Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/SlBCxI-Gr8RZUcWFdhLWCcmpICs.roa
File: SlBCxI-Gr8RZUcWFdhLWCcmpICs.roa (raw, json)
Hash identifier: JIPe6vhu+AxbOSgeBUS8yHnoK/5rZWIA9A3Gij3IhXY=
Subject key identifier: 4A:50:42:C4:8F:86:AF:C4:59:51:C5:85:76:12:D6:09:C9:A9:20:2B
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3EF09B0AC6E18AAE93E247B84A2E1
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/SlBCxI-Gr8RZUcWFdhLWCcmpICs.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215802
IP address blocks: 45.66.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ef:09:b0:ac:6e:18:aa:e9:3e:24:7b:84:a2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a5042c48f86afc45951c5857612d609c9a9202b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6f:f5:b9:ab:66:9c:3b:25:ca:d5:04:74:2f:
b1:81:4d:98:f3:cc:7e:5c:a9:16:5e:39:1c:f4:a0:
af:74:8e:88:e0:e2:78:81:63:ea:f1:45:51:77:1c:
00:c8:75:1c:44:a0:a9:d4:70:60:80:eb:24:e3:a3:
6e:74:ac:00:80:31:b9:f1:f3:84:7b:bf:1c:c1:3e:
81:b4:ec:7f:28:38:b5:dc:67:6b:0c:e5:46:ea:89:
84:41:be:e7:7b:a3:fc:36:0e:4e:57:b1:1c:ed:9d:
2a:50:19:08:30:8b:9f:32:97:16:08:7f:ab:c2:f5:
17:18:bc:cc:8b:7e:40:8d:59:98:a2:5f:80:be:c5:
d2:d9:4a:25:31:46:b9:7b:21:68:1d:f2:90:72:a6:
0c:0b:cc:33:0b:2b:cd:f2:2f:a1:91:c7:06:68:a9:
45:c4:d4:f5:6b:33:f7:f8:65:b4:21:40:d2:2e:26:
64:2b:95:ef:f9:da:9d:a4:77:d3:e9:7e:6c:6e:59:
11:19:cc:48:5e:4d:19:88:10:4c:d1:c6:76:e9:60:
f1:18:ea:c4:7b:b6:7f:cf:eb:b2:33:e5:22:8e:ba:
50:46:5e:4f:54:2e:45:6e:f0:ec:c7:89:ca:a7:33:
84:7d:ad:54:f7:9e:59:14:fe:66:dd:ef:b0:33:b1:
f6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:50:42:C4:8F:86:AF:C4:59:51:C5:85:76:12:D6:09:C9:A9:20:2B
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/SlBCxI-Gr8RZUcWFdhLWCcmpICs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:38:65:6b:0f:00:ee:c0:0d:ef:3b:f9:ee:ea:e0:5b:aa:66:
40:ce:59:35:e8:fc:f9:a8:bb:a0:0e:9b:b9:73:ae:b8:7a:7c:
fc:22:d5:d4:f5:ef:9f:ef:b4:fc:e8:d8:18:ac:fe:61:d8:c4:
38:9f:c3:c8:b5:09:a7:85:a6:24:d4:29:2d:15:22:8f:9e:ca:
3e:ad:aa:56:b3:2d:c8:7d:3c:8f:c0:14:38:86:ea:9a:3d:29:
49:b9:93:78:80:aa:60:4b:55:6e:4c:c5:62:0f:f5:ef:48:07:
5d:1c:72:8d:cb:94:3f:3e:30:cd:e1:99:70:86:b1:5e:89:1c:
4d:fd:e5:bb:b6:03:ea:ad:d5:75:bd:28:d5:78:4f:12:a2:ca:
14:d8:6f:f9:18:0f:28:fe:58:7b:c3:db:ec:eb:75:4c:7a:12:
3e:20:90:64:69:91:37:8b:8a:68:07:93:c0:f4:77:2e:dd:0d:
53:05:3f:7d:e1:77:ff:bf:c4:15:5b:75:92:71:a8:15:86:84:
a4:5a:3e:11:53:53:ec:08:d4:22:64:4e:66:6a:a8:7c:1c:32:
b3:d7:4f:68:54:00:a5:b5:c8:80:04:7b:4e:c2:9d:18:4f:58:
c6:42:2e:01:40:cd:66:c9:e8:2a:74:0f:eb:dd:70:68:ce:92:
ea:32:eb:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks+8JsKxuGKrpPiR7hKLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm
ZmExOWUwHhcNMjUwMTAyMDE0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTUwNDJjNDhmODZhZmM0NTk1MWM1ODU3NjEyZDYwOWM5YTkyMDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G/1uatmnDslytUEdC+xgU2Y88x+
XKkWXjkc9KCvdI6I4OJ4gWPq8UVRdxwAyHUcRKCp1HBggOsk46NudKwAgDG58fOE
e78cwT6BtOx/KDi13GdrDOVG6omEQb7ne6P8Ng5OV7Ec7Z0qUBkIMIufMpcWCH+r
wvUXGLzMi35AjVmYol+AvsXS2UolMUa5eyFoHfKQcqYMC8wzCyvN8i+hkccGaKlF
xNT1azP3+GW0IUDSLiZkK5Xv+dqdpHfT6X5sblkRGcxIXk0ZiBBM0cZ26WDxGOrE
e7Z/z+uyM+UijrpQRl5PVC5FbvDsx4nKpzOEfa1U955ZFP5m3e+wM7H20wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEpQQsSPhq/EWVHFhXYS1gnJqSArMB8GA1UdIwQY
MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt
YTM1ZmM0MzhkNGNhLzEvU2xCQ3hJLUdyOFJaVWNXRmRoTFdDY21wSUNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh
LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUI1MA0G
CSqGSIb3DQEBCwUAA4IBAQCcOGVrDwDuwA3vO/nu6uBbqmZAzlk16Pz5qLugDpu5
c664enz8ItXU9e+f77T86NgYrP5h2MQ4n8PItQmnhaYk1CktFSKPnso+rapWsy3I
fTyPwBQ4huqaPSlJuZN4gKpgS1VuTMViD/XvSAddHHKNy5Q/PjDN4ZlwhrFeiRxN
/eW7tgPqrdV1vSjVeE8SosoU2G/5GA8o/lh7w9vs63VMehI+IJBkaZE3i4poB5PA
9Hcu3Q1TBT994Xf/v8QVW3WScagVhoSkWj4RU1PsCNQiZE5maqh8HDKz109oVACl
tciABHtOwp0YT1jGQi4BQM1myegqdA/r3XBozpLqMut1
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:33:44 2025 by rpki-client