Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa
File: uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa (raw, json)
Hash identifier: UPN1y7noDZEvkhcHWjNiVxEsGCr7mcBF0YnibzrND6U=
Subject key identifier: BA:81:E2:BC:60:DA:41:D4:D1:BB:83:1B:99:9D:71:5E:EE:E5:FA:69
Certificate issuer: /CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Certificate serial: 01941F8C7F68005F551E0E235B61D5D83EB4
Authority key identifier: A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208933
IP address blocks: 45.15.28.0/22 maxlen: 22
45.15.28.0/23 maxlen: 23
45.15.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7f:68:00:5f:55:1e:0e:23:5b:61:d5:d8:3e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33eec03ea122713278b4066ecf2bfeaa1563c0d
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba81e2bc60da41d4d1bb831b999d715eeee5fa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:9b:73:5e:f3:15:37:d9:f0:b6:46:f1:5e:
53:96:e5:4d:5a:0d:6d:62:64:ab:29:79:75:ab:46:
02:75:30:6d:d8:29:db:2c:73:30:8a:af:44:15:7e:
26:8c:04:c6:5d:b2:e1:37:28:ca:75:1b:7c:bd:84:
32:cd:db:b5:5c:51:7f:3b:07:22:d5:44:ab:f9:dd:
82:b3:55:9d:b1:c5:cc:01:e6:a8:3a:fd:73:07:27:
2c:a1:94:af:96:99:bc:93:a1:0d:30:02:70:97:3f:
e1:10:2d:e0:2e:46:e3:3f:a6:aa:a1:27:d6:90:21:
3a:1d:20:3d:b8:65:84:bf:32:cb:aa:93:bc:c1:89:
7d:c1:fb:86:8f:b5:38:a7:a7:78:8b:b2:99:2f:2e:
4f:73:83:e9:94:7b:0c:a3:1b:27:7c:82:a7:73:35:
1d:a7:d5:a1:dd:e5:c2:4f:f5:d7:28:71:22:d4:57:
dc:67:36:3c:6a:9f:11:94:9a:0b:57:33:2c:1f:53:
78:e7:75:78:51:06:40:58:e6:08:e9:3f:8c:6b:f1:
d6:51:4b:b2:50:bc:77:38:45:b0:cd:16:e5:df:9a:
35:09:2c:4b:fa:f0:67:f5:cd:38:9d:5f:5a:4a:34:
09:0a:e2:34:66:42:9c:8e:43:7d:8c:69:6c:ed:6a:
ac:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:81:E2:BC:60:DA:41:D4:D1:BB:83:1B:99:9D:71:5E:EE:E5:FA:69
X509v3 Authority Key Identifier:
keyid:A3:3E:EC:03:EA:12:27:13:27:8B:40:66:EC:F2:BF:EA:A1:56:3C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oz7sA-oSJxMni0Bm7PK_6qFWPA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/uoHivGDaQdTRu4MbmZ1xXu7l-mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee3ac0-be33-4a37-a0d7-59a5ee3ad9a8/1/oz7sA-oSJxMni0Bm7PK_6qFWPA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:a8:e2:28:41:3f:63:b2:43:f3:a0:e4:c0:bc:ca:fd:6e:ab:
c3:f5:7f:35:3a:c3:36:7f:0d:5b:76:a3:33:da:2b:db:69:29:
b4:81:4d:a7:46:a3:fe:0c:12:a6:a1:2d:d7:3b:1e:4e:a3:a0:
9c:41:d7:8d:65:64:3f:1a:96:7b:84:99:85:aa:0f:a4:d4:57:
c7:02:1d:13:c2:82:55:db:7a:c5:84:3c:48:0e:e6:fe:5e:57:
a6:c9:8e:b7:07:ba:cc:c4:8b:58:0d:12:d7:b9:f3:ba:12:39:
0d:5d:8d:9c:01:31:23:6b:a6:f4:34:f0:a6:b3:32:79:e5:e4:
45:e1:7a:a3:26:ac:61:44:9f:0d:d8:f0:d6:17:54:4c:bf:bf:
a4:ba:9b:9c:e5:05:fc:22:58:16:04:d3:b5:99:96:1b:00:00:
0c:98:5c:54:57:87:02:34:13:87:06:0b:de:81:2e:ef:76:24:
97:e9:16:e6:b1:d8:bf:08:f4:ce:2b:e8:91:87:ee:e1:77:68:
06:af:de:77:45:9d:6a:da:07:2b:e7:50:37:0b:72:e5:58:97:
81:81:9c:b0:ce:5d:56:56:24:00:db:eb:04:d3:88:4d:68:01:
7e:3c:8c:84:cd:77:50:58:5a:99:0f:35:97:6e:bd:ec:fc:9d:
50:02:bb:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjH9oAF9VHg4jW2HV2D60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzM2VlYzAzZWExMjI3MTMyNzhiNDA2NmVjZjJiZmVhYTE1
NjNjMGQwHhcNMjUwMTAxMDE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTgxZTJiYzYwZGE0MWQ0ZDFiYjgzMWI5OTlkNzE1ZWVlZTVmYTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkCbc17zFTfZ8LZG8V5TluVNWg1t
YmSrKXl1q0YCdTBt2CnbLHMwiq9EFX4mjATGXbLhNyjKdRt8vYQyzdu1XFF/Owci
1USr+d2Cs1WdscXMAeaoOv1zBycsoZSvlpm8k6ENMAJwlz/hEC3gLkbjP6aqoSfW
kCE6HSA9uGWEvzLLqpO8wYl9wfuGj7U4p6d4i7KZLy5Pc4PplHsMoxsnfIKnczUd
p9Wh3eXCT/XXKHEi1FfcZzY8ap8RlJoLVzMsH1N453V4UQZAWOYI6T+Ma/HWUUuy
ULx3OEWwzRbl35o1CSxL+vBn9c04nV9aSjQJCuI0ZkKcjkN9jGls7Wqs4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLqB4rxg2kHU0buDG5mdcV7u5fppMB8GA1UdIwQY
MBaAFKM+7APqEicTJ4tAZuzyv+qhVjwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDct
NTlhNWVlM2FkOWE4LzEvdW9IaXZHRGFRZFRSdTRNYm1aMXhYdTdsLW1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZTNhYzAtYmUzMy00YTM3LWEwZDctNTlhNWVlM2FkOWE4
LzEvb3o3c0Etb1NKeE1uaTBCbTdQS182cUZXUEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ8cMA0G
CSqGSIb3DQEBCwUAA4IBAQBPqOIoQT9jskPzoOTAvMr9bqvD9X81OsM2fw1bdqMz
2ivbaSm0gU2nRqP+DBKmoS3XOx5Oo6CcQdeNZWQ/GpZ7hJmFqg+k1FfHAh0TwoJV
23rFhDxIDub+XlemyY63B7rMxItYDRLXufO6EjkNXY2cATEja6b0NPCmszJ55eRF
4XqjJqxhRJ8N2PDWF1RMv7+kupuc5QX8IlgWBNO1mZYbAAAMmFxUV4cCNBOHBgve
gS7vdiSX6Rbmsdi/CPTOK+iRh+7hd2gGr953RZ1q2gcr51A3C3LlWJeBgZywzl1W
ViQA2+sE04hNaAF+PIyEzXdQWFqZDzWXbr3s/J1QArts
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:03 2025 by rpki-client