Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/I0tEsHEaSYIGsOITCVP8O8A9EGc.roa
File: I0tEsHEaSYIGsOITCVP8O8A9EGc.roa (raw, json)
Hash identifier: p+VrMCFUSvQu54AVZi+bulw3hCssQs4D3No74IFUxPQ=
Subject key identifier: 23:4B:44:B0:71:1A:49:82:06:B0:E2:13:09:53:FC:3B:C0:3D:10:67
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01942CD4ECEE2E51CFB05B8BE26F8BF58C2B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/I0tEsHEaSYIGsOITCVP8O8A9EGc.roa
Signing time: Fri 03 Jan 2025 15:42:19 +0000
ROA not before: Fri 03 Jan 2025 15:42:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213799
IP address blocks: 45.151.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:d4:ec:ee:2e:51:cf:b0:5b:8b:e2:6f:8b:f5:8c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 3 15:42:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=234b44b0711a498206b0e2130953fc3bc03d1067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:47:d9:7c:5f:07:d3:92:c9:20:6e:28:83:f1:
6a:2b:80:59:4c:a8:25:4f:c3:11:c9:fa:62:62:23:
83:d4:49:38:9c:e0:f0:ee:a0:b1:64:81:ed:d5:66:
59:16:21:c2:8d:09:96:58:40:fe:57:69:02:dc:f1:
d9:47:1f:32:00:63:07:d5:c3:86:6a:75:0b:ba:31:
89:cb:fd:be:67:2b:72:ee:a4:ce:20:96:ec:46:19:
bd:96:97:a1:33:71:4f:9e:b5:76:5b:5d:0f:2c:c8:
ba:d5:7b:76:06:b9:c7:0e:0f:dd:40:33:0a:6d:ff:
49:82:08:f1:00:16:06:98:39:76:54:33:7e:f3:fb:
d0:b7:cb:38:dd:b9:f4:5c:29:38:51:0c:1b:a8:ca:
64:be:c6:c8:b1:f3:4d:75:cb:fd:29:7f:c3:d3:77:
2f:03:9f:98:63:f9:54:29:ba:84:74:a5:98:94:19:
d7:51:d7:20:63:53:4f:7c:c8:f9:e2:93:9d:df:7b:
42:74:ba:df:b1:ed:16:1a:bb:bf:b4:1d:4e:44:44:
38:6a:1d:24:fa:7c:77:f4:4d:69:76:7e:2e:d6:8b:
11:8f:af:11:3d:2b:3f:05:44:b5:9c:68:a1:83:09:
0c:6e:1b:d1:bb:e3:96:11:9e:dc:b3:48:b6:cb:09:
21:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4B:44:B0:71:1A:49:82:06:B0:E2:13:09:53:FC:3B:C0:3D:10:67
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/I0tEsHEaSYIGsOITCVP8O8A9EGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:24:e1:86:e8:72:c1:da:31:aa:4f:48:35:76:ad:47:b9:23:
d6:08:79:9f:04:29:d1:3d:c0:a1:1f:c9:91:c8:4b:66:ad:b9:
c0:af:ce:f3:5f:ba:90:a8:91:86:72:64:1d:28:21:ad:48:70:
49:dc:dc:b2:b4:82:7f:2f:7c:2e:82:74:d9:d1:ec:81:d6:cc:
4f:d9:7f:fa:82:4b:8a:40:d4:4e:2d:79:4b:9e:0c:f8:c2:53:
b6:62:83:29:1b:ab:32:86:62:7f:c1:b8:39:5e:ec:dd:8f:8d:
68:a0:ef:7e:fc:a2:1a:bb:1d:c2:48:b0:b7:24:e7:43:4a:cf:
ab:a0:3a:14:38:4f:7f:b7:ed:6c:06:42:5f:30:6f:c3:8e:32:
51:81:f9:38:fb:f3:aa:37:8f:c7:6e:bb:18:e7:bc:ba:c4:13:
06:38:2c:06:35:24:47:5b:b2:86:77:c9:1c:3d:d3:57:ec:4b:
91:0a:5d:d2:47:da:db:53:23:94:1d:ad:63:e6:ec:74:08:6e:
9f:65:ba:7d:b3:2d:3d:b4:d0:1e:44:da:8a:8f:c7:73:91:68:
4d:91:74:54:9a:98:02:a2:64:98:26:b1:bf:19:28:eb:41:ae:
82:82:de:fb:7e:3c:06:19:7f:1b:cf:53:19:2c:10:ca:cc:2f:
77:75:36:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQs1OzuLlHPsFuL4m+L9YwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwMTAzMTU0MjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzRiNDRiMDcxMWE0OTgyMDZiMGUyMTMwOTUzZmMzYmMwM2QxMDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkfZfF8H05LJIG4og/FqK4BZTKgl
T8MRyfpiYiOD1Ek4nODw7qCxZIHt1WZZFiHCjQmWWED+V2kC3PHZRx8yAGMH1cOG
anULujGJy/2+Zyty7qTOIJbsRhm9lpehM3FPnrV2W10PLMi61Xt2BrnHDg/dQDMK
bf9JggjxABYGmDl2VDN+8/vQt8s43bn0XCk4UQwbqMpkvsbIsfNNdcv9KX/D03cv
A5+YY/lUKbqEdKWYlBnXUdcgY1NPfMj54pOd33tCdLrfse0WGru/tB1OREQ4ah0k
+nx39E1pdn4u1osRj68RPSs/BUS1nGihgwkMbhvRu+OWEZ7cs0i2ywkh/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCNLRLBxGkmCBrDiEwlT/DvAPRBnMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvSTB0RXNIRWFTWUlHc09JVENWUDhPOEE5RUdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZcDMA0G
CSqGSIb3DQEBCwUAA4IBAQCbJOGG6HLB2jGqT0g1dq1HuSPWCHmfBCnRPcChH8mR
yEtmrbnAr87zX7qQqJGGcmQdKCGtSHBJ3NyytIJ/L3wugnTZ0eyB1sxP2X/6gkuK
QNROLXlLngz4wlO2YoMpG6syhmJ/wbg5Xuzdj41ooO9+/KIaux3CSLC3JOdDSs+r
oDoUOE9/t+1sBkJfMG/DjjJRgfk4+/OqN4/HbrsY57y6xBMGOCwGNSRHW7KGd8kc
PdNX7EuRCl3SR9rbUyOUHa1j5ux0CG6fZbp9sy09tNAeRNqKj8dzkWhNkXRUmpgC
omSYJrG/GSjrQa6Cgt77fjwGGX8bz1MZLBDKzC93dTZ6
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:51:58 2025 by rpki-client