Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/sLqJ03Mzd2paUSWl89cFwcc4aoc.roa
File: sLqJ03Mzd2paUSWl89cFwcc4aoc.roa (raw, json)
Hash identifier: BdXE5xoW2k/8wUIc6tmTtpZOZ6amVghYGgF4PwTsgmo=
Subject key identifier: B0:BA:89:D3:73:33:77:6A:5A:51:25:A5:F3:D7:05:C1:C7:38:6A:87
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0194206805B429FD9447D3BEEF215518E2F9
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/sLqJ03Mzd2paUSWl89cFwcc4aoc.roa
Signing time: Wed 01 Jan 2025 05:47:55 +0000
ROA not before: Wed 01 Jan 2025 05:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62163
IP address blocks: 45.140.10.0/23 maxlen: 23
46.161.216.0/24 maxlen: 24
46.161.217.0/24 maxlen: 24
46.161.218.0/24 maxlen: 24
46.161.219.0/24 maxlen: 24
193.56.239.0/24 maxlen: 24
194.40.246.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:05:b4:29:fd:94:47:d3:be:ef:21:55:18:e2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 05:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0ba89d37333776a5a5125a5f3d705c1c7386a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:16:5f:82:35:6b:06:a8:81:4e:97:b7:16:f7:
50:6e:a3:e4:b9:ea:66:2a:5e:50:d4:bc:2e:7e:22:
89:0a:d6:d1:2b:18:44:7a:cc:23:5a:65:f4:52:74:
a8:78:9c:8a:e6:47:57:80:0f:37:b6:fe:9d:6d:04:
31:0d:52:20:bf:68:28:c7:82:3e:d6:32:27:6d:a2:
aa:66:d1:f6:61:57:5a:08:1b:ce:0f:0b:dd:9e:7c:
f5:2e:4c:84:a6:07:f2:d9:ab:6d:b4:87:1f:09:3b:
10:55:70:75:e5:a8:4b:2f:44:64:59:b9:14:74:a5:
85:d5:1d:f0:a2:79:7b:2b:1e:c5:f4:94:cb:36:65:
8e:76:88:70:d5:8d:b4:f3:18:88:e7:eb:d4:cd:2b:
4e:c2:82:4b:1c:0f:8f:f0:f1:94:e5:88:00:d9:e1:
f8:83:dc:cc:8f:d1:b7:6d:ec:6c:c0:0e:c4:d2:bb:
a6:80:01:9d:fb:4e:e6:b4:b9:3c:c2:51:10:b2:4a:
d6:92:17:0d:a1:4d:7b:50:b0:a2:4f:02:66:b6:09:
47:1f:a7:6e:69:a8:fc:47:5b:96:ec:bf:35:b9:05:
df:15:66:e3:67:7d:8d:2a:8a:36:e3:ac:10:94:6d:
7b:f8:8a:cc:45:b2:c1:1f:0b:71:49:18:39:08:3e:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:BA:89:D3:73:33:77:6A:5A:51:25:A5:F3:D7:05:C1:C7:38:6A:87
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/sLqJ03Mzd2paUSWl89cFwcc4aoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.10.0/23
46.161.216.0/22
193.56.239.0/24
194.40.246.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:9a:21:4c:30:95:f0:c8:9d:d8:19:da:f9:cd:53:28:ab:6c:
62:e5:41:6f:6c:34:51:bf:bf:b5:3d:11:12:e9:a8:db:17:02:
28:0d:7b:6a:cb:46:6f:d3:db:73:a7:d8:e2:bc:98:b2:5a:0a:
db:b9:60:a9:f8:cc:6b:35:9c:bf:04:d3:8f:03:7b:62:f0:b6:
07:ff:1c:eb:38:86:7b:59:c0:4a:f3:45:00:62:27:68:44:82:
68:63:11:84:e2:76:85:f8:ca:a3:84:4f:4c:36:94:47:4e:1d:
a2:23:1e:c3:01:8b:89:8f:9c:99:d8:42:54:f2:7c:7b:6a:ab:
b6:6e:ce:c0:98:a4:77:d3:e7:85:28:cf:90:8b:79:22:43:ba:
97:37:63:82:fe:06:3e:44:a6:3c:07:c6:34:09:85:55:b1:c7:
78:1b:d1:bc:ef:89:e1:99:9c:49:fb:6c:65:14:e4:ba:1c:ed:
77:31:16:ee:20:6e:95:1e:60:17:2a:dd:6e:c2:57:75:bb:43:
4e:8e:1f:1f:c6:ca:07:64:4e:7d:af:d6:d0:d7:de:16:ce:12:
93:3c:e8:42:f2:23:26:5f:f9:61:23:d9:44:41:74:0b:9e:f4:
81:b8:89:18:41:c6:08:7e:9d:1c:a6:46:77:d6:4d:3f:61:05:
0d:2a:89:f8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQgaAW0Kf2UR9O+7yFVGOL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjUwMTAxMDU0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGJhODlkMzczMzM3NzZhNWE1MTI1YTVmM2Q3MDVjMWM3Mzg2YTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hZfgjVrBqiBTpe3FvdQbqPkuepm
Kl5Q1LwufiKJCtbRKxhEeswjWmX0UnSoeJyK5kdXgA83tv6dbQQxDVIgv2gox4I+
1jInbaKqZtH2YVdaCBvODwvdnnz1LkyEpgfy2atttIcfCTsQVXB15ahLL0RkWbkU
dKWF1R3wonl7Kx7F9JTLNmWOdohw1Y208xiI5+vUzStOwoJLHA+P8PGU5YgA2eH4
g9zMj9G3bexswA7E0rumgAGd+07mtLk8wlEQskrWkhcNoU17ULCiTwJmtglHH6du
aaj8R1uW7L81uQXfFWbjZ32NKoo246wQlG17+IrMRbLBHwtxSRg5CD4khQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFLC6idNzM3dqWlElpfPXBcHHOGqHMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvc0xxSjAzTXpkMnBhVVNXbDg5Y0Z3Y2M0YW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLYwKAwQC
LqHYAwQAwTjvAwQBwij2MA0GCSqGSIb3DQEBCwUAA4IBAQBqmiFMMJXwyJ3YGdr5
zVMoq2xi5UFvbDRRv7+1PRES6ajbFwIoDXtqy0Zv09tzp9jivJiyWgrbuWCp+Mxr
NZy/BNOPA3ti8LYH/xzrOIZ7WcBK80UAYidoRIJoYxGE4naF+MqjhE9MNpRHTh2i
Ix7DAYuJj5yZ2EJU8nx7aqu2bs7AmKR30+eFKM+Qi3kiQ7qXN2OC/gY+RKY8B8Y0
CYVVscd4G9G874nhmZxJ+2xlFOS6HO13MRbuIG6VHmAXKt1uwld1u0NOjh8fxsoH
ZE59r9bQ194WzhKTPOhC8iMmX/lhI9lEQXQLnvSBuIkYQcYIfp0cpkZ31k0/YQUN
Kon4
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:16 2025 by rpki-client