Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa
File: AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa (raw, json)
Hash identifier: 0uWxwNIZbut6gct98ZOv80/LRPh9PRZxkpCS9vIEkzY=
Subject key identifier: 02:5B:E9:C2:69:47:2A:C7:59:F3:CF:2F:E8:E5:BD:7B:6A:97:EC:2B
Certificate issuer: /CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Certificate serial: 019427B3CCC7739B34092FDC1917AD9C3258
Authority key identifier: 94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa
Signing time: Thu 02 Jan 2025 15:48:02 +0000
ROA not before: Thu 02 Jan 2025 15:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215639
IP address blocks: 45.10.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:cc:c7:73:9b:34:09:2f:dc:19:17:ad:9c:32:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f519c4ecf15f5fc1e06eaa6e03f9cb03956caa
Validity
Not Before: Jan 2 15:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=025be9c269472ac759f3cf2fe8e5bd7b6a97ec2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:78:c4:06:1b:8c:60:9b:24:5a:1f:27:29:bb:
6e:4b:15:76:73:b7:eb:9b:52:15:16:17:d1:7e:76:
fc:cc:e0:b0:fd:6b:e2:8d:69:20:cf:a9:fc:d0:73:
34:46:47:19:33:04:cb:f5:d0:08:da:e8:b4:77:84:
0e:c6:47:6e:2b:49:90:61:24:36:2a:50:70:9a:03:
65:b4:b8:24:f0:44:be:0a:3e:45:8f:c9:bd:d1:89:
b2:21:b1:cf:63:2a:64:1d:55:e7:84:34:f3:af:d3:
c9:1e:be:f4:23:ae:5c:7e:9d:58:b7:92:95:e2:b3:
cd:91:21:4c:bb:c8:e2:ad:f1:ee:02:3a:f0:04:e2:
50:1c:82:f9:01:34:88:40:73:04:3c:70:8e:15:ba:
e2:ef:b2:fb:bf:c7:af:51:d3:14:6a:22:1a:23:c2:
6d:fd:ab:9d:4c:f5:6e:84:f5:2f:43:b6:55:0f:4f:
59:3e:52:c7:5e:bc:cd:f1:1c:10:b1:d4:62:9c:f8:
f6:7c:c7:68:b2:df:cb:2c:b7:f0:72:aa:a8:20:26:
82:62:02:ec:0e:3b:14:33:0f:56:04:57:7f:1f:38:
72:9a:21:23:0b:ab:81:3b:6e:3e:83:a6:38:46:4c:
68:4f:82:6d:17:0d:2d:bc:ca:4d:41:4e:62:6b:c2:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5B:E9:C2:69:47:2A:C7:59:F3:CF:2F:E8:E5:BD:7B:6A:97:EC:2B
X509v3 Authority Key Identifier:
keyid:94:F5:19:C4:EC:F1:5F:5F:C1:E0:6E:AA:6E:03:F9:CB:03:95:6C:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPUZxOzxX1_B4G6qbgP5ywOVbKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/AlvpwmlHKsdZ888v6OW9e2qX7Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/108967-686a-4322-85b3-516eac469053/1/lPUZxOzxX1_B4G6qbgP5ywOVbKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.36.0/24
Signature Algorithm: sha256WithRSAEncryption
54:39:4e:5d:66:1f:9b:1b:4d:70:53:b5:95:ae:59:a3:ce:aa:
8c:ca:1d:11:7d:9e:ad:93:05:8a:34:ab:9e:84:e6:28:df:88:
1d:f5:c9:78:89:60:b1:ef:c6:ae:b8:d3:03:d4:24:6f:0f:ec:
3a:87:9b:52:fc:8f:ef:61:1d:b0:7a:5e:17:49:85:f4:76:c3:
3a:0f:96:e8:5c:58:54:a2:dc:51:8b:e5:0d:22:cb:dd:7b:dd:
3b:1a:18:1f:11:c1:dd:43:f7:12:7f:d7:89:d5:b6:09:22:d2:
a9:a1:42:04:e1:bd:6d:86:e5:e4:44:19:56:98:8c:f7:39:f2:
1e:8e:f4:3f:82:0f:73:5c:9d:83:ab:fa:83:68:9e:4b:34:37:
dd:5c:4f:e4:ad:60:ff:ca:33:b7:cb:20:94:25:d7:bd:60:89:
dd:1a:a0:f1:52:66:c7:4d:ef:df:95:bc:2e:de:ce:67:0d:dd:
9a:0f:b3:94:cd:09:ed:da:e5:19:03:8c:8a:ed:ac:bd:63:49:
3e:39:ca:73:d2:d3:1d:c4:68:91:6d:11:29:7d:4d:c1:08:a0:
01:66:d6:6b:b8:e5:3d:60:99:a8:45:fe:91:81:c5:b4:1a:44:
55:88:f8:53:6f:0a:03:5b:93:33:15:a4:a9:11:32:57:3f:e5:
50:36:41:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQns8zHc5s0CS/cGRetnDJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZjUxOWM0ZWNmMTVmNWZjMWUwNmVhYTZlMDNmOWNiMDM5
NTZjYWEwHhcNMjUwMTAyMTU0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjViZTljMjY5NDcyYWM3NTlmM2NmMmZlOGU1YmQ3YjZhOTdlYzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXjEBhuMYJskWh8nKbtuSxV2c7fr
m1IVFhfRfnb8zOCw/WvijWkgz6n80HM0RkcZMwTL9dAI2ui0d4QOxkduK0mQYSQ2
KlBwmgNltLgk8ES+Cj5Fj8m90YmyIbHPYypkHVXnhDTzr9PJHr70I65cfp1Yt5KV
4rPNkSFMu8jirfHuAjrwBOJQHIL5ATSIQHMEPHCOFbri77L7v8evUdMUaiIaI8Jt
/audTPVuhPUvQ7ZVD09ZPlLHXrzN8RwQsdRinPj2fMdost/LLLfwcqqoICaCYgLs
DjsUMw9WBFd/HzhymiEjC6uBO24+g6Y4RkxoT4JtFw0tvMpNQU5ia8JNRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJb6cJpRyrHWfPPL+jlvXtql+wrMB8GA1UdIwQY
MBaAFJT1GcTs8V9fweBuqm4D+csDlWyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMt
NTE2ZWFjNDY5MDUzLzEvQWx2cHdtbEhLc2RaODg4djZPVzllMnFYN0NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xMDg5NjctNjg2YS00MzIyLTg1YjMtNTE2ZWFjNDY5MDUz
LzEvbFBVWnhPenhYMV9CNEc2cWJnUDV5d09WYktvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQokMA0G
CSqGSIb3DQEBCwUAA4IBAQBUOU5dZh+bG01wU7WVrlmjzqqMyh0RfZ6tkwWKNKue
hOYo34gd9cl4iWCx78auuNMD1CRvD+w6h5tS/I/vYR2wel4XSYX0dsM6D5boXFhU
otxRi+UNIsvde907GhgfEcHdQ/cSf9eJ1bYJItKpoUIE4b1thuXkRBlWmIz3OfIe
jvQ/gg9zXJ2Dq/qDaJ5LNDfdXE/krWD/yjO3yyCUJde9YIndGqDxUmbHTe/flbwu
3s5nDd2aD7OUzQnt2uUZA4yK7ay9Y0k+Ocpz0tMdxGiRbREpfU3BCKABZtZruOU9
YJmoRf6RgcW0GkRViPhTbwoDW5MzFaSpETJXP+VQNkFu
-----END CERTIFICATE-----
Generated at Sun Apr 20 15:32:29 2025 by rpki-client