Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UQFp8TYXc5f6umFr2QLcHtAPQyw.roa
File: UQFp8TYXc5f6umFr2QLcHtAPQyw.roa (raw, json)
Hash identifier: KZrsB0IH2zlTQukJpMNDLafRlpBgRcOdSQTGnfAoPuQ=
Subject key identifier: 51:01:69:F1:36:17:73:97:FA:BA:61:6B:D9:02:DC:1E:D0:0F:43:2C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019546223A0568240D4151D56CDBD902D892
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UQFp8TYXc5f6umFr2QLcHtAPQyw.roa
Signing time: Thu 27 Feb 2025 06:40:02 +0000
ROA not before: Thu 27 Feb 2025 06:40:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43581
IP address blocks: 147.45.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:22:3a:05:68:24:0d:41:51:d5:6c:db:d9:02:d8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 27 06:40:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=510169f136177397faba616bd902dc1ed00f432c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:19:3b:82:a0:8b:4c:e2:2a:48:3d:80:f6:1f:
6c:62:e0:bd:f0:b2:30:68:63:c4:5e:74:57:87:0c:
8b:45:76:e4:f6:7a:af:9c:97:ac:c4:fb:9d:ce:dc:
cb:96:69:23:92:4d:20:6e:53:57:14:f1:c1:ca:c2:
fa:3e:3d:d8:8e:c9:6a:f7:71:57:23:70:ca:e7:1a:
c5:42:3f:bf:b7:d7:0a:59:da:1b:56:c2:00:6f:a5:
6e:d3:56:ae:eb:70:37:c4:c6:0e:4d:a5:76:44:eb:
b0:0f:cb:75:80:b4:a7:ff:26:b0:35:6b:71:92:4e:
87:42:f0:e9:5e:c4:c8:a7:3f:2a:d2:c9:35:96:ee:
4c:15:ef:97:9b:72:71:8c:2d:ab:46:b6:51:28:40:
ab:3b:89:3e:12:b5:03:e7:42:ef:42:fb:67:13:4c:
0e:d4:50:13:0e:43:5d:6c:d7:23:fe:0a:09:49:84:
be:3a:13:56:48:72:6d:f3:a6:07:c3:ee:38:5b:e3:
5f:bf:1b:ec:4f:22:35:56:b7:47:a2:02:53:17:06:
eb:b4:36:10:c8:62:c3:c6:36:d4:4d:ba:6f:a9:b7:
f6:b1:c2:6d:a9:21:ac:cb:cd:09:26:6b:80:72:48:
b9:97:aa:2a:a8:b6:17:44:51:96:c0:c0:af:56:ef:
f3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:01:69:F1:36:17:73:97:FA:BA:61:6B:D9:02:DC:1E:D0:0F:43:2C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UQFp8TYXc5f6umFr2QLcHtAPQyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.117.0/24
Signature Algorithm: sha256WithRSAEncryption
98:20:68:72:5c:ed:bd:18:4a:67:70:34:c3:eb:32:85:26:6a:
64:ec:a2:06:1c:f4:39:24:b6:81:3f:47:62:ec:b7:9e:76:83:
3d:8f:03:0f:47:cf:48:23:94:c0:4f:a5:c6:45:6f:a9:4f:7c:
72:4f:79:02:da:ee:78:4d:c3:c2:82:cf:5d:08:76:7a:9b:74:
fd:dc:d6:55:5b:cb:de:e8:d8:2f:32:3e:cb:5c:e3:7f:52:0e:
44:67:15:1e:35:fc:23:7d:6a:57:f1:77:87:37:93:d5:dd:bf:
cf:66:97:18:44:b3:c1:76:c4:a2:5b:0f:0f:50:52:a0:1b:57:
4f:54:f5:b1:44:a6:7d:e4:11:70:7a:6e:9c:63:ad:84:b6:db:
f4:69:fe:3f:5b:2d:c6:7f:9e:a3:fb:bf:b9:db:46:53:30:07:
a5:2e:42:3e:ec:ae:54:bd:56:71:6a:f0:89:35:6d:a7:c1:ab:
23:48:ea:86:8a:4a:44:0e:76:7b:3b:45:73:15:70:06:47:bc:
53:c0:1c:cb:bc:26:b4:22:93:9a:17:49:9e:ac:e2:c9:5e:a2:
22:fe:02:7b:52:5a:ea:d0:cb:e4:17:66:6b:1f:c6:be:62:f7:
ee:40:9e:a3:95:b0:20:bb:e5:de:c4:15:94:99:6c:af:94:a4:
73:7d:5b:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVGIjoFaCQNQVHVbNvZAtiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjUwMjI3MDY0MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTAxNjlmMTM2MTc3Mzk3ZmFiYTYxNmJkOTAyZGMxZWQwMGY0MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphk7gqCLTOIqSD2A9h9sYuC98LIw
aGPEXnRXhwyLRXbk9nqvnJesxPudztzLlmkjkk0gblNXFPHBysL6Pj3Yjslq93FX
I3DK5xrFQj+/t9cKWdobVsIAb6Vu01au63A3xMYOTaV2ROuwD8t1gLSn/yawNWtx
kk6HQvDpXsTIpz8q0sk1lu5MFe+Xm3JxjC2rRrZRKECrO4k+ErUD50LvQvtnE0wO
1FATDkNdbNcj/goJSYS+OhNWSHJt86YHw+44W+NfvxvsTyI1VrdHogJTFwbrtDYQ
yGLDxjbUTbpvqbf2scJtqSGsy80JJmuAcki5l6oqqLYXRFGWwMCvVu/zxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFEBafE2F3OX+rpha9kC3B7QD0MsMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvVVFGcDhUWVhjNWY2dW1GcjJRTGNIdEFQUXl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky11MA0G
CSqGSIb3DQEBCwUAA4IBAQCYIGhyXO29GEpncDTD6zKFJmpk7KIGHPQ5JLaBP0di
7LeedoM9jwMPR89II5TAT6XGRW+pT3xyT3kC2u54TcPCgs9dCHZ6m3T93NZVW8ve
6NgvMj7LXON/Ug5EZxUeNfwjfWpX8XeHN5PV3b/PZpcYRLPBdsSiWw8PUFKgG1dP
VPWxRKZ95BFwem6cY62Ettv0af4/Wy3Gf56j+7+520ZTMAelLkI+7K5UvVZxavCJ
NW2nwasjSOqGikpEDnZ7O0VzFXAGR7xTwBzLvCa0IpOaF0merOLJXqIi/gJ7Ulrq
0MvkF2ZrH8a+YvfuQJ6jlbAgu+XexBWUmWyvlKRzfVtG
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:29:19 2025 by rpki-client