Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yuDAkfr-Px9t0yqsVQka_a1yL6c.roa
File: yuDAkfr-Px9t0yqsVQka_a1yL6c.roa (raw, json)
Hash identifier: eBfQkAKvn4WAHObOrFWLxRSneFFvNDDBrLH1/mfwlP8=
Subject key identifier: CA:E0:C0:91:FA:FE:3F:1F:6D:D3:2A:AC:55:09:1A:FD:AD:72:2F:A7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019422FBC2EEB8913A209E73B10584A7D504
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yuDAkfr-Px9t0yqsVQka_a1yL6c.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212756
IP address blocks: 45.132.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c2:ee:b8:91:3a:20:9e:73:b1:05:84:a7:d5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae0c091fafe3f1f6dd32aac55091afdad722fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:75:3f:e7:04:3e:6e:f0:5c:62:a1:ba:b1:4b:
f0:96:57:dd:7e:ce:6f:66:65:9f:73:f6:c6:58:34:
90:fb:74:b3:e7:be:66:15:95:70:7c:fe:ba:31:65:
f3:a8:ff:66:8e:e1:46:8a:97:cc:52:76:7b:14:b9:
72:12:4d:09:90:4b:df:51:b8:8c:01:81:14:31:a9:
ce:b9:23:df:68:7b:58:57:65:15:f5:e5:9d:d1:d6:
1c:ee:8a:79:bc:2a:82:15:e8:29:ca:dc:a7:64:80:
83:e4:86:fb:58:2b:41:de:b3:18:73:c4:9e:19:eb:
e7:b2:a4:c7:98:47:d9:af:b4:2d:db:db:e9:de:f7:
01:21:43:70:79:65:69:fc:a1:35:b3:ab:86:ce:c1:
1f:c2:dc:5e:29:52:4a:42:69:b9:b1:fc:3d:72:b2:
af:68:d2:66:e2:f8:3a:8f:6f:1c:3a:e6:d1:47:79:
79:0a:87:76:7e:53:53:c0:87:b0:a5:ce:bb:72:8c:
56:00:f2:20:43:82:dc:53:c6:0b:07:66:78:89:9b:
d8:b8:42:49:31:c9:c0:83:11:d8:d1:d0:2d:8e:da:
52:3a:45:47:ef:c0:46:91:75:72:55:0b:ae:87:8e:
c1:90:51:b4:57:15:f0:3b:49:de:ee:a7:32:01:25:
87:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E0:C0:91:FA:FE:3F:1F:6D:D3:2A:AC:55:09:1A:FD:AD:72:2F:A7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yuDAkfr-Px9t0yqsVQka_a1yL6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fc:de:4b:32:17:34:75:5a:52:f9:a0:fc:70:94:ff:4c:e9:
81:1c:ed:fc:15:6f:83:04:be:6e:91:ec:e8:b9:2b:3e:97:32:
42:c5:8e:23:7b:c3:5f:5e:42:92:5e:72:b5:57:07:2e:ca:0f:
cc:6f:3b:1c:91:e6:4b:61:fb:3b:de:1c:35:fc:fb:f0:29:44:
3b:95:e3:12:8b:a6:54:a5:48:d6:ca:7b:40:21:cf:d3:ff:fe:
1a:23:c5:35:30:bb:cc:f4:12:7f:7a:15:2e:ea:74:26:45:05:
ea:5f:97:32:08:ae:22:ea:1a:65:63:f4:0c:92:fa:56:f7:c1:
7d:a4:77:93:d9:6b:90:c9:41:45:4a:6c:90:60:30:85:f1:4a:
35:f5:53:3e:4a:d4:ca:6d:e7:2d:7e:2b:c3:7b:7f:07:ce:ff:
c0:1b:50:58:b5:36:58:d5:cf:92:62:2c:ff:8d:00:ac:84:1c:
41:d3:72:f0:9c:83:d9:72:2c:69:6c:32:39:b1:0f:2c:f1:8f:
20:5e:75:a1:ca:36:7a:d2:f8:1e:35:06:5d:6a:73:b4:70:87:
f4:9c:e8:ed:55:37:ef:c0:12:8b:f9:7f:a6:a0:55:23:0e:c6:
1b:06:39:90:a2:2d:c6:a1:fb:f0:f0:a8:b5:c0:00:c7:f2:6b:
ac:78:2b:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+8LuuJE6IJ5zsQWEp9UEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjUwMTAxMTc0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWUwYzA5MWZhZmUzZjFmNmRkMzJhYWM1NTA5MWFmZGFkNzIyZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HU/5wQ+bvBcYqG6sUvwllfdfs5v
ZmWfc/bGWDSQ+3Sz575mFZVwfP66MWXzqP9mjuFGipfMUnZ7FLlyEk0JkEvfUbiM
AYEUManOuSPfaHtYV2UV9eWd0dYc7op5vCqCFegpytynZICD5Ib7WCtB3rMYc8Se
GevnsqTHmEfZr7Qt29vp3vcBIUNweWVp/KE1s6uGzsEfwtxeKVJKQmm5sfw9crKv
aNJm4vg6j28cOubRR3l5Cod2flNTwIewpc67coxWAPIgQ4LcU8YLB2Z4iZvYuEJJ
McnAgxHY0dAtjtpSOkVH78BGkXVyVQuuh47BkFG0VxXwO0ne7qcyASWHvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMrgwJH6/j8fbdMqrFUJGv2tci+nMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEveXVEQWtmci1QeDl0MHlxc1ZRa2FfYTF5TDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYS0MA0G
CSqGSIb3DQEBCwUAA4IBAQAW/N5LMhc0dVpS+aD8cJT/TOmBHO38FW+DBL5ukezo
uSs+lzJCxY4je8NfXkKSXnK1Vwcuyg/MbzsckeZLYfs73hw1/PvwKUQ7leMSi6ZU
pUjWyntAIc/T//4aI8U1MLvM9BJ/ehUu6nQmRQXqX5cyCK4i6hplY/QMkvpW98F9
pHeT2WuQyUFFSmyQYDCF8Uo19VM+StTKbectfivDe38Hzv/AG1BYtTZY1c+SYiz/
jQCshBxB03LwnIPZcixpbDI5sQ8s8Y8gXnWhyjZ60vgeNQZdanO0cIf0nOjtVTfv
wBKL+X+moFUjDsYbBjmQoi3Gofvw8Ki1wADH8museCvJ
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:53:12 2025 by rpki-client