Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa
File: PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa (raw, json)
Hash identifier: 9xAG/+lXKPXOcRJWGmtvJdS/t7KdmtbF4dJ5vzXbJTA=
Subject key identifier: 3D:4A:4C:E1:53:15:E5:14:62:E6:DC:D3:A2:41:79:96:AA:F8:65:94
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 0194252152CD96D369ACD65A4314AC19B6B9
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa
Signing time: Thu 02 Jan 2025 03:48:48 +0000
ROA not before: Thu 02 Jan 2025 03:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47455
IP address blocks: 185.144.252.0/22 maxlen: 24
2a07:4200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:52:cd:96:d3:69:ac:d6:5a:43:14:ac:19:b6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: Jan 2 03:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d4a4ce15315e51462e6dcd3a2417996aaf86594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:fc:bf:1c:05:89:97:3b:80:28:d8:16:cd:
7f:c1:be:bb:fb:e9:f2:1e:82:1f:54:c4:b0:23:7b:
d4:89:77:cf:e6:32:a1:4c:e5:91:70:79:1c:f1:ce:
00:8c:4f:ab:63:18:7b:57:96:44:5b:f6:ba:66:ce:
91:4c:1e:5a:2b:f0:b3:fc:95:16:83:d4:88:d3:59:
87:cd:60:d1:82:7c:83:61:db:ca:1b:a0:6f:e2:77:
1e:40:da:60:b5:18:1a:8a:01:8f:19:ec:94:32:30:
0f:ab:af:0b:2e:f0:1c:d2:57:41:6e:fd:e5:8a:10:
0b:0c:d4:66:ce:b2:4b:45:38:64:bb:db:f0:32:49:
90:fa:1e:c1:27:e3:b8:b7:8a:a3:60:ca:8b:48:c6:
6e:2f:57:0b:7c:8f:4d:b0:70:9b:56:c3:3f:6c:b8:
85:23:8d:45:c7:70:c0:54:a7:4c:0b:5d:1d:85:42:
07:e0:7d:17:d2:b8:c2:b4:0a:61:e6:dd:14:b1:98:
23:ac:a1:f3:41:b8:ef:bd:9b:ab:97:44:af:e6:97:
3d:96:bd:08:7d:64:4d:94:41:92:cd:6d:41:52:8c:
c7:2a:45:c5:9a:94:d0:30:ac:89:3b:6c:4b:6d:04:
33:6f:19:7b:d7:8c:26:32:56:f0:9a:96:52:e3:aa:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4A:4C:E1:53:15:E5:14:62:E6:DC:D3:A2:41:79:96:AA:F8:65:94
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/PUpM4VMV5RRi5tzTokF5lqr4ZZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.252.0/22
IPv6:
2a07:4200::/29
Signature Algorithm: sha256WithRSAEncryption
0f:e1:2a:cd:18:cc:a5:6f:3e:c1:f1:96:7c:4e:70:28:40:31:
16:09:8f:9f:54:2f:a1:99:6f:d1:90:8c:cd:8a:74:af:82:d9:
76:ca:26:33:12:51:0b:7c:15:70:1c:48:3d:b5:d0:59:f5:02:
56:68:c9:94:16:5c:4b:27:76:96:db:82:2f:a2:2e:47:65:71:
56:66:61:79:ab:74:3a:90:83:a2:ac:74:5f:91:f2:98:07:7a:
b0:49:44:15:37:4a:fc:50:c4:8d:47:1a:0b:a2:a5:d4:ef:dd:
5c:f0:11:99:f0:0d:3a:20:92:fd:c2:8b:35:63:1b:b2:bb:6d:
7d:55:31:d6:c2:27:02:4e:5e:64:bc:ac:5b:fb:6e:bb:03:12:
44:09:cb:95:ba:ae:00:cf:f7:2e:24:d3:b0:ba:6a:a1:8e:41:
6a:a2:1c:94:78:26:d5:ce:05:b4:41:ca:58:c8:06:a3:5e:2f:
11:30:b6:65:d5:64:0f:4c:e6:26:45:ae:41:a2:c0:73:c2:a1:
3a:9e:47:9f:16:1a:a3:02:72:4d:22:18:65:3f:0c:d7:63:ed:
81:47:93:20:2b:6a:21:92:46:ad:9e:7b:29:2a:b9:02:de:08:
93:b5:ac:31:72:15:af:05:5e:54:5c:8e:b4:1f:b5:39:be:5b:
95:2d:a9:b0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQlIVLNltNprNZaQxSsGba5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NTA4MTBmMTNkZjhkOTAxOWYxNTdjMzZmYmQwZjZkYjk4
NjI5OTIwHhcNMjUwMTAyMDM0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDRhNGNlMTUzMTVlNTE0NjJlNmRjZDNhMjQxNzk5NmFhZjg2NTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo78vxwFiZc7gCjYFs1/wb67++ny
HoIfVMSwI3vUiXfP5jKhTOWRcHkc8c4AjE+rYxh7V5ZEW/a6Zs6RTB5aK/Cz/JUW
g9SI01mHzWDRgnyDYdvKG6Bv4nceQNpgtRgaigGPGeyUMjAPq68LLvAc0ldBbv3l
ihALDNRmzrJLRThku9vwMkmQ+h7BJ+O4t4qjYMqLSMZuL1cLfI9NsHCbVsM/bLiF
I41Fx3DAVKdMC10dhUIH4H0X0rjCtAph5t0UsZgjrKHzQbjvvZurl0Sv5pc9lr0I
fWRNlEGSzW1BUozHKkXFmpTQMKyJO2xLbQQzbxl714wmMlbwmpZS46pf3wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD1KTOFTFeUUYubc06JBeZaq+GWUMB8GA1UdIwQY
MBaAFHRQgQ8T342QGfFXw2+9D225himSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUt
OGYyMTVjMDlhZTcyLzEvUFVwTTRWTVY1UlJpNXR6VG9rRjVscXI0WlpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMzM1ZDYtYjRkNi00YzgzLThiMGUtOGYyMTVjMDlhZTcy
LzEvZEZDQkR4UGZqWkFaOFZmRGI3MFBiYm1HS1pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZD8MA0E
AgACMAcDBQMqB0IAMA0GCSqGSIb3DQEBCwUAA4IBAQAP4SrNGMylbz7B8ZZ8TnAo
QDEWCY+fVC+hmW/RkIzNinSvgtl2yiYzElELfBVwHEg9tdBZ9QJWaMmUFlxLJ3aW
24Ivoi5HZXFWZmF5q3Q6kIOirHRfkfKYB3qwSUQVN0r8UMSNRxoLoqXU791c8BGZ
8A06IJL9wos1Yxuyu219VTHWwicCTl5kvKxb+267AxJECcuVuq4Az/cuJNOwumqh
jkFqohyUeCbVzgW0QcpYyAajXi8RMLZl1WQPTOYmRa5BosBzwqE6nkefFhqjAnJN
IhhlPwzXY+2BR5MgK2ohkkatnnspKrkC3giTtawxchWvBV5UXI60H7U5vluVLamw
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:05:27 2025 by rpki-client