Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/x7yARaHrxiMt3qw3C1rKl_BGFNQ.roa
File: x7yARaHrxiMt3qw3C1rKl_BGFNQ.roa (raw, json)
Hash identifier: uOAzXUVYtaq6eVvht8M8n8FMQuXSm1xZXk0fT12K2vY=
Subject key identifier: C7:BC:80:45:A1:EB:C6:23:2D:DE:AC:37:0B:5A:CA:97:F0:46:14:D4
Certificate issuer: /CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Certificate serial: 01955EC7618AE34DC569C55DA48B70CFCD49
Authority key identifier: 7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/x7yARaHrxiMt3qw3C1rKl_BGFNQ.roa
Signing time: Tue 04 Mar 2025 01:31:19 +0000
ROA not before: Tue 04 Mar 2025 01:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394144
IP address blocks: 45.82.236.0/22 maxlen: 22
45.82.236.0/23 maxlen: 23
2a0e:7580::/29 maxlen: 48
2a0e:7581::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5e:c7:61:8a:e3:4d:c5:69:c5:5d:a4:8b:70:cf:cd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba2be98438b98ee68a0d1b8c4144520bd0a623d
Validity
Not Before: Mar 4 01:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7bc8045a1ebc6232ddeac370b5aca97f04614d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:b0:ab:ca:4b:0c:55:48:38:3f:c4:66:fd:
90:6c:db:5b:6c:ed:93:7d:73:08:b9:14:16:24:58:
8e:3e:94:b5:de:d7:7e:9a:ee:51:5b:e2:cb:52:5d:
3b:42:0e:a8:00:9c:c4:fe:b9:a7:04:68:19:4b:c2:
de:3b:dc:6a:2f:53:61:b6:a4:8f:95:c1:70:55:df:
a9:0b:6c:e2:38:6d:d6:ef:b7:07:61:bd:dd:12:53:
8b:68:09:bf:71:10:c4:86:b2:3a:29:dd:d1:b5:42:
da:26:09:eb:f3:8b:d9:14:b0:cb:02:65:cd:7b:ea:
0c:d3:07:b1:00:51:52:6f:da:ea:8c:cd:ff:f8:fb:
e2:ad:85:e4:66:1a:a3:80:3b:2a:dc:35:93:51:be:
c6:51:36:36:f8:61:84:be:39:6b:a1:c3:82:ef:9c:
35:3a:f7:ca:a8:e5:e6:d8:3e:f4:2b:6c:97:2f:2e:
9e:5e:3d:bc:d8:e6:60:04:16:0a:83:3d:f4:b4:94:
ea:c7:f1:64:3e:63:c9:ad:44:36:5d:e4:f2:17:d7:
3b:2f:e3:93:df:ab:28:63:36:a8:eb:f4:d3:e4:78:
7a:4e:d1:30:89:b2:92:ae:d7:1f:85:8b:ae:7c:1d:
e8:cb:bd:d4:3f:9e:d0:bf:58:2d:67:da:03:71:7d:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BC:80:45:A1:EB:C6:23:2D:DE:AC:37:0B:5A:CA:97:F0:46:14:D4
X509v3 Authority Key Identifier:
keyid:7B:A2:BE:98:43:8B:98:EE:68:A0:D1:B8:C4:14:45:20:BD:0A:62:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6K-mEOLmO5ooNG4xBRFIL0KYj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/x7yARaHrxiMt3qw3C1rKl_BGFNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/845e76-9c2d-4aff-92af-4935b3f5c209/1/e6K-mEOLmO5ooNG4xBRFIL0KYj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.236.0/22
IPv6:
