Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa
File: Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa (raw, json)
Hash identifier: 7B5163r4ydWZZiBZS3F/kHEKa3lRTXllycuzchBVe18=
Subject key identifier: 51:BD:20:1F:AF:A8:E8:A8:4D:20:DB:63:61:3C:27:27:EB:82:91:95
Certificate issuer: /CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Certificate serial: 0194258E7A8C6EC57E882AEF463FD33187AC
Authority key identifier: 63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa
Signing time: Thu 02 Jan 2025 05:48:02 +0000
ROA not before: Thu 02 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28854
IP address blocks: 45.134.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:7a:8c:6e:c5:7e:88:2a:ef:46:3f:d3:31:87:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63fdc09ad54a397c604e94a1c966e2c296059cc1
Validity
Not Before: Jan 2 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51bd201fafa8e8a84d20db63613c2727eb829195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:90:78:84:af:a3:1a:a3:80:d8:11:7d:31:
4a:f1:6f:64:a9:5d:db:0d:13:68:45:d1:17:4a:24:
59:be:6e:31:94:f7:94:f0:b7:30:cd:47:5e:cb:ff:
3a:7e:d0:07:4a:76:b1:f8:1a:61:f6:d1:a4:cc:7f:
27:cd:5d:b9:a5:cb:11:0c:b7:69:87:8c:8e:16:ba:
ac:dc:5c:4d:c7:54:7f:86:91:6f:9a:a8:00:14:eb:
4f:e1:8a:ef:45:b6:36:f1:5c:2d:fa:6a:51:98:9a:
41:19:8e:82:10:0c:fa:d0:e9:a3:d7:1b:2e:b6:d4:
97:d6:5c:18:01:c1:b4:80:17:e5:d9:35:72:10:a5:
73:18:c5:70:81:0b:a6:04:99:76:29:5b:90:15:44:
c7:6f:91:4d:16:8f:0c:8d:ba:be:21:dc:e7:73:d3:
94:cf:dc:43:19:6b:55:0e:30:ea:a7:7a:31:4b:9b:
01:72:da:cc:36:33:ed:8d:52:59:a7:9f:20:c6:9a:
02:eb:7f:86:0f:ff:e4:62:c4:a3:46:59:41:6c:b1:
41:11:0d:b0:d4:74:78:f9:a8:ae:1e:b9:78:32:b7:
d7:84:47:41:d6:76:35:7b:ed:72:a2:e5:d3:42:cb:
e5:2f:f0:51:f3:3f:44:8a:b7:b6:2d:b7:26:75:92:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BD:20:1F:AF:A8:E8:A8:4D:20:DB:63:61:3C:27:27:EB:82:91:95
X509v3 Authority Key Identifier:
keyid:63:FD:C0:9A:D5:4A:39:7C:60:4E:94:A1:C9:66:E2:C2:96:05:9C:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y_3AmtVKOXxgTpShyWbiwpYFnME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Ub0gH6-o6KhNINtjYTwnJ-uCkZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2d0da4-a532-4b03-9055-4a5cbdb50e29/1/Y_3AmtVKOXxgTpShyWbiwpYFnME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:8e:dc:0a:25:dd:ce:5a:73:18:38:52:f0:49:47:97:17:fc:
bf:be:5a:ac:ab:06:39:74:75:28:12:3b:7c:07:b1:81:4f:a8:
b4:6b:4e:20:64:d9:cd:9a:12:3b:3c:71:f2:e9:6c:04:78:91:
38:73:a6:ce:43:cd:bb:66:18:19:6e:20:b3:d0:59:e5:1e:76:
16:c3:a9:d7:62:e1:a0:98:08:a5:a1:4a:a1:dc:ec:6a:ac:83:
9e:fb:39:ae:89:7c:7d:8b:72:2b:cc:13:ef:ba:c8:83:66:16:
8a:76:fb:1b:d9:d0:27:a7:42:7b:c6:1e:12:cb:31:57:5b:c5:
a4:38:20:d6:b8:24:24:42:89:8a:8c:07:12:9d:27:25:23:3c:
af:84:e2:d2:01:72:fa:7c:61:b3:8a:87:9f:b1:d1:53:ee:a8:
ab:f7:58:ab:5b:a4:0f:22:c5:d0:9d:9b:79:05:58:69:87:cd:
1f:d8:d6:c2:f6:9a:57:48:f9:f3:2d:89:cc:78:a2:24:a4:28:
59:75:1a:5c:c7:6c:c1:b3:99:57:6d:27:6f:70:ad:92:b4:e7:
1a:1f:7f:10:0d:4a:d9:7c:f9:3e:13:97:99:7b:2b:94:6b:65:
41:ed:a7:31:2f:e5:ba:f7:da:c5:2a:a8:ab:a4:27:d7:7c:eb:
af:b8:b2:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljnqMbsV+iCrvRj/TMYesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZmRjMDlhZDU0YTM5N2M2MDRlOTRhMWM5NjZlMmMyOTYw
NTljYzEwHhcNMjUwMTAyMDU0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWJkMjAxZmFmYThlOGE4NGQyMGRiNjM2MTNjMjcyN2ViODI5MTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6iQeISvoxqjgNgRfTFK8W9kqV3b
DRNoRdEXSiRZvm4xlPeU8LcwzUdey/86ftAHSnax+Bph9tGkzH8nzV25pcsRDLdp
h4yOFrqs3FxNx1R/hpFvmqgAFOtP4YrvRbY28Vwt+mpRmJpBGY6CEAz60Omj1xsu
ttSX1lwYAcG0gBfl2TVyEKVzGMVwgQumBJl2KVuQFUTHb5FNFo8Mjbq+Idznc9OU
z9xDGWtVDjDqp3oxS5sBctrMNjPtjVJZp58gxpoC63+GD//kYsSjRllBbLFBEQ2w
1HR4+aiuHrl4MrfXhEdB1nY1e+1youXTQsvlL/BR8z9Eire2LbcmdZLSvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFG9IB+vqOioTSDbY2E8JyfrgpGVMB8GA1UdIwQY
MBaAFGP9wJrVSjl8YE6Uoclm4sKWBZzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUt
NGE1Y2JkYjUwZTI5LzEvVWIwZ0g2LW82S2hOSU50allUd25KLXVDa1pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yZDBkYTQtYTUzMi00YjAzLTkwNTUtNGE1Y2JkYjUwZTI5
LzEvWV8zQW10VktPWHhnVHBTaHlXYml3cFlGbk1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYYsMA0G
CSqGSIb3DQEBCwUAA4IBAQBLjtwKJd3OWnMYOFLwSUeXF/y/vlqsqwY5dHUoEjt8
B7GBT6i0a04gZNnNmhI7PHHy6WwEeJE4c6bOQ827ZhgZbiCz0FnlHnYWw6nXYuGg
mAiloUqh3OxqrIOe+zmuiXx9i3IrzBPvusiDZhaKdvsb2dAnp0J7xh4SyzFXW8Wk
OCDWuCQkQomKjAcSnSclIzyvhOLSAXL6fGGzioefsdFT7qir91irW6QPIsXQnZt5
BVhph80f2NbC9ppXSPnzLYnMeKIkpChZdRpcx2zBs5lXbSdvcK2StOcaH38QDUrZ
fPk+E5eZeyuUa2VB7acxL+W699rFKqirpCfXfOuvuLI5
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:24:48 2025 by rpki-client