Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Al2KaWomFf8GhcORE3K4q4R9IR8.roa
File: Al2KaWomFf8GhcORE3K4q4R9IR8.roa (raw, json)
Hash identifier: pVm7PEjI3+WRx03gEcy+oA8b2HM+FqL4qCoE1gIpZnU=
Subject key identifier: 02:5D:8A:69:6A:26:15:FF:06:85:C3:91:13:72:B8:AB:84:7D:21:1F
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01942827ED58DD60185812C9532034A66B46
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Al2KaWomFf8GhcORE3K4q4R9IR8.roa
Signing time: Thu 02 Jan 2025 17:54:52 +0000
ROA not before: Thu 02 Jan 2025 17:54:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 45.67.200.0/24 maxlen: 24
45.67.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:ed:58:dd:60:18:58:12:c9:53:20:34:a6:6b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 17:54:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=025d8a696a2615ff0685c3911372b8ab847d211f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6b:14:51:2e:2c:89:c0:5a:66:e8:aa:a8:56:
37:bc:e4:ba:eb:37:5d:67:a7:6e:e3:fd:18:e1:57:
9a:da:85:af:e7:8d:dc:f9:d8:67:a9:cb:bc:ea:d4:
30:3b:b5:70:a2:c0:59:6f:82:a9:cf:61:6f:73:d8:
e6:00:44:09:99:eb:6d:44:7a:d5:f4:1d:11:37:dd:
99:64:59:ef:e4:4d:6f:a6:f0:c4:09:66:31:da:95:
f0:23:6a:32:16:77:57:7c:9d:26:d6:38:68:41:4b:
0e:17:c1:ab:ee:fe:9c:98:40:3b:f5:51:4d:ec:72:
b3:82:fc:0e:47:23:9d:4c:15:77:16:38:20:61:c8:
e7:64:c8:3c:7d:25:86:d7:b8:10:b6:96:79:67:4e:
02:52:c4:18:3e:d2:61:82:cd:be:32:6a:a7:81:51:
58:26:6b:eb:2b:5c:81:95:89:22:f7:ee:e5:0c:c2:
56:4a:f5:85:7b:08:5d:d1:03:3a:ab:d3:75:51:31:
3c:b5:8e:af:7d:49:e9:82:6f:5e:0b:bf:83:2b:b6:
52:c4:5f:f1:83:09:e2:94:fe:50:95:36:8d:c3:62:
3e:59:bc:b9:df:ab:f1:5e:68:97:82:53:1a:6f:5a:
9f:0e:3b:e7:e8:28:12:68:90:57:ad:ea:41:65:a5:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5D:8A:69:6A:26:15:FF:06:85:C3:91:13:72:B8:AB:84:7D:21:1F
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Al2KaWomFf8GhcORE3K4q4R9IR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.200.0/23
Signature Algorithm: sha256WithRSAEncryption
42:71:c1:7f:fb:05:da:13:55:d4:11:86:ce:17:a3:36:a4:72:
48:ef:5a:c5:6f:ad:2e:68:ff:35:0c:58:f8:db:30:9e:9d:2e:
2b:95:53:e5:ba:b2:ec:62:33:fd:9f:39:29:0f:34:bb:1f:4e:
aa:1d:e0:89:2a:78:3b:41:3d:61:c9:6f:3e:85:07:23:45:dd:
3c:fe:95:2b:7a:f5:35:73:e3:d8:6d:ea:7d:70:d1:15:68:b7:
79:03:57:c5:c6:24:9f:06:a2:db:95:c6:7e:c0:bc:4b:49:bb:
27:0d:d5:34:14:f0:28:f0:ff:25:91:c3:3b:de:d5:a0:98:5c:
89:0b:c1:f5:9a:6e:81:75:dc:f9:d4:ad:a9:3c:eb:8c:fb:af:
e0:cd:a1:c1:4d:b0:e9:54:9f:6b:e0:8a:93:af:c3:7c:4e:c2:
df:ce:9e:bf:9a:f2:66:8e:04:c3:88:33:a9:86:cc:70:f1:0f:
36:b7:dc:c5:29:3f:31:6b:aa:68:1e:9f:c6:2c:c7:98:b6:ce:
d6:fa:6c:23:f5:2d:d2:67:d0:cc:d8:b8:d3:ee:3c:b8:ea:da:
6e:20:08:9a:95:c5:c3:59:67:ab:33:96:93:18:48:6d:96:25:
90:49:41:f8:75:b9:1e:27:fc:c5:96:fa:4f:9c:c6:56:c2:95:
60:bc:94:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJ+1Y3WAYWBLJUyA0pmtGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjUwMTAyMTc1NDUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjVkOGE2OTZhMjYxNWZmMDY4NWMzOTExMzcyYjhhYjg0N2QyMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2sUUS4sicBaZuiqqFY3vOS66zdd
Z6du4/0Y4Vea2oWv543c+dhnqcu86tQwO7VwosBZb4Kpz2Fvc9jmAEQJmettRHrV
9B0RN92ZZFnv5E1vpvDECWYx2pXwI2oyFndXfJ0m1jhoQUsOF8Gr7v6cmEA79VFN
7HKzgvwORyOdTBV3FjggYcjnZMg8fSWG17gQtpZ5Z04CUsQYPtJhgs2+MmqngVFY
JmvrK1yBlYki9+7lDMJWSvWFewhd0QM6q9N1UTE8tY6vfUnpgm9eC7+DK7ZSxF/x
gwnilP5QlTaNw2I+Wby536vxXmiXglMab1qfDjvn6CgSaJBXrepBZaXZhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJdimlqJhX/BoXDkRNyuKuEfSEfMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvQWwyS2FXb21GZjhHaGNPUkUzSzRxNFI5SVI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUPIMA0G
CSqGSIb3DQEBCwUAA4IBAQBCccF/+wXaE1XUEYbOF6M2pHJI71rFb60uaP81DFj4
2zCenS4rlVPlurLsYjP9nzkpDzS7H06qHeCJKng7QT1hyW8+hQcjRd08/pUrevU1
c+PYbep9cNEVaLd5A1fFxiSfBqLblcZ+wLxLSbsnDdU0FPAo8P8lkcM73tWgmFyJ
C8H1mm6Bddz51K2pPOuM+6/gzaHBTbDpVJ9r4IqTr8N8TsLfzp6/mvJmjgTDiDOp
hsxw8Q82t9zFKT8xa6poHp/GLMeYts7W+mwj9S3SZ9DM2LjT7jy46tpuIAialcXD
WWerM5aTGEhtliWQSUH4dbkeJ/zFlvpPnMZWwpVgvJSm
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:09:19 2025 by rpki-client