Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sPm3yKEGTVunxhEBkT59OiMpjy8.roa
File: sPm3yKEGTVunxhEBkT59OiMpjy8.roa (raw, json)
Hash identifier: P7y0ud0FVfGPIpqYLex1EiTtxyaX6ULKnwIyEobZygw=
Subject key identifier: B0:F9:B7:C8:A1:06:4D:5B:A7:C6:11:01:91:3E:7D:3A:23:29:8F:2F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBB66C0EE74533003141107411B4A5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sPm3yKEGTVunxhEBkT59OiMpjy8.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60949
IP address blocks: 45.144.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b6:6c:0e:e7:45:33:00:31:41:10:74:11:b4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0f9b7c8a1064d5ba7c61101913e7d3a23298f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:da:a0:07:5e:f0:92:93:a1:9e:65:70:40:
42:f1:7a:0a:c1:21:df:31:69:48:f8:e0:bd:74:c4:
6f:2a:43:1e:1a:fe:0c:9b:0f:10:e3:00:cc:cd:5c:
e3:af:2a:13:31:3b:32:75:1f:35:e5:20:4e:6b:22:
3b:78:42:f4:da:98:16:37:89:2c:7f:2b:f2:d8:eb:
e4:9b:c7:61:e6:5e:ba:c1:67:c6:1f:dd:6d:cf:ad:
28:b3:d1:f4:c0:a9:d6:03:7d:cf:15:0d:4a:a7:c4:
d2:7d:5e:e4:e2:86:a4:e9:69:85:e3:95:97:3f:7a:
ff:98:ac:c1:b5:6f:2d:a0:81:6a:04:d3:a3:1d:32:
54:7c:f5:67:49:cc:bc:95:83:d3:24:ba:35:ec:3f:
d2:4e:08:c6:2e:8d:8b:4d:75:77:73:1e:98:ad:5b:
82:94:e1:62:7b:a1:27:3b:19:a4:e4:51:ec:1a:5b:
7c:aa:e9:7c:4d:4a:e9:78:07:7c:1b:cf:f8:a7:cd:
9b:73:b6:b2:10:11:01:cf:1d:62:85:b5:b6:d4:9e:
d4:56:8e:ac:12:36:8b:b7:f1:d3:9d:d5:c4:fe:f7:
59:77:8f:42:3c:ee:e2:9a:35:3c:17:de:75:81:34:
1d:64:ac:4a:d6:f5:d5:72:6a:36:10:1c:b7:2e:28:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F9:B7:C8:A1:06:4D:5B:A7:C6:11:01:91:3E:7D:3A:23:29:8F:2F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/sPm3yKEGTVunxhEBkT59OiMpjy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
01:13:bf:98:6d:ca:26:3a:d2:90:b8:89:02:40:d7:c2:26:2e:
e2:5a:2c:83:5a:15:c9:d5:7b:7b:92:d0:fc:4e:93:3b:a4:05:
41:49:8f:60:fc:4c:bf:04:43:ed:7f:6e:1b:d3:fa:b2:08:21:
ec:36:ef:72:42:4f:33:95:57:e3:6f:8b:d3:65:e5:6f:c3:49:
4d:47:15:7c:46:db:ea:15:f6:56:bd:59:c7:4a:2c:b0:9c:8c:
1e:5f:59:74:c9:b3:72:17:1b:9b:b7:c7:3d:78:dc:76:ab:23:
31:ab:3f:a4:cd:1b:78:71:6d:c0:1c:be:40:6a:0c:6f:f7:47:
5e:7d:27:dd:6d:24:03:f7:c2:70:d2:4b:3d:c9:86:75:77:67:
eb:20:ee:55:56:79:ae:c0:94:a0:96:6b:9b:cb:6c:cc:da:d1:
fa:bd:7e:fd:ea:ea:73:b1:62:f6:74:da:bb:cb:8e:b3:37:57:
47:a9:c5:44:28:3e:7c:c8:bf:e3:cd:f3:30:f2:ce:6e:b3:3a:
82:50:15:63:b6:dd:60:69:b9:e0:c1:7a:ce:b6:df:5e:25:5f:
5f:85:76:9d:27:e7:83:d6:5c:92:72:8a:0b:51:27:9e:6e:96:
3e:dc:f3:db:f6:6a:c0:86:b0:df:1f:ea:3a:1c:88:33:be:ce:
ee:e5:91:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+7ZsDudFMwAxQRB0EbSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwMTAxMTc0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGY5YjdjOGExMDY0ZDViYTdjNjExMDE5MTNlN2QzYTIzMjk4ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQPaoAde8JKToZ5lcEBC8XoKwSHf
MWlI+OC9dMRvKkMeGv4Mmw8Q4wDMzVzjryoTMTsydR815SBOayI7eEL02pgWN4ks
fyvy2Ovkm8dh5l66wWfGH91tz60os9H0wKnWA33PFQ1Kp8TSfV7k4oak6WmF45WX
P3r/mKzBtW8toIFqBNOjHTJUfPVnScy8lYPTJLo17D/STgjGLo2LTXV3cx6YrVuC
lOFie6EnOxmk5FHsGlt8qul8TUrpeAd8G8/4p82bc7ayEBEBzx1ihbW21J7UVo6s
EjaLt/HTndXE/vdZd49CPO7imjU8F951gTQdZKxK1vXVcmo2EBy3LihbWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLD5t8ihBk1bp8YRAZE+fTojKY8vMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvc1BtM3lLRUdUVnVueGhFQmtUNTlPaU1wank4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZDXMA0G
CSqGSIb3DQEBCwUAA4IBAQABE7+YbcomOtKQuIkCQNfCJi7iWiyDWhXJ1Xt7ktD8
TpM7pAVBSY9g/Ey/BEPtf24b0/qyCCHsNu9yQk8zlVfjb4vTZeVvw0lNRxV8Rtvq
FfZWvVnHSiywnIweX1l0ybNyFxubt8c9eNx2qyMxqz+kzRt4cW3AHL5Aagxv90de
fSfdbSQD98Jw0ks9yYZ1d2frIO5VVnmuwJSglmuby2zM2tH6vX796upzsWL2dNq7
y46zN1dHqcVEKD58yL/jzfMw8s5uszqCUBVjtt1gabngwXrOtt9eJV9fhXadJ+eD
1lyScooLUSeebpY+3PPb9mrAhrDfH+o6HIgzvs7u5ZFS
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:40:34 2025 by rpki-client