Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/oxnSEKQpSx3qjOiXVpg8GgyrwWE.roa
File: oxnSEKQpSx3qjOiXVpg8GgyrwWE.roa (raw, json)
Hash identifier: HmFA7T2pO0RgIRxx6C6iZ/e8wcjt6NXrfa5I/Q/NFvI=
Subject key identifier: A3:19:D2:10:A4:29:4B:1D:EA:8C:E8:97:56:98:3C:1A:0C:AB:C1:61
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0196612DC04EE90B960FE79986BA5E960088
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/oxnSEKQpSx3qjOiXVpg8GgyrwWE.roa
Signing time: Wed 23 Apr 2025 05:45:10 +0000
ROA not before: Wed 23 Apr 2025 05:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 85.115.208.0/23 maxlen: 24
85.115.210.0/23 maxlen: 24
85.115.210.0/24 maxlen: 24
213.145.66.0/24 maxlen: 24
213.145.68.0/23 maxlen: 23
213.145.68.0/24 maxlen: 24
213.145.70.0/23 maxlen: 24
213.145.71.0/24 maxlen: 24
213.145.72.0/21 maxlen: 24
213.145.82.0/23 maxlen: 24
213.145.82.0/24 maxlen: 24
213.145.84.0/23 maxlen: 23
213.145.86.0/23 maxlen: 23
213.145.88.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:2d:c0:4e:e9:0b:96:0f:e7:99:86:ba:5e:96:00:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Apr 23 05:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a319d210a4294b1dea8ce89756983c1a0cabc161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f6:8b:19:6f:2a:fe:4f:a7:b0:34:08:7d:5b:
60:89:f4:cf:fa:2a:17:cf:9e:b9:38:bf:e3:1e:e2:
a9:c0:d0:17:c6:e7:2a:3f:d5:4f:bf:9f:ba:7c:dc:
8d:b6:66:f6:7e:54:fd:00:bb:24:9f:e3:0c:39:5e:
0a:ba:e0:87:2a:57:a0:32:8a:02:2a:1d:ab:7a:ac:
e2:a0:a2:8b:dc:e7:8b:f3:5a:e7:00:2d:d5:9d:9c:
1d:2f:10:f1:d7:53:98:d8:7c:ae:34:a8:70:83:cc:
ae:ef:24:90:da:8b:8a:fa:c7:c0:97:86:18:76:d5:
d4:61:db:b0:a6:4d:ff:8b:c5:f3:7f:00:93:63:32:
97:aa:7c:0c:4b:62:37:a5:15:ae:eb:16:75:6b:19:
f1:a3:1f:75:47:18:b9:eb:1b:05:29:5c:bc:c8:5f:
2a:42:0c:d5:31:b1:77:7c:c2:db:70:dd:b7:59:38:
8a:1b:5f:6b:b2:a1:41:54:5b:a9:0d:98:79:e4:5e:
05:d7:5c:b8:a9:b1:20:2e:3c:b7:f6:b7:ec:c0:9c:
2d:c0:9f:28:1d:20:c4:ce:10:48:58:c2:09:a5:c8:
e4:e8:91:b3:2c:6a:c9:96:6b:aa:20:12:91:33:dd:
92:21:60:64:71:f9:24:2b:36:8e:68:89:7f:06:27:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:19:D2:10:A4:29:4B:1D:EA:8C:E8:97:56:98:3C:1A:0C:AB:C1:61
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/oxnSEKQpSx3qjOiXVpg8GgyrwWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.208.0/22
213.145.66.0/24
213.145.68.0-213.145.79.255
213.145.82.0-213.145.89.255
Signature Algorithm: sha256WithRSAEncryption
72:fa:6e:71:9c:6c:ed:28:d5:7f:9c:24:91:4d:ef:e8:3f:8b:
c4:03:d3:71:f1:af:7a:23:04:aa:58:a2:0a:65:06:84:f5:c5:
63:e7:80:56:93:71:53:fa:94:ac:2e:39:c9:05:4c:a8:70:9b:
a3:d6:9c:4c:62:07:2d:2e:4c:b4:70:e3:25:5c:b5:d5:12:06:
5c:69:74:f2:e3:01:4d:62:06:d9:ab:b3:f2:ee:d8:8a:ed:c9:
3c:e0:a9:49:07:c1:29:44:f3:ce:81:e1:12:7c:2c:5b:62:50:
55:36:ef:3c:3d:64:77:c9:25:99:8a:62:15:3f:dc:65:fc:60:
6c:92:4e:44:e1:20:f3:4f:69:b4:ed:df:ed:03:d9:cc:2c:60:
8f:f2:e9:28:74:b5:82:28:eb:d5:20:5f:e9:cc:a7:88:44:b8:
31:a2:82:dc:50:cc:71:66:75:ca:b5:e2:6a:d6:48:66:3a:d2:
79:ba:58:61:6d:45:0e:b2:d6:86:19:35:6e:8d:36:2a:fe:7f:
ca:1f:6d:54:5b:13:c0:ec:02:cc:4d:b3:56:a6:a4:62:73:3f:
56:b0:43:63:e0:0c:7a:8b:5f:15:6a:ae:63:6d:6f:dc:f2:c4:
96:ec:4a:4d:44:13:20:0c:ad:c2:a3:4e:4c:b5:91:1c:7d:12:
ab:85:10:ab
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZZhLcBO6QuWD+eZhrpelgCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjUwNDIzMDU0NTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzE5ZDIxMGE0Mjk0YjFkZWE4Y2U4OTc1Njk4M2MxYTBjYWJjMTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPaLGW8q/k+nsDQIfVtgifTP+ioX
z565OL/jHuKpwNAXxucqP9VPv5+6fNyNtmb2flT9ALskn+MMOV4KuuCHKlegMooC
Kh2reqzioKKL3OeL81rnAC3VnZwdLxDx11OY2HyuNKhwg8yu7ySQ2ouK+sfAl4YY
dtXUYduwpk3/i8XzfwCTYzKXqnwMS2I3pRWu6xZ1axnxox91Rxi56xsFKVy8yF8q
QgzVMbF3fMLbcN23WTiKG19rsqFBVFupDZh55F4F11y4qbEgLjy39rfswJwtwJ8o
HSDEzhBIWMIJpcjk6JGzLGrJlmuqIBKRM92SIWBkcfkkKzaOaIl/BieMZQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFKMZ0hCkKUsd6ozol1aYPBoMq8FhMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvb3huU0VLUXBTeDNxak9pWFZwZzhHZ3lyd1dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQCVXPQAwQA
1ZFCMAwDBALVkUQDBATVkUAwDAMEAdWRUgMEAdWRWDANBgkqhkiG9w0BAQsFAAOC
AQEAcvpucZxs7SjVf5wkkU3v6D+LxAPTcfGveiMEqliiCmUGhPXFY+eAVpNxU/qU
rC45yQVMqHCbo9acTGIHLS5MtHDjJVy11RIGXGl08uMBTWIG2auz8u7Yiu3JPOCp
SQfBKUTzzoHhEnwsW2JQVTbvPD1kd8klmYpiFT/cZfxgbJJOROEg809ptO3f7QPZ
zCxgj/LpKHS1gijr1SBf6cyniES4MaKC3FDMcWZ1yrXiatZIZjrSebpYYW1FDrLW
hhk1bo02Kv5/yh9tVFsTwOwCzE2zVqakYnM/VrBDY+AMeotfFWquY21v3PLEluxK
TUQTIAytwqNOTLWRHH0Sq4UQqw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:57:37 2025 by rpki-client