2a0e:7580::/29
Signature Algorithm: sha256WithRSAEncryption
04:38:7f:e3:83:17:49:0a:29:b6:7d:08:d7:1f:0f:82:ab:36:
ba:c9:dd:58:1e:eb:7b:36:2d:46:e8:b0:39:d9:a6:ba:56:83:
71:46:4f:5f:e4:49:b1:dc:86:ed:e7:01:22:fd:e9:33:a1:4e:
d4:6b:c8:23:89:7a:69:61:9c:8e:e3:ab:fb:60:fa:77:d0:cc:
3d:3e:bd:9d:36:13:7f:e7:6d:da:40:63:b9:5c:31:aa:8e:fc:
b8:5b:3b:a6:35:43:bc:d5:a0:73:ec:b5:da:a3:a5:7a:6f:90:
97:95:9c:b9:57:56:3d:07:77:a5:1f:ec:5e:29:11:9d:64:a5:
61:61:e6:f1:5d:13:02:b7:f8:33:05:c9:ea:d6:b0:63:2f:5e:
1d:17:68:62:4d:d3:a2:c0:52:62:e3:77:29:18:2b:ab:68:c8:
ce:ef:db:f9:f8:b7:62:25:9f:84:31:da:25:49:08:21:0a:c3:
16:ec:3f:57:86:70:8d:53:60:5a:e2:18:3e:bb:05:6a:4e:90:
66:13:66:07:09:28:6c:b0:d1:bc:21:10:12:b5:d6:17:eb:81:
c2:2e:af:a1:5a:0e:d4:6e:d9:be:26:af:9d:ed:66:91:24:be:
3f:be:ab:8c:a1:bd:e9:75:9d:ee:48:ef:a0:63:99:84:0f:15:
d0:4d:a2:c0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZVex2GK403FacVdpItwz81JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYTJiZTk4NDM4Yjk4ZWU2OGEwZDFiOGM0MTQ0NTIwYmQw
YTYyM2QwHhcNMjUwMzA0MDEzMTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2JjODA0NWExZWJjNjIzMmRkZWFjMzcwYjVhY2E5N2YwNDYxNGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntSwq8pLDFVIOD/EZv2QbNtbbO2T
fXMIuRQWJFiOPpS13td+mu5RW+LLUl07Qg6oAJzE/rmnBGgZS8LeO9xqL1NhtqSP
lcFwVd+pC2ziOG3W77cHYb3dElOLaAm/cRDEhrI6Kd3RtULaJgnr84vZFLDLAmXN
e+oM0wexAFFSb9rqjM3/+PvirYXkZhqjgDsq3DWTUb7GUTY2+GGEvjlrocOC75w1
OvfKqOXm2D70K2yXLy6eXj282OZgBBYKgz30tJTqx/FkPmPJrUQ2XeTyF9c7L+OT
36soYzao6/TT5Hh6TtEwibKSrtcfhYuufB3oy73UP57Qv1gtZ9oDcX0djQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMe8gEWh68YjLd6sNwtaypfwRhTUMB8GA1UdIwQY
MBaAFHuivphDi5juaKDRuMQURSC9CmI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84NDVlNzYtOWMyZC00YWZmLTkyYWYt
NDkzNWIzZjVjMjA5LzEveDd5QVJhSHJ4aU10M3F3M0MxcktsX0JHRk5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84NDVlNzYtOWMyZC00YWZmLTkyYWYtNDkzNWIzZjVjMjA5
LzEvZTZLLW1FT0xtTzVvb05HNHhCUkZJTDBLWWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVLsMA0E
AgACMAcDBQMqDnWAMA0GCSqGSIb3DQEBCwUAA4IBAQAEOH/jgxdJCim2fQjXHw+C
qza6yd1YHut7Ni1G6LA52aa6VoNxRk9f5Emx3Ibt5wEi/ekzoU7Ua8gjiXppYZyO
46v7YPp30Mw9Pr2dNhN/523aQGO5XDGqjvy4WzumNUO81aBz7LXao6V6b5CXlZy5
V1Y9B3elH+xeKRGdZKVhYebxXRMCt/gzBcnq1rBjL14dF2hiTdOiwFJi43cpGCur
aMjO79v5+LdiJZ+EMdolSQghCsMW7D9XhnCNU2Ba4hg+uwVqTpBmE2YHCShssNG8
IRAStdYX64HCLq+hWg7Ubtm+Jq+d7WaRJL4/vquMob3pdZ3uSO+gY5mEDxXQTaLA
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:26:17 2025 by rpki-client