Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/TLegbcgI8kzdZX0LyaY_jBKsLjM.roa
File: TLegbcgI8kzdZX0LyaY_jBKsLjM.roa (raw, json)
Hash identifier: jfnT8EG89ibu6lVDZPQfuHKOWHv4n9hSUWRGapOkR0I=
Subject key identifier: 4C:B7:A0:6D:C8:08:F2:4C:DD:65:7D:0B:C9:A6:3F:8C:12:AC:2E:33
Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial: 01942444C25D0D709D256DCE90BADE3EDA42
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/TLegbcgI8kzdZX0LyaY_jBKsLjM.roa
Signing time: Wed 01 Jan 2025 23:47:53 +0000
ROA not before: Wed 01 Jan 2025 23:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208342
IP address blocks: 45.129.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c2:5d:0d:70:9d:25:6d:ce:90:ba:de:3e:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cb7a06dc808f24cdd657d0bc9a63f8c12ac2e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:42:04:43:04:83:e2:58:46:0e:fd:43:4d:
ef:2e:9b:d6:b0:81:fd:d3:29:58:d0:e9:1b:2d:ab:
2e:bd:2d:36:35:1a:bb:3a:32:ae:6c:7e:3d:c0:34:
42:33:1d:de:82:a6:9c:2f:e9:2c:11:af:b3:bc:77:
75:ea:60:92:ab:de:25:50:14:81:da:8a:e5:e7:4d:
60:50:18:53:c2:15:90:d5:90:4f:4f:6c:f7:f3:0d:
be:86:5d:79:3a:67:d0:9f:ab:f0:af:3d:ff:c4:c5:
38:83:fb:d5:b6:97:69:32:77:00:81:90:f8:3b:47:
08:dc:9d:96:27:f2:fc:eb:fd:fd:2a:2b:ac:8d:e2:
08:cb:56:25:3d:67:c1:8e:c2:5f:e3:c4:bc:f7:05:
50:9d:e3:ba:42:64:d2:03:19:bf:b0:a9:37:f9:67:
60:d9:97:04:05:ec:8f:54:d0:a6:c2:46:a6:cb:e1:
72:49:c6:9e:04:09:03:5f:82:df:92:e5:d4:15:a5:
4e:42:7d:7a:71:95:b8:81:42:58:c8:74:24:f5:86:
ab:23:40:a6:62:b3:66:c7:e6:e7:51:b3:10:bc:83:
70:3d:6f:aa:55:a1:54:67:68:b4:54:d0:42:42:fa:
76:c4:5b:4f:3b:4a:93:70:bb:9f:c6:90:22:11:72:
d2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B7:A0:6D:C8:08:F2:4C:DD:65:7D:0B:C9:A6:3F:8C:12:AC:2E:33
X509v3 Authority Key Identifier:
keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/TLegbcgI8kzdZX0LyaY_jBKsLjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.244.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:a7:9b:a5:57:e9:a8:ff:2b:1e:91:a2:8a:75:19:f0:c0:dc:
76:33:66:af:81:5a:af:35:47:c7:ce:58:a3:e7:c3:f0:d4:9d:
4b:2a:35:29:b6:c3:da:11:29:dc:a6:ad:11:0a:4e:e9:5d:98:
24:af:12:3e:5c:3a:61:d9:b0:cd:b6:8e:e1:4e:20:d2:56:42:
7d:03:af:5a:01:d3:de:b4:2c:09:de:e6:f5:1d:4c:eb:15:39:
42:c1:4b:c6:14:3b:49:52:66:fd:5d:2f:bf:82:8b:3b:9a:6a:
3d:5d:69:f1:7d:9e:d1:dd:69:c1:72:d6:7f:0b:4c:ca:05:e6:
87:28:ce:be:88:98:10:d6:de:ad:ea:7b:26:ac:25:a0:38:94:
89:60:83:c7:25:d2:de:04:0e:6e:33:75:d0:99:7c:25:85:07:
6c:b5:61:1d:cc:69:64:de:2c:9b:b2:c7:29:62:3b:ee:0b:8e:
6a:b3:81:30:5a:66:1c:1d:c4:d3:52:2c:05:d7:c7:9a:98:04:
83:09:0a:2d:60:aa:d7:39:cc:d7:23:9e:3c:c9:fe:ff:b7:69:
9d:7e:38:5d:95:76:12:63:ed:e7:9b:1b:ad:53:99:46:a3:d4:
74:c3:51:5d:93:83:63:49:bd:cd:4a:29:1b:ef:5f:f0:a1:bb:
9b:db:39:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRMJdDXCdJW3OkLrePtpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmY0MTk2NTlmNTRkZjM3ODc5MmI2MDJjMDA5MmMzNTM5
ODhlYzgwHhcNMjUwMTAxMjM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2I3YTA2ZGM4MDhmMjRjZGQ2NTdkMGJjOWE2M2Y4YzEyYWMyZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaZCBEMEg+JYRg79Q03vLpvWsIH9
0ylY0OkbLasuvS02NRq7OjKubH49wDRCMx3egqacL+ksEa+zvHd16mCSq94lUBSB
2orl501gUBhTwhWQ1ZBPT2z38w2+hl15OmfQn6vwrz3/xMU4g/vVtpdpMncAgZD4
O0cI3J2WJ/L86/39KiusjeIIy1YlPWfBjsJf48S89wVQneO6QmTSAxm/sKk3+Wdg
2ZcEBeyPVNCmwkamy+FyScaeBAkDX4LfkuXUFaVOQn16cZW4gUJYyHQk9YarI0Cm
YrNmx+bnUbMQvINwPW+qVaFUZ2i0VNBCQvp2xFtPO0qTcLufxpAiEXLS7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEy3oG3ICPJM3WV9C8mmP4wSrC4zMB8GA1UdIwQY
MBaAFL//QZZZ9U3zeHkrYCwAksNTmI7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEt
NzBiZGYxNWRkNjE5LzEvVExlZ2JjZ0k4a3pkWlgwTHlhWV9qQktzTGpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEtNzBiZGYxNWRkNjE5
LzEvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYH0MA0G
CSqGSIb3DQEBCwUAA4IBAQCkp5ulV+mo/ysekaKKdRnwwNx2M2avgVqvNUfHzlij
58Pw1J1LKjUptsPaESncpq0RCk7pXZgkrxI+XDph2bDNto7hTiDSVkJ9A69aAdPe
tCwJ3ub1HUzrFTlCwUvGFDtJUmb9XS+/gos7mmo9XWnxfZ7R3WnBctZ/C0zKBeaH
KM6+iJgQ1t6t6nsmrCWgOJSJYIPHJdLeBA5uM3XQmXwlhQdstWEdzGlk3iybsscp
YjvuC45qs4EwWmYcHcTTUiwF18eamASDCQotYKrXOczXI548yf7/t2mdfjhdlXYS
Y+3nmxutU5lGo9R0w1Fdk4NjSb3NSikb71/wobub2zmj
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:14:33 2025 by rpki-client