Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/fmD84MKcKNszvegRc78ea5yDEkU.roa
File: fmD84MKcKNszvegRc78ea5yDEkU.roa (raw, json)
Hash identifier: l40Hf3OlT5bsApNDrNH7Y+k7wZYD3XggeWdBVJzjivU=
Subject key identifier: 7E:60:FC:E0:C2:9C:28:DB:33:BD:E8:11:73:BF:1E:6B:9C:83:12:45
Certificate issuer: /CN=b814345affd1506af9af32ec0d77399b7664aa3f
Certificate serial: 0194221FDEDDB4FCF47C8B9633191B4F5368
Authority key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/fmD84MKcKNszvegRc78ea5yDEkU.roa
Signing time: Wed 01 Jan 2025 13:48:21 +0000
ROA not before: Wed 01 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197641
IP address blocks: 45.144.104.0/22 maxlen: 22
2a0e:ec40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:de:dd:b4:fc:f4:7c:8b:96:33:19:1b:4f:53:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b814345affd1506af9af32ec0d77399b7664aa3f
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e60fce0c29c28db33bde81173bf1e6b9c831245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:c1:18:c0:3e:ca:7d:bc:10:80:ec:88:5d:
15:c9:65:16:ce:e5:b6:b9:4c:98:36:f2:0c:0b:8c:
e5:5e:52:53:d7:62:d3:4c:6e:bb:5f:28:43:0b:5a:
ec:e7:c8:ef:c8:58:bb:06:65:ee:ab:6c:12:4f:b9:
a1:c3:9e:7c:b8:db:81:8e:1b:80:7d:75:8c:fe:8d:
66:ab:50:8b:10:9e:54:fd:87:08:2b:af:ed:25:47:
cf:c3:7e:ed:8c:71:e1:96:fd:e7:8d:a3:5b:fd:74:
26:59:61:05:8a:c9:d3:cb:79:ca:7f:e0:22:76:86:
8d:e1:dd:8a:25:c7:39:9e:40:5c:69:5b:fc:a0:13:
ad:e2:49:53:0e:f9:d1:84:eb:6a:cf:78:40:93:07:
f0:c6:01:21:a6:4d:6f:8b:f0:d7:e7:43:a7:45:e7:
d9:4a:48:2b:10:e6:ff:73:23:44:69:d0:ed:e1:15:
ae:9b:5b:e1:a8:8d:be:50:ec:62:b6:1e:0f:9b:09:
56:20:4a:5a:d5:6c:63:e8:81:e8:71:f2:19:3e:fd:
07:f7:06:20:5d:42:27:16:30:7d:31:8c:4a:d7:0e:
e6:8e:4b:d5:0e:bb:a7:7f:c0:92:e6:3a:57:04:66:
21:19:3c:55:ba:2e:af:ba:39:76:b6:e5:a5:04:3b:
f1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:60:FC:E0:C2:9C:28:DB:33:BD:E8:11:73:BF:1E:6B:9C:83:12:45
X509v3 Authority Key Identifier:
keyid:B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/fmD84MKcKNszvegRc78ea5yDEkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.104.0/22
IPv6:
2a0e:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
57:73:09:c3:45:63:69:41:d9:bf:5b:c1:e3:2d:4a:07:d7:7f:
1b:de:60:a3:c5:68:a3:73:f3:26:67:0a:77:b8:33:41:ac:04:
85:9e:4f:7d:60:34:22:82:60:97:e2:09:cc:31:34:90:35:2c:
06:58:10:89:45:10:84:e4:b3:2c:a2:8d:df:8e:6e:00:1b:64:
8a:f8:24:b2:8b:5d:e4:97:d6:1a:65:ab:e1:2a:79:73:96:93:
df:bf:aa:d7:3e:4a:e2:ca:9a:9a:f3:b7:a9:5b:fb:dc:5d:c2:
e5:7f:03:b5:77:e7:ba:8c:81:2c:04:5b:96:ea:ec:21:89:00:
08:bc:66:37:32:29:01:46:15:f0:30:88:99:e5:ec:c8:55:53:
73:13:d5:c0:cb:3f:2a:ae:24:af:fe:dd:11:1f:48:1c:c9:2b:
56:99:21:87:54:52:42:4e:93:6f:98:d6:04:ea:be:d4:f9:99:
69:80:bf:7e:c2:21:a8:ae:c4:7a:80:75:65:fb:1b:cd:6b:07:
a6:f8:bf:d4:5f:41:3f:09:78:cf:f6:9d:61:d3:ff:ce:51:87:
b1:7b:b1:10:c8:06:86:c4:a7:65:89:66:d0:36:81:02:fb:9b:
a6:30:3f:e4:11:33:93:d0:f3:ec:f2:5c:a9:85:4e:de:25:46:
4d:6d:2b:90
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiH97dtPz0fIuWMxkbT1NoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MTQzNDVhZmZkMTUwNmFmOWFmMzJlYzBkNzczOTliNzY2
NGFhM2YwHhcNMjUwMTAxMTM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTYwZmNlMGMyOWMyOGRiMzNiZGU4MTE3M2JmMWU2YjljODMxMjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35vBGMA+yn28EIDsiF0VyWUWzuW2
uUyYNvIMC4zlXlJT12LTTG67XyhDC1rs58jvyFi7BmXuq2wST7mhw558uNuBjhuA
fXWM/o1mq1CLEJ5U/YcIK6/tJUfPw37tjHHhlv3njaNb/XQmWWEFisnTy3nKf+Ai
doaN4d2KJcc5nkBcaVv8oBOt4klTDvnRhOtqz3hAkwfwxgEhpk1vi/DX50OnRefZ
SkgrEOb/cyNEadDt4RWum1vhqI2+UOxith4PmwlWIEpa1Wxj6IHocfIZPv0H9wYg
XUInFjB9MYxK1w7mjkvVDrunf8CS5jpXBGYhGTxVui6vujl2tuWlBDvx1wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH5g/ODCnCjbM73oEXO/HmucgxJFMB8GA1UdIwQY
MBaAFLgUNFr/0VBq+a8y7A13OZt2ZKo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJRMFd2X1JVR3I1cnpMc0RYYzVtM1prcWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MGIxOGYtOWE3ZC00NTJjLWE2ZDUt
OWRlNzUyNWJhNzEyLzEvZm1EODRNS2NLTnN6dmVnUmM3OGVhNXlERWtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81MGIxOGYtOWE3ZC00NTJjLWE2ZDUtOWRlNzUyNWJhNzEy
LzEvdUJRMFd2X1JVR3I1cnpMc0RYYzVtM1prcWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZBoMA0E
AgACMAcDBQMqDuxAMA0GCSqGSIb3DQEBCwUAA4IBAQBXcwnDRWNpQdm/W8HjLUoH
138b3mCjxWijc/MmZwp3uDNBrASFnk99YDQigmCX4gnMMTSQNSwGWBCJRRCE5LMs
oo3fjm4AG2SK+CSyi13kl9YaZavhKnlzlpPfv6rXPkriypqa87epW/vcXcLlfwO1
d+e6jIEsBFuW6uwhiQAIvGY3MikBRhXwMIiZ5ezIVVNzE9XAyz8qriSv/t0RH0gc
yStWmSGHVFJCTpNvmNYE6r7U+ZlpgL9+wiGorsR6gHVl+xvNawem+L/UX0E/CXjP
9p1h0//OUYexe7EQyAaGxKdliWbQNoEC+5umMD/kETOT0PPs8lyphU7eJUZNbSuQ
-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:12 2025 by rpki-client