Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/yKr-lbxbewyIbYXmFRw2mMNuLTo.roa
File: yKr-lbxbewyIbYXmFRw2mMNuLTo.roa (raw, json)
Hash identifier: Z3aYRDydfDmgj6e8LtjA5XA3RM4olFdMgIZ5SEEf7Ao=
Subject key identifier: C8:AA:FE:95:BC:5B:7B:0C:88:6D:85:E6:15:1C:36:98:C3:6E:2D:3A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369F288E47E9F74189FEA52DE359C25
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/yKr-lbxbewyIbYXmFRw2mMNuLTo.roa
Signing time: Wed 01 Jan 2025 19:48:53 +0000
ROA not before: Wed 01 Jan 2025 19:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43641
IP address blocks: 45.92.77.0/24 maxlen: 24
77.72.81.0/24 maxlen: 24
146.19.93.0/24 maxlen: 24
188.93.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f2:88:e4:7e:9f:74:18:9f:ea:52:de:35:9c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8aafe95bc5b7b0c886d85e6151c3698c36e2d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:fe:37:48:e2:41:4f:aa:c3:7f:22:fb:dc:
4b:10:fb:90:3e:36:42:87:a8:50:46:bd:ab:31:de:
25:9c:a4:08:a8:5b:38:b8:f7:5d:80:b7:3e:88:3e:
12:29:d6:d3:8e:c9:09:9c:0c:25:bb:ae:5a:45:04:
ba:43:a4:5b:9c:cc:66:7d:f8:48:a5:01:ce:42:2e:
b5:ba:a3:fb:7c:00:8a:9a:a3:8d:e1:91:71:14:cf:
a7:52:ad:21:ba:c3:98:62:17:e2:f8:fd:2f:89:0e:
fd:ce:de:0d:55:92:eb:8a:9b:dd:7d:b8:2c:f4:cd:
4f:86:15:40:b4:cb:03:91:f0:ec:9a:43:7a:72:70:
68:48:e7:20:13:56:a2:8e:44:13:89:7e:cf:7d:c9:
43:5c:a8:3b:3d:76:ca:76:ff:e3:52:19:b6:b1:80:
8d:61:a6:d4:6d:70:03:0c:05:6c:73:41:c4:49:75:
55:20:e8:20:64:04:44:d0:16:74:6f:8f:17:d2:db:
0c:e6:5f:c5:55:1c:b2:3f:67:d1:c4:07:92:0c:42:
5e:95:c6:5b:22:56:89:88:3f:a7:58:cb:04:33:79:
d9:1c:22:eb:f3:a5:49:e0:78:2a:9f:be:6d:64:55:
75:3e:73:5f:fe:8a:70:07:e3:b5:58:37:04:0e:d6:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AA:FE:95:BC:5B:7B:0C:88:6D:85:E6:15:1C:36:98:C3:6E:2D:3A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/yKr-lbxbewyIbYXmFRw2mMNuLTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.77.0/24
77.72.81.0/24
146.19.93.0/24
188.93.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:93:23:04:d9:2f:43:8f:c1:7c:96:f3:61:10:c2:07:fb:f8:
47:4f:d6:ed:d0:97:6b:df:d8:89:2e:00:08:a4:22:1d:89:b5:
4f:22:46:29:96:a4:a6:ba:0d:a6:46:da:5d:cb:59:85:d0:62:
09:0f:86:50:a5:2a:cd:a0:f9:dd:84:82:18:cc:ed:fd:1a:30:
9a:1c:23:7f:90:c7:57:2f:a5:72:d8:08:0f:22:16:12:e7:cf:
e4:26:c9:bc:fd:04:43:e1:4e:f2:83:77:72:37:ee:fd:30:56:
6d:32:05:e1:ac:e9:e1:66:aa:04:e9:5c:5b:c8:41:57:1d:ea:
f8:0d:f5:1d:de:d8:0f:16:10:c0:7c:3e:f7:35:87:66:cb:08:
03:e7:f2:89:26:29:05:a3:40:01:19:8d:10:eb:be:0e:b9:00:
51:e6:1b:54:c9:62:e0:66:3d:6b:34:d4:79:56:37:18:e3:b2:
94:dd:5b:c9:29:9e:a5:5a:75:2b:9a:4f:cf:c9:f5:2a:f7:87:
37:9d:1a:69:84:d0:2d:c3:75:2e:bb:60:d6:bb:fa:44:ad:84:
d1:6e:f5:2b:e5:a7:1b:b4:85:e0:a0:4e:9d:58:32:aa:c5:1e:
be:77:d7:2c:f4:cc:75:4a:3b:47:ba:dc:19:ce:70:5a:e7:d9:
a1:cd:3a:15
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQjafKI5H6fdBif6lLeNZwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwMTAxMTk0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGFhZmU5NWJjNWI3YjBjODg2ZDg1ZTYxNTFjMzY5OGMzNmUyZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ND+N0jiQU+qw38i+9xLEPuQPjZC
h6hQRr2rMd4lnKQIqFs4uPddgLc+iD4SKdbTjskJnAwlu65aRQS6Q6RbnMxmffhI
pQHOQi61uqP7fACKmqON4ZFxFM+nUq0husOYYhfi+P0viQ79zt4NVZLripvdfbgs
9M1PhhVAtMsDkfDsmkN6cnBoSOcgE1aijkQTiX7PfclDXKg7PXbKdv/jUhm2sYCN
YabUbXADDAVsc0HESXVVIOggZARE0BZ0b48X0tsM5l/FVRyyP2fRxAeSDEJelcZb
IlaJiD+nWMsEM3nZHCLr86VJ4Hgqn75tZFV1PnNf/opwB+O1WDcEDtbi0wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMiq/pW8W3sMiG2F5hUcNpjDbi06MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEveUtyLWxieGJld3lJYllYbUZSdzJtTU51TFRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVxNAwQA
TUhRAwQAkhNdAwQAvF2KMA0GCSqGSIb3DQEBCwUAA4IBAQCMkyME2S9Dj8F8lvNh
EMIH+/hHT9bt0Jdr39iJLgAIpCIdibVPIkYplqSmug2mRtpdy1mF0GIJD4ZQpSrN
oPndhIIYzO39GjCaHCN/kMdXL6Vy2AgPIhYS58/kJsm8/QRD4U7yg3dyN+79MFZt
MgXhrOnhZqoE6VxbyEFXHer4DfUd3tgPFhDAfD73NYdmywgD5/KJJikFo0ABGY0Q
674OuQBR5htUyWLgZj1rNNR5VjcY47KU3VvJKZ6lWnUrmk/PyfUq94c3nRpphNAt
w3Uuu2DWu/pErYTRbvUr5acbtIXgoE6dWDKqxR6+d9cs9Mx1SjtHutwZznBa59mh
zToV
-----END CERTIFICATE-----
Generated at Wed Feb 5 13:03:54 2025 by rpki-client