Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AlBQEwuuE4CtRW_maks6ect7Smw.roa
File: AlBQEwuuE4CtRW_maks6ect7Smw.roa (raw, json)
Hash identifier: 0CRkpx9lOaXBp1k66vfK2tGnahFk2mqduq/vfT0K3bg=
Subject key identifier: 02:50:50:13:0B:AE:13:80:AD:45:6F:E6:6A:4B:3A:79:CB:7B:4A:6C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019527B141D5C7A14CC301995B1872B03820
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AlBQEwuuE4CtRW_maks6ect7Smw.roa
Signing time: Fri 21 Feb 2025 08:48:03 +0000
ROA not before: Fri 21 Feb 2025 08:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207713
IP address blocks: 147.45.48.0/24 maxlen: 24
147.45.118.0/24 maxlen: 24
147.45.119.0/24 maxlen: 24
193.233.18.0/24 maxlen: 24
193.233.48.0/24 maxlen: 24
193.233.49.0/24 maxlen: 24
193.233.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:b1:41:d5:c7:a1:4c:c3:01:99:5b:18:72:b0:38:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 21 08:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=025050130bae1380ad456fe66a4b3a79cb7b4a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:a7:1c:27:39:18:de:1d:72:a1:b1:b3:b3:
65:ff:13:e9:ce:12:8d:e5:12:9a:78:df:66:aa:a3:
ae:01:ce:ae:0b:1f:63:ea:dd:9e:47:69:2b:ee:ed:
a7:ca:12:0b:93:7f:c4:5d:5b:b4:87:d3:6b:f0:f8:
5e:ea:40:0c:3e:55:78:d9:d5:01:a7:0f:63:1d:e9:
27:a7:23:90:4b:dd:db:d8:65:0c:be:82:f5:3b:c7:
91:25:bb:c3:ef:ee:78:f5:cf:69:4b:4b:b6:2a:44:
90:d6:e9:04:30:e9:49:13:4d:d4:3d:8a:b4:0b:9d:
51:51:dc:16:d0:d4:c6:67:d0:77:0b:db:fc:d1:0a:
1c:b9:4b:08:26:57:7c:48:75:c7:fe:69:a2:e3:c7:
90:6c:d5:1d:00:31:48:50:8f:6f:42:4a:de:3b:4b:
df:11:d4:8c:06:cd:e6:04:8e:5d:fd:e3:48:49:ae:
7b:0e:98:21:f2:b4:81:b0:7a:b5:1a:55:e2:7a:e3:
3a:f1:62:c7:e9:27:66:51:aa:8e:19:55:c1:fd:33:
32:bc:67:9c:24:d7:b9:cb:f4:4a:3f:57:69:ce:40:
b8:f8:4b:61:2c:ae:9a:39:5d:14:23:77:6f:d9:17:
83:eb:b1:cc:d5:46:65:9c:68:81:53:f0:dd:01:ae:
74:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:50:13:0B:AE:13:80:AD:45:6F:E6:6A:4B:3A:79:CB:7B:4A:6C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/AlBQEwuuE4CtRW_maks6ect7Smw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.48.0/24
147.45.118.0/23
193.233.18.0/24
193.233.48.0/23
193.233.84.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c8:5a:73:1f:52:6d:44:13:ca:4b:4b:05:2b:46:f6:71:2b:
be:39:c1:37:dd:e3:9f:52:3d:bc:c8:e8:19:2a:82:00:df:9c:
2e:1d:51:4a:1e:b7:12:ed:19:22:e7:09:89:5e:8e:7f:bb:0e:
90:9f:e0:ee:18:94:cd:18:91:64:e6:e9:34:9e:4d:55:6d:b7:
4d:af:b1:e8:c7:73:3f:45:e3:b7:3c:cb:b7:a6:a0:1d:18:65:
17:67:d4:c6:41:f5:2a:f1:32:74:6b:41:b3:c3:43:97:b6:d6:
7c:76:a5:86:92:b3:48:ce:4d:a1:cd:55:1d:a6:a9:ca:1a:5d:
6a:40:a8:65:8e:f0:c7:cf:e6:25:30:cc:9a:cb:a8:30:04:51:
a6:e9:9a:b3:58:66:d7:eb:61:b4:02:9f:fa:92:ac:a3:84:47:
51:0f:2d:76:23:da:0e:33:2e:17:16:26:03:23:f8:24:e1:14:
3d:9e:46:1d:7a:3e:a9:5d:fe:9e:b5:f8:ea:30:eb:f1:fb:c0:
85:fc:53:ae:2b:38:2f:07:51:69:0e:1a:25:3b:12:b6:70:31:
53:4d:32:2f:48:17:26:02:bf:69:3e:fa:d3:14:1c:f2:3d:ab:
7c:5a:b7:77:c1:e5:c3:d7:e3:7e:5f:2d:b6:ba:28:01:8a:bf:
67:bb:ab:c9
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZUnsUHVx6FMwwGZWxhysDggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMjIxMDg0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjUwNTAxMzBiYWUxMzgwYWQ0NTZmZTY2YTRiM2E3OWNiN2I0YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26GnHCc5GN4dcqGxs7Nl/xPpzhKN
5RKaeN9mqqOuAc6uCx9j6t2eR2kr7u2nyhILk3/EXVu0h9Nr8Phe6kAMPlV42dUB
pw9jHeknpyOQS93b2GUMvoL1O8eRJbvD7+549c9pS0u2KkSQ1ukEMOlJE03UPYq0
C51RUdwW0NTGZ9B3C9v80QocuUsIJld8SHXH/mmi48eQbNUdADFIUI9vQkreO0vf
EdSMBs3mBI5d/eNISa57Dpgh8rSBsHq1GlXieuM68WLH6SdmUaqOGVXB/TMyvGec
JNe5y/RKP1dpzkC4+EthLK6aOV0UI3dv2ReD67HM1UZlnGiBU/DdAa50dQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAJQUBMLrhOArUVv5mpLOnnLe0psMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvQWxCUUV3dXVFNEN0UldfbWFrczZlY3Q3U213LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAky0wAwQB
ky12AwQAwekSAwQBwekwAwQAwelUMA0GCSqGSIb3DQEBCwUAA4IBAQBJyFpzH1Jt
RBPKS0sFK0b2cSu+OcE33eOfUj28yOgZKoIA35wuHVFKHrcS7Rki5wmJXo5/uw6Q
n+DuGJTNGJFk5uk0nk1VbbdNr7Hox3M/ReO3PMu3pqAdGGUXZ9TGQfUq8TJ0a0Gz
w0OXttZ8dqWGkrNIzk2hzVUdpqnKGl1qQKhljvDHz+YlMMyay6gwBFGm6ZqzWGbX
62G0Ap/6kqyjhEdRDy12I9oOMy4XFiYDI/gk4RQ9nkYdej6pXf6etfjqMOvx+8CF
/FOuKzgvB1FpDholOxK2cDFTTTIvSBcmAr9pPvrTFBzyPat8Wrd3weXD1+N+Xy22
uigBir9nu6vJ
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:19 2025 by rpki-client