Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fJqWvzVHBXHAJcQ3IG3g9sggzn0.roa
File: fJqWvzVHBXHAJcQ3IG3g9sggzn0.roa (raw, json)
Hash identifier: zuG5gAbhgI1YXyNr8S5VVlXycb19xy6Hl9w2Q38bUY4=
Subject key identifier: 7C:9A:96:BF:35:47:05:71:C0:25:C4:37:20:6D:E0:F6:C8:20:CE:7D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBC2BA5EA6C7EAFFE9EDBACE284729
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fJqWvzVHBXHAJcQ3IG3g9sggzn0.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212669
IP address blocks: 45.81.114.0/24 maxlen: 24
45.138.181.0/24 maxlen: 24
45.151.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c2:ba:5e:a6:c7:ea:ff:e9:ed:ba:ce:28:47:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c9a96bf35470571c025c437206de0f6c820ce7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:0e:ba:5d:23:71:b2:54:fc:b5:a5:0a:d7:
90:0a:64:de:dc:50:4b:fa:4c:84:23:34:a0:2a:43:
bd:d4:6c:5c:f3:1f:c1:7a:e2:02:99:0c:10:ab:83:
c1:78:18:91:a9:ad:86:65:84:7f:29:9b:2e:4e:4b:
49:58:46:d0:0c:5d:8f:eb:00:3c:09:cd:84:f1:eb:
fb:33:1a:8c:00:51:02:ea:81:23:a6:00:ec:22:c2:
86:44:7c:5c:bb:f3:5a:9c:e6:cf:65:12:0a:01:4b:
7f:ce:a8:6f:3f:06:c2:6b:45:7a:21:0e:2e:b5:78:
82:2d:4e:e4:c4:c7:f2:aa:9c:1e:d7:e6:9d:0e:a4:
d4:8e:2f:81:e9:fb:34:06:3d:50:7d:7f:95:ca:22:
08:90:57:1f:28:47:58:2b:67:e9:f0:ad:4d:75:d5:
78:9c:3d:4f:08:3e:8c:f1:d3:8c:d5:a8:12:06:b9:
88:04:a5:32:f4:89:8d:fd:0b:46:68:af:64:72:e4:
3c:ef:44:0d:1a:05:36:4a:60:70:b9:0c:e0:3f:32:
a2:20:aa:5e:ea:db:0a:e6:a0:8e:2b:ec:63:40:aa:
6d:00:96:d4:1e:a3:4c:7c:18:51:5c:c0:68:3e:18:
a5:ab:43:5b:6b:d9:d9:1d:56:63:54:14:ae:08:80:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9A:96:BF:35:47:05:71:C0:25:C4:37:20:6D:E0:F6:C8:20:CE:7D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fJqWvzVHBXHAJcQ3IG3g9sggzn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.114.0/24
45.138.181.0/24
45.151.0.0/24
Signature Algorithm: sha256WithRSAEncryption
15:dd:9d:ab:70:76:a2:c0:39:b9:4f:30:bf:42:91:69:5f:2d:
8b:3c:1c:10:8e:84:bd:61:fa:ec:02:15:e9:90:8f:51:01:34:
7f:99:18:ed:f4:36:ef:87:d2:52:e3:7a:d1:19:fa:88:1a:d8:
5b:ed:e1:24:6f:99:33:d8:d8:cc:af:eb:ed:d6:1a:12:03:03:
36:5f:49:a1:c0:78:6d:46:1f:c2:18:a3:d8:75:bf:71:4c:1a:
81:43:91:17:6e:d4:8a:2d:57:57:f9:9e:cc:26:08:c1:f7:d8:
38:97:96:bc:69:2b:38:5d:15:d0:ec:7e:bb:26:e4:01:4d:c0:
40:e3:3e:08:84:b6:71:f6:0d:70:96:fa:33:b4:58:ec:07:1d:
f8:55:29:44:00:98:98:70:e9:fe:40:95:65:df:5f:84:15:88:
c2:48:84:74:0c:44:56:d8:66:1e:15:a4:ad:22:f7:f3:3f:f3:
5d:50:ba:b5:ad:19:55:39:65:d8:eb:f5:75:ae:91:54:bd:5c:
8d:9d:44:ce:a5:33:0b:55:f5:f0:fb:c0:2c:aa:d6:ba:8d:50:
a3:9d:5d:f7:f0:92:17:66:cb:20:e8:ee:99:6d:fb:b7:9b:09:
94:9d:b6:38:97:76:99:1f:7c:59:96:95:17:9b:3a:a8:88:41:
b8:d9:c0:f0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQi+8K6XqbH6v/p7brOKEcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwMTAxMTc0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzlhOTZiZjM1NDcwNTcxYzAyNWM0MzcyMDZkZTBmNmM4MjBjZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOYOul0jcbJU/LWlCteQCmTe3FBL
+kyEIzSgKkO91Gxc8x/BeuICmQwQq4PBeBiRqa2GZYR/KZsuTktJWEbQDF2P6wA8
Cc2E8ev7MxqMAFEC6oEjpgDsIsKGRHxcu/NanObPZRIKAUt/zqhvPwbCa0V6IQ4u
tXiCLU7kxMfyqpwe1+adDqTUji+B6fs0Bj1QfX+VyiIIkFcfKEdYK2fp8K1NddV4
nD1PCD6M8dOM1agSBrmIBKUy9ImN/QtGaK9kcuQ870QNGgU2SmBwuQzgPzKiIKpe
6tsK5qCOK+xjQKptAJbUHqNMfBhRXMBoPhilq0Nba9nZHVZjVBSuCIDDFwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHyalr81RwVxwCXENyBt4PbIIM59MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvZkpxV3Z6VkhCWEhBSmNRM0lHM2c5c2dnem4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVFyAwQA
LYq1AwQALZcAMA0GCSqGSIb3DQEBCwUAA4IBAQAV3Z2rcHaiwDm5TzC/QpFpXy2L
PBwQjoS9YfrsAhXpkI9RATR/mRjt9Dbvh9JS43rRGfqIGthb7eEkb5kz2NjMr+vt
1hoSAwM2X0mhwHhtRh/CGKPYdb9xTBqBQ5EXbtSKLVdX+Z7MJgjB99g4l5a8aSs4
XRXQ7H67JuQBTcBA4z4IhLZx9g1wlvoztFjsBx34VSlEAJiYcOn+QJVl31+EFYjC
SIR0DERW2GYeFaStIvfzP/NdULq1rRlVOWXY6/V1rpFUvVyNnUTOpTMLVfXw+8As
qta6jVCjnV338JIXZssg6O6Zbfu3mwmUnbY4l3aZH3xZlpUXmzqoiEG42cDw
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:38:40 2025 by rpki-client