Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7BTmCdCWrFXkLZBzDm2zlzExnUs.roa
File: 7BTmCdCWrFXkLZBzDm2zlzExnUs.roa (raw, json)
Hash identifier: +7FoqDPdKITGcRotbtd223VtOCiGoD8qee6qCLH71Ek=
Subject key identifier: EC:14:E6:09:D0:96:AC:55:E4:2D:90:73:0E:6D:B3:97:31:31:9D:4B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01942748847B052496A9E7AC127DF4A8261E
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7BTmCdCWrFXkLZBzDm2zlzExnUs.roa
Signing time: Thu 02 Jan 2025 13:50:51 +0000
ROA not before: Thu 02 Jan 2025 13:50:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 45.10.20.0/24 maxlen: 24
45.80.192.0/24 maxlen: 24
45.91.249.0/24 maxlen: 24
45.134.37.0/24 maxlen: 24
45.134.38.0/24 maxlen: 24
45.135.150.0/24 maxlen: 24
45.147.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:84:7b:05:24:96:a9:e7:ac:12:7d:f4:a8:26:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec14e609d096ac55e42d90730e6db39731319d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:52:f8:eb:41:0b:e1:b5:3f:53:74:fb:1d:
6b:87:ad:41:d4:c1:10:14:12:3b:ec:a6:ad:71:4b:
75:7a:89:6f:c3:9d:98:f1:5e:e1:ad:df:a0:c6:3e:
4e:db:66:0f:c8:a5:09:e3:53:25:26:7d:0f:c9:79:
91:ef:93:0d:c1:51:3c:82:a3:00:1c:e1:6b:7c:23:
4d:f7:b0:05:05:00:3d:b5:97:e2:15:22:ad:06:44:
98:36:cb:73:d7:fd:11:34:db:d2:d2:5b:ee:79:97:
0f:ad:ae:4e:41:b7:6f:92:0c:f3:b9:94:03:c4:ae:
3f:58:7f:32:93:93:4f:77:44:c6:95:13:35:de:63:
8a:b6:14:8c:9a:f5:da:b4:88:4d:3b:ab:5c:45:be:
ab:cb:32:f2:95:f1:b4:74:56:8f:ef:8c:6c:2c:0e:
ef:d5:c0:a2:7d:82:ff:10:5d:70:db:c3:6a:39:4b:
ea:4a:e5:78:1c:15:c5:78:d2:3b:f2:40:6e:2a:59:
20:dc:5b:9d:04:ef:65:d4:8f:5d:4a:28:e1:2a:e7:
3d:e1:a1:05:64:81:33:3f:32:66:29:f5:5f:4b:72:
79:e0:cc:98:3e:6b:7c:bf:af:03:6a:d7:44:72:ee:
0f:25:1c:ab:da:4d:ca:f4:d5:b4:d4:66:0d:66:b8:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:14:E6:09:D0:96:AC:55:E4:2D:90:73:0E:6D:B3:97:31:31:9D:4B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7BTmCdCWrFXkLZBzDm2zlzExnUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.20.0/24
45.80.192.0/24
45.91.249.0/24
45.134.37.0-45.134.38.255
45.135.150.0/24
45.147.4.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ab:9a:5a:92:06:fc:3a:ed:60:3a:4f:49:db:fe:4e:c0:94:
ff:95:a8:4d:7a:80:58:e1:7e:06:84:2b:99:b8:f2:ed:b6:e7:
56:01:4d:bc:98:74:cc:22:00:53:f0:00:5b:54:21:05:94:98:
8b:ed:c0:74:1b:a9:df:51:99:8e:6d:29:80:f9:35:32:0a:2f:
9f:a7:d2:23:4c:31:66:7c:9e:7e:9f:ee:3a:15:75:5b:6d:e8:
17:f6:4a:c5:7f:60:6c:27:fb:94:d1:08:c2:04:08:a5:13:02:
08:2f:6b:e2:c3:e9:f8:ae:8f:c8:37:4a:59:e9:76:0a:d9:e7:
c5:18:4b:0a:39:67:80:cd:5e:bb:66:0f:63:d4:56:07:1a:e8:
6f:dd:41:5f:39:02:9a:29:6f:b5:32:4f:82:d1:a1:44:b7:c9:
f5:99:94:4e:bd:80:d8:61:e0:54:d2:6e:e9:60:b8:88:79:e5:
0c:dc:24:15:4f:7c:bc:7c:bb:65:e0:99:8a:46:04:e6:67:8e:
04:28:81:33:77:3d:c2:3f:b0:5f:d8:bd:2a:7d:98:83:41:2a:
29:18:89:f7:d4:ce:53:6d:81:c8:51:55:6d:e1:d0:3d:d6:86:
16:5f:97:6e:8c:7f:fa:e1:35:ae:e2:15:29:08:ca:ad:b1:d4:
8d:b2:f7:81
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZQnSIR7BSSWqeesEn30qCYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTAyMTM1MDUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzE0ZTYwOWQwOTZhYzU1ZTQyZDkwNzMwZTZkYjM5NzMxMzE5ZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdFS+OtBC+G1P1N0+x1rh61B1MEQ
FBI77KatcUt1eolvw52Y8V7hrd+gxj5O22YPyKUJ41MlJn0PyXmR75MNwVE8gqMA
HOFrfCNN97AFBQA9tZfiFSKtBkSYNstz1/0RNNvS0lvueZcPra5OQbdvkgzzuZQD
xK4/WH8yk5NPd0TGlRM13mOKthSMmvXatIhNO6tcRb6ryzLylfG0dFaP74xsLA7v
1cCifYL/EF1w28NqOUvqSuV4HBXFeNI78kBuKlkg3FudBO9l1I9dSijhKuc94aEF
ZIEzPzJmKfVfS3J54MyYPmt8v68DatdEcu4PJRyr2k3K9NW01GYNZrgs6wIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFOwU5gnQlqxV5C2Qcw5ts5cxMZ1LMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvN0JUbUNkQ1dyRlhrTFpCekRtMnpsekV4blVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQALQoUAwQA
LVDAAwQALVv5MAwDBAAthiUDBAAthiYDBAAth5YDBAAtkwQwDQYJKoZIhvcNAQEL
BQADggEBAICrmlqSBvw67WA6T0nb/k7AlP+VqE16gFjhfgaEK5m48u2251YBTbyY
dMwiAFPwAFtUIQWUmIvtwHQbqd9RmY5tKYD5NTIKL5+n0iNMMWZ8nn6f7joVdVtt
6Bf2SsV/YGwn+5TRCMIECKUTAggva+LD6fiuj8g3SlnpdgrZ58UYSwo5Z4DNXrtm
D2PUVgca6G/dQV85Apopb7UyT4LRoUS3yfWZlE69gNhh4FTSbulguIh55QzcJBVP
fLx8u2XgmYpGBOZnjgQogTN3PcI/sF/YvSp9mINBKikYiffUzlNtgchRVW3h0D3W
hhZfl26Mf/rhNa7iFSkIyq2x1I2y94E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:14:09 2025 by rpki-client