Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/oCGIpCT2YFK_uAp3TdG2VkM2G94.roa
File: oCGIpCT2YFK_uAp3TdG2VkM2G94.roa (raw, json)
Hash identifier: 43s1g5PGi0J1XxzuVp7Os8fHlk2eq7DCEzR0zxcVM9M=
Subject key identifier: A0:21:88:A4:24:F6:60:52:BF:B8:0A:77:4D:D1:B6:56:43:36:1B:DE
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019459E734783F86B74B04B3957A0B0D9E20
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/oCGIpCT2YFK_uAp3TdG2VkM2G94.roa
Signing time: Sun 12 Jan 2025 09:45:11 +0000
ROA not before: Sun 12 Jan 2025 09:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 45.92.218.0/23 maxlen: 23
45.134.38.0/24 maxlen: 24
45.152.162.0/23 maxlen: 23
45.152.162.0/24 maxlen: 24
45.152.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:59:e7:34:78:3f:86:b7:4b:04:b3:95:7a:0b:0d:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 12 09:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a02188a424f66052bfb80a774dd1b65643361bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:6e:b3:15:56:ee:d8:43:79:19:2f:cc:01:
0c:14:19:63:4a:86:40:ba:b1:d2:ae:d5:01:8d:de:
00:47:07:f4:ad:70:11:f6:38:79:69:b7:ca:29:26:
da:ba:8f:43:76:e7:6c:cb:1a:c8:4f:a9:b5:e4:e2:
ff:af:0b:d5:4e:f6:2c:e4:53:56:6c:bf:08:2f:1f:
8f:ae:9c:cc:b9:12:41:d8:4a:71:27:fc:62:74:e7:
f1:21:50:d8:56:6d:8b:22:71:61:67:2d:0f:51:b5:
0b:d7:48:dd:d8:12:39:4c:c3:9b:44:ea:79:e6:91:
8b:fc:b7:a2:bf:d3:ee:9a:d8:78:1d:ce:47:6b:0b:
e1:19:e1:7e:d2:63:01:6d:66:11:bd:40:15:19:d0:
c0:a7:78:95:86:95:12:a1:60:fe:33:f2:f8:7e:99:
11:b7:93:e4:ec:82:37:e7:12:9f:4e:e0:d9:3e:42:
bc:0c:0d:0d:66:a4:72:84:6b:50:04:3f:3f:0a:98:
dd:c9:33:02:78:4a:8b:b3:c9:7b:4e:cc:af:62:fb:
20:ba:c6:02:9c:64:9f:94:8e:5d:50:12:02:ed:cc:
b7:3c:da:74:3e:fe:83:ca:cd:69:a7:9c:7e:05:dc:
8a:6f:8a:0f:3c:33:1a:1a:3a:b8:9e:2c:0e:31:16:
d8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:21:88:A4:24:F6:60:52:BF:B8:0A:77:4D:D1:B6:56:43:36:1B:DE
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/oCGIpCT2YFK_uAp3TdG2VkM2G94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.218.0/23
45.134.38.0/24
45.152.162.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:de:53:00:00:c2:e3:14:d4:29:5f:70:35:4b:2d:e4:73:f9:
2f:26:73:fd:39:43:83:e8:f4:78:76:76:50:eb:5b:a9:14:09:
f7:cf:0d:15:e7:54:6a:8d:5e:e9:31:5f:12:9a:36:50:ff:85:
48:88:53:09:38:2c:01:45:2f:51:0d:54:fd:5b:b1:6b:b5:bf:
d8:98:80:4d:9b:6c:84:ca:a5:42:45:35:c5:84:ed:ef:34:e7:
4a:cb:df:a1:47:dd:9d:55:86:6a:66:bc:2b:4b:0f:ee:22:51:
7d:6e:31:c3:49:fc:eb:8d:8f:86:75:6d:73:2e:cd:1f:68:90:
be:e3:19:38:41:57:15:bd:85:85:ab:6e:4d:9b:06:87:cf:16:
29:e1:6b:03:4d:b9:8c:15:7d:4b:5f:59:ea:3d:8c:0e:b1:bb:
94:f6:47:41:03:a2:b0:4b:2e:6f:fc:a9:e7:0b:a0:f8:ff:31:
fe:64:06:a7:0c:c1:1c:79:2e:9c:70:4c:51:62:01:3b:e4:97:
c8:fc:9f:19:88:4e:ef:20:3f:2e:a2:1b:0f:86:bb:68:97:b8:
b7:c9:b4:30:ad:5b:57:ea:52:1b:f6:ea:0d:68:48:b8:05:32:
f3:34:0b:d4:fc:fd:ef:22:1d:1e:93:8e:e4:6e:b8:59:81:f9:
6c:34:d6:27
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZRZ5zR4P4a3SwSzlXoLDZ4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTEyMDk0NTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDIxODhhNDI0ZjY2MDUyYmZiODBhNzc0ZGQxYjY1NjQzMzYxYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuJusxVW7thDeRkvzAEMFBljSoZA
urHSrtUBjd4ARwf0rXAR9jh5abfKKSbauo9DdudsyxrIT6m15OL/rwvVTvYs5FNW
bL8ILx+PrpzMuRJB2EpxJ/xidOfxIVDYVm2LInFhZy0PUbUL10jd2BI5TMObROp5
5pGL/Leiv9Pumth4Hc5HawvhGeF+0mMBbWYRvUAVGdDAp3iVhpUSoWD+M/L4fpkR
t5Pk7II35xKfTuDZPkK8DA0NZqRyhGtQBD8/CpjdyTMCeEqLs8l7TsyvYvsgusYC
nGSflI5dUBIC7cy3PNp0Pv6Dys1pp5x+BdyKb4oPPDMaGjq4niwOMRbY+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKAhiKQk9mBSv7gKd03RtlZDNhveMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvb0NHSXBDVDJZRktfdUFwM1RkRzJWa00yRzk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLVzaAwQA
LYYmAwQBLZiiMA0GCSqGSIb3DQEBCwUAA4IBAQBd3lMAAMLjFNQpX3A1Sy3kc/kv
JnP9OUOD6PR4dnZQ61upFAn3zw0V51RqjV7pMV8SmjZQ/4VIiFMJOCwBRS9RDVT9
W7Frtb/YmIBNm2yEyqVCRTXFhO3vNOdKy9+hR92dVYZqZrwrSw/uIlF9bjHDSfzr
jY+GdW1zLs0faJC+4xk4QVcVvYWFq25NmwaHzxYp4WsDTbmMFX1LX1nqPYwOsbuU
9kdBA6KwSy5v/KnnC6D4/zH+ZAanDMEceS6ccExRYgE75JfI/J8ZiE7vID8uohsP
hrtol7i3ybQwrVtX6lIb9uoNaEi4BTLzNAvU/P3vIh0ek47kbrhZgflsNNYn
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:27 2025 by rpki-client