Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa
File: v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa (raw, json)
Hash identifier: u3MuUfvclTAjmi8s1goH67RIHnHHg6KiQbDjeAC9CsU=
Subject key identifier: BF:7A:04:3D:1E:16:A2:63:20:2C:35:42:3E:4C:4B:7C:9E:44:9E:18
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 01942746FB00889ACC2984463027A3D33DD8
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa
Signing time: Thu 02 Jan 2025 13:49:10 +0000
ROA not before: Thu 02 Jan 2025 13:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57494
IP address blocks: 45.87.245.0/24 maxlen: 24
2a10:9684::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:fb:00:88:9a:cc:29:84:46:30:27:a3:d3:3d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Jan 2 13:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf7a043d1e16a263202c35423e4c4b7c9e449e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:da:28:7c:92:d8:d0:47:56:ab:c4:9f:04:07:
8c:96:b8:60:51:4e:6b:93:f8:e2:c6:f1:1b:85:1c:
e4:ff:1e:3d:2b:db:6d:08:c6:89:2f:b6:91:10:99:
78:9e:ec:ad:3f:7e:b3:0c:c1:5c:6f:0a:b2:7e:7b:
c8:e0:37:cc:5f:1c:1d:a6:17:f6:cb:c8:52:61:d7:
8e:fa:e2:cb:26:15:c1:84:b0:2c:4d:d9:6f:13:ef:
26:ad:54:87:1e:e9:dd:42:62:70:03:55:f5:12:ba:
48:8a:fe:64:4e:39:1e:7d:d6:c7:9d:53:04:55:f6:
e6:0d:92:e7:1e:2b:8c:5a:0a:74:66:8d:90:88:77:
1e:26:2e:ff:fd:14:b3:21:2a:64:8c:9e:98:7b:a5:
5c:5d:06:10:89:01:ac:1f:b1:84:a6:38:50:7f:d5:
0a:3d:5d:20:b1:7c:38:3f:0a:0f:85:f9:59:59:c5:
7e:3e:87:a3:c3:b4:a9:a2:cc:f2:6a:1d:aa:44:92:
7d:64:fe:3f:6e:f2:1e:47:95:33:85:bd:60:36:1a:
c4:54:4f:0b:22:ee:da:65:bc:f3:59:42:e7:0f:98:
ff:85:be:9a:98:66:96:75:9f:50:29:a9:e7:76:31:
c9:2f:02:3d:f2:32:e2:ee:8d:94:68:3c:19:9f:ff:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7A:04:3D:1E:16:A2:63:20:2C:35:42:3E:4C:4B:7C:9E:44:9E:18
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/v3oEPR4WomMgLDVCPkxLfJ5Enhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.245.0/24
IPv6:
2a10:9684::/32
Signature Algorithm: sha256WithRSAEncryption
1c:5b:bf:56:58:72:4e:e7:05:b1:64:be:82:27:c5:b2:ac:09:
d2:8b:65:da:70:79:5b:8f:1c:24:81:ca:49:1a:b5:5b:a3:39:
fe:72:90:cd:fe:b3:d5:73:d9:69:f1:67:60:e0:ef:0a:0e:ee:
8f:f7:9f:93:ed:c0:bb:f8:10:ff:63:34:3a:64:e0:44:2b:86:
32:2f:70:42:f0:59:16:3d:de:bc:e5:3d:0b:9d:6a:72:2d:12:
fd:9c:b3:96:0b:36:22:b6:dd:6b:ab:a0:08:4f:dc:fe:cf:c2:
a8:9e:e3:20:be:f5:50:ad:4a:6a:9a:a3:61:5b:77:04:8b:f5:
9c:9b:9c:d3:c6:77:d5:cc:b9:05:4a:4e:8e:82:07:2a:d7:20:
69:50:60:71:d4:93:1a:c3:50:0f:9a:7c:a1:44:3e:ba:ca:26:
d2:af:ae:2f:df:ea:86:6a:03:cd:d1:4b:70:10:99:31:08:bb:
b0:7a:21:9b:e8:d2:26:5f:83:1f:32:d9:e3:95:7e:f8:a3:64:
d5:8b:84:75:dd:54:25:37:05:af:2a:27:a6:c8:fb:50:2d:ea:
ed:08:01:53:c9:df:67:4c:9e:7a:fd:10:25:6f:56:31:24:c0:
d7:16:9e:4f:bf:8b:a1:28:cc:35:f0:76:50:48:ca:77:4e:96:
49:22:8d:4e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQnRvsAiJrMKYRGMCej0z3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh
MTQ3YmMwHhcNMjUwMTAyMTM0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjdhMDQzZDFlMTZhMjYzMjAyYzM1NDIzZTRjNGI3YzllNDQ5ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29oofJLY0EdWq8SfBAeMlrhgUU5r
k/jixvEbhRzk/x49K9ttCMaJL7aREJl4nuytP36zDMFcbwqyfnvI4DfMXxwdphf2
y8hSYdeO+uLLJhXBhLAsTdlvE+8mrVSHHundQmJwA1X1ErpIiv5kTjkefdbHnVME
VfbmDZLnHiuMWgp0Zo2QiHceJi7//RSzISpkjJ6Ye6VcXQYQiQGsH7GEpjhQf9UK
PV0gsXw4PwoPhflZWcV+Poejw7Sposzyah2qRJJ9ZP4/bvIeR5Uzhb1gNhrEVE8L
Iu7aZbzzWULnD5j/hb6amGaWdZ9QKanndjHJLwI98jLi7o2UaDwZn/9oLQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFL96BD0eFqJjICw1Qj5MS3yeRJ4YMB8GA1UdIwQY
MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt
ZDg3MjEzNzU2NDRhLzEvdjNvRVBSNFdvbU1nTERWQ1BreExmSjVFbmhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh
LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVf1MA0E
AgACMAcDBQAqEJaEMA0GCSqGSIb3DQEBCwUAA4IBAQAcW79WWHJO5wWxZL6CJ8Wy
rAnSi2XacHlbjxwkgcpJGrVbozn+cpDN/rPVc9lp8Wdg4O8KDu6P95+T7cC7+BD/
YzQ6ZOBEK4YyL3BC8FkWPd685T0LnWpyLRL9nLOWCzYitt1rq6AIT9z+z8KonuMg
vvVQrUpqmqNhW3cEi/Wcm5zTxnfVzLkFSk6Oggcq1yBpUGBx1JMaw1APmnyhRD66
yibSr64v3+qGagPN0UtwEJkxCLuweiGb6NImX4MfMtnjlX74o2TVi4R13VQlNwWv
KiemyPtQLertCAFTyd9nTJ56/RAlb1YxJMDXFp5Pv4uhKMw18HZQSMp3TpZJIo1O
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:47:37 2025 by rpki-client