Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Y5ftqTR9TzbpNFX0jR_lEw_2cbw.roa
File: Y5ftqTR9TzbpNFX0jR_lEw_2cbw.roa (raw, json)
Hash identifier: uZQd1l561DGTXpFyA9bvh0eURkUHs50E2fAXnc2P9cU=
Subject key identifier: 63:97:ED:A9:34:7D:4F:36:E9:34:55:F4:8D:1F:E5:13:0F:F6:71:BC
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 019425FCDFE47E469442315D2EA082727BD4
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Y5ftqTR9TzbpNFX0jR_lEw_2cbw.roa
Signing time: Thu 02 Jan 2025 07:48:36 +0000
ROA not before: Thu 02 Jan 2025 07:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30337
IP address blocks: 45.67.145.0/24 maxlen: 24
212.60.16.0/24 maxlen: 24
212.60.17.0/24 maxlen: 24
217.197.168.0/24 maxlen: 24
217.197.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:df:e4:7e:46:94:42:31:5d:2e:a0:82:72:7b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 07:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6397eda9347d4f36e93455f48d1fe5130ff671bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:f5:fa:56:9b:b9:e6:0b:8b:bc:9c:4a:93:
22:f3:00:59:7f:01:59:49:fb:8e:88:18:74:ab:0e:
95:d2:f1:c7:14:5a:23:cc:b9:55:99:c0:54:76:42:
42:2e:1e:b1:df:d9:8b:d3:57:13:c4:74:cb:52:44:
c2:9d:d6:7d:9d:66:5b:37:a9:05:62:a0:52:c1:4c:
d3:41:2b:32:6a:74:c5:12:d4:69:12:8f:50:cf:ed:
d1:a0:d8:66:ce:00:1a:67:87:ca:9e:59:f1:cc:2b:
ce:bd:b5:5a:9c:28:28:3f:27:a7:c1:78:34:b3:66:
db:0d:e6:85:96:89:77:d1:4f:cd:99:94:32:83:12:
1c:15:7f:59:cc:d2:86:1a:b4:69:8e:67:6d:5a:36:
d4:14:51:d4:40:8c:8a:16:5f:d7:62:bf:84:71:d3:
71:46:dd:55:d1:79:d4:f0:a4:a6:15:c8:e7:34:06:
5e:44:c4:77:93:c1:67:5c:f7:db:04:9b:20:52:af:
6a:2d:08:73:dc:09:03:f1:cb:3c:ea:43:f1:43:79:
3f:cb:d5:3a:e9:94:65:68:73:39:d0:c2:0e:ed:22:
e4:33:bc:1c:e5:ef:c8:13:4a:80:60:73:84:92:66:
af:23:02:54:32:e9:f7:54:45:ec:4a:b1:1d:a6:53:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:97:ED:A9:34:7D:4F:36:E9:34:55:F4:8D:1F:E5:13:0F:F6:71:BC
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/Y5ftqTR9TzbpNFX0jR_lEw_2cbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.145.0/24
212.60.16.0/23
217.197.168.0/24
217.197.171.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e2:75:00:c6:92:f0:c9:f8:87:5d:6d:38:65:65:8b:75:3f:
26:1f:1b:e3:8d:8a:72:8a:87:f6:7e:3b:3a:49:da:58:8c:17:
90:bd:c6:38:2f:04:06:06:f1:29:c8:f0:42:46:c3:ba:f9:db:
ea:13:b9:a9:03:17:ee:bf:9b:bb:04:b7:90:a8:21:a9:04:a2:
94:da:59:de:60:37:f1:ef:19:1c:46:52:1a:28:78:1b:43:60:
b2:02:ab:1b:1c:6d:b8:b8:12:1b:57:74:54:f8:1d:0d:80:0c:
2f:43:ed:70:68:ae:6e:c1:72:89:6b:3e:8c:0a:2c:ed:0a:0e:
a6:17:fc:01:03:cd:63:62:f0:8d:d9:8f:55:dd:21:a7:55:07:
67:86:9c:de:8e:9a:35:35:94:e3:4a:84:ee:85:44:3a:75:26:
20:64:ba:cd:07:9a:1d:e7:50:49:99:99:8e:c6:a9:88:17:4a:
fb:b1:d9:3e:37:7e:c3:ed:9d:d2:64:75:6e:c0:31:1d:f4:f4:
aa:c6:36:e2:eb:8a:33:4a:31:eb:0a:7b:6b:05:53:ed:bb:71:
dc:73:e2:6e:ee:ed:3c:86:f0:82:23:19:5e:f0:18:d0:68:83:
94:2d:a5:50:d8:48:68:06:ca:ce:b5:78:1d:f9:84:10:ff:dc:
80:78:cd:80
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQl/N/kfkaUQjFdLqCCcnvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjUwMTAyMDc0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mzk3ZWRhOTM0N2Q0ZjM2ZTkzNDU1ZjQ4ZDFmZTUxMzBmZjY3MWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOP1+labueYLi7ycSpMi8wBZfwFZ
SfuOiBh0qw6V0vHHFFojzLlVmcBUdkJCLh6x39mL01cTxHTLUkTCndZ9nWZbN6kF
YqBSwUzTQSsyanTFEtRpEo9Qz+3RoNhmzgAaZ4fKnlnxzCvOvbVanCgoPyenwXg0
s2bbDeaFlol30U/NmZQygxIcFX9ZzNKGGrRpjmdtWjbUFFHUQIyKFl/XYr+EcdNx
Rt1V0XnU8KSmFcjnNAZeRMR3k8FnXPfbBJsgUq9qLQhz3AkD8cs86kPxQ3k/y9U6
6ZRlaHM50MIO7SLkM7wc5e/IE0qAYHOEkmavIwJUMun3VEXsSrEdplOqgwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGOX7ak0fU826TRV9I0f5RMP9nG8MB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvWTVmdHFUUjlUemJwTkZYMGpSX2xFd18yY2J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALUORAwQB
1DwQAwQA2cWoAwQA2cWrMA0GCSqGSIb3DQEBCwUAA4IBAQAf4nUAxpLwyfiHXW04
ZWWLdT8mHxvjjYpyiof2fjs6SdpYjBeQvcY4LwQGBvEpyPBCRsO6+dvqE7mpAxfu
v5u7BLeQqCGpBKKU2lneYDfx7xkcRlIaKHgbQ2CyAqsbHG24uBIbV3RU+B0NgAwv
Q+1waK5uwXKJaz6MCiztCg6mF/wBA81jYvCN2Y9V3SGnVQdnhpzejpo1NZTjSoTu
hUQ6dSYgZLrNB5od51BJmZmOxqmIF0r7sdk+N37D7Z3SZHVuwDEd9PSqxjbi64oz
SjHrCntrBVPtu3Hcc+Ju7u08hvCCIxle8BjQaIOULaVQ2EhoBsrOtXgd+YQQ/9yA
eM2A
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:12:36 2025 by rpki-client