Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/MislJHlqU0eYjYBt2FORaNmzFjY.roa
File: MislJHlqU0eYjYBt2FORaNmzFjY.roa (raw, json)
Hash identifier: /P8Liaz7LR4zjwolZ8UmcKWBgh+ewRXiE93//wJ0CXU=
Subject key identifier: 32:2B:25:24:79:6A:53:47:98:8D:80:6D:D8:53:91:68:D9:B3:16:36
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0194274894DC90B2CED5C267C7AC428A865C
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/MislJHlqU0eYjYBt2FORaNmzFjY.roa
Signing time: Thu 02 Jan 2025 13:50:55 +0000
ROA not before: Thu 02 Jan 2025 13:50:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199306
IP address blocks: 45.151.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:94:dc:90:b2:ce:d5:c2:67:c7:ac:42:8a:86:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=322b2524796a5347988d806dd8539168d9b31636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:6e:01:97:b0:1d:f8:d4:36:da:18:5f:ba:
b6:a1:57:8c:13:ed:da:f0:34:16:a1:90:ec:6c:72:
06:06:30:16:ca:4d:a1:e3:1b:71:2f:14:31:1f:d9:
73:a3:26:ea:18:08:7c:20:b2:c4:28:b4:9a:81:78:
42:19:c2:1f:3e:26:e6:77:df:aa:b5:af:62:e7:2c:
ff:b4:7a:4b:aa:8c:a7:11:53:d6:d1:5d:4d:25:10:
9d:f4:72:66:8a:32:e3:ca:46:1a:92:20:99:a5:ff:
38:d0:a0:0b:bb:f6:f8:3b:3e:b3:59:bf:6c:10:35:
47:a5:c5:77:4e:db:ac:18:c3:5a:71:cf:4f:19:58:
d4:1c:89:e5:4c:ca:13:8b:5b:78:51:19:84:af:4f:
6f:72:b9:ff:d2:6d:a3:22:c1:21:b6:29:75:4d:cd:
92:71:7b:45:52:8f:1a:24:89:69:62:91:98:0c:9a:
5b:a5:27:36:05:56:a6:6f:94:37:2e:2a:74:8e:50:
16:fc:60:ab:5b:80:a7:b2:8c:d8:49:88:b8:2c:c3:
a8:9c:89:7a:93:e4:68:b2:30:4e:b3:9a:73:70:77:
13:19:93:9c:31:39:2b:10:4e:42:41:05:96:b0:3f:
c6:71:4b:23:8d:28:bb:cd:a1:21:04:c2:49:7b:e6:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2B:25:24:79:6A:53:47:98:8D:80:6D:D8:53:91:68:D9:B3:16:36
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/MislJHlqU0eYjYBt2FORaNmzFjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.57.0/24
Signature Algorithm: sha256WithRSAEncryption
81:f1:9b:c8:68:77:b1:23:01:fc:51:31:d0:dc:ea:d1:00:8e:
c8:63:d2:98:4e:06:a2:8c:4c:dd:06:07:a3:ca:eb:76:73:ed:
61:7e:15:ff:a5:98:0d:8f:ad:12:5d:3f:c7:37:0b:28:1d:2d:
e8:a8:89:b0:3f:bb:94:da:57:d4:1e:36:13:f3:73:f5:15:98:
58:d6:bf:52:2e:f1:a6:5d:a7:8a:d6:da:f6:0e:8f:f8:b5:55:
55:24:b5:54:b9:e0:d9:80:d7:11:d0:81:b2:ba:03:2e:f9:43:
80:f4:5a:fc:17:ee:c1:13:11:1b:b7:8f:41:05:74:93:06:ef:
d0:43:8f:db:37:67:6c:6f:f5:be:8d:d7:fa:58:55:c1:b4:18:
c6:2b:67:30:bb:24:e0:2c:9d:64:02:44:a4:3c:11:af:b5:e6:
e0:a7:14:e8:5a:9e:5a:f9:3e:cf:bc:df:6b:f7:98:1b:bb:6c:
c1:14:94:85:67:59:9c:c0:5f:7b:cc:e1:e9:a5:d8:39:89:c8:
ee:be:1b:42:11:90:34:fe:e7:56:49:83:67:9c:52:6e:da:49:
92:12:82:1f:76:43:37:65:1c:11:94:8a:fa:2d:04:56:a3:ab:
fc:c8:04:7f:5e:6e:b7:43:c7:62:ae:a5:a5:49:3c:d8:e7:20:
57:49:95:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSJTckLLO1cJnx6xCioZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjUwMTAyMTM1MDU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjJiMjUyNDc5NmE1MzQ3OTg4ZDgwNmRkODUzOTE2OGQ5YjMxNjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMpuAZewHfjUNtoYX7q2oVeME+3a
8DQWoZDsbHIGBjAWyk2h4xtxLxQxH9lzoybqGAh8ILLEKLSagXhCGcIfPibmd9+q
ta9i5yz/tHpLqoynEVPW0V1NJRCd9HJmijLjykYakiCZpf840KALu/b4Oz6zWb9s
EDVHpcV3TtusGMNacc9PGVjUHInlTMoTi1t4URmEr09vcrn/0m2jIsEhtil1Tc2S
cXtFUo8aJIlpYpGYDJpbpSc2BVamb5Q3Lip0jlAW/GCrW4CnsozYSYi4LMOonIl6
k+RosjBOs5pzcHcTGZOcMTkrEE5CQQWWsD/GcUsjjSi7zaEhBMJJe+btkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDIrJSR5alNHmI2AbdhTkWjZsxY2MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvTWlzbEpIbHFVMGVZallCdDJGT1JhTm16RmpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZc5MA0G
CSqGSIb3DQEBCwUAA4IBAQCB8ZvIaHexIwH8UTHQ3OrRAI7IY9KYTgaijEzdBgej
yut2c+1hfhX/pZgNj60SXT/HNwsoHS3oqImwP7uU2lfUHjYT83P1FZhY1r9SLvGm
XaeK1tr2Do/4tVVVJLVUueDZgNcR0IGyugMu+UOA9Fr8F+7BExEbt49BBXSTBu/Q
Q4/bN2dsb/W+jdf6WFXBtBjGK2cwuyTgLJ1kAkSkPBGvtebgpxToWp5a+T7PvN9r
95gbu2zBFJSFZ1mcwF97zOHppdg5icjuvhtCEZA0/udWSYNnnFJu2kmSEoIfdkM3
ZRwRlIr6LQRWo6v8yAR/Xm63Q8dirqWlSTzY5yBXSZU4
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:47 2025 by rpki-client