53:32:12:19:59:27:66:5b:57:74:7e:b3:7d:26:91:91:4d:db:
bb:ab:7a:41:0b:25:7a:72:0b:f2:d8:fc:42:d6:7a:a1:80:23:
b9:d1:b3:82:51:7e:77:11:1d:2f:cd:c9:19:4b:1a:c1:07:23:
f7:32:c6:84:66:3d:8c:9c:86:3a:3e:9e:46:97:68:7b:d7:37:
1c:c7:03:63:f7:3a:a4:15:e6:ca:6b:ab:dc:b0:9f:19:09:40:
af:93:d6:01:19:cd:95:0a:27:d1:09:38:c6:0b:ca:35:23:49:
56:6d:69:a0:b3:9a:45:15:4d:9a:f9:2d:60:31:ea:8c:85:b2:
97:80:59:ce:97:f0:18:ed:1d:fc:dc:f9:2e:ff:de:28:22:9d:
b9:ca:50:36:1e:5d:6a:5a:bb:33:03:3a:2d:d5:a3:e4:c1:e9:
54:7c:8c:8e:6a:a0:2e:92:64:0c:9d:d8:62:64:66:69:e0:05:
e9:6b:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:10:00 2025 by rpki-client