Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa
File: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (raw, json)
Hash identifier: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=
Subject key identifier: 9D:5E:9D:E9:D6:09:A2:4A:91:FD:63:49:D1:EE:52:F4:32:28:56:D9
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 0194221FA228C42D4CAB115314B118D523F2
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49468
IP address blocks: 45.13.36.0/24 maxlen: 24
45.13.215.0/24 maxlen: 24
45.129.12.0/24 maxlen: 24
45.134.49.0/24 maxlen: 24
45.148.8.0/24 maxlen: 24
193.29.12.0/24 maxlen: 24
193.32.160.0/24 maxlen: 24
193.32.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a2:28:c4:2d:4c:ab:11:53:14:b1:18:d5:23:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d5e9de9d609a24a91fd6349d1ee52f4322856d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:a4:1b:22:ac:31:ba:ab:06:fe:d1:92:02:
45:9f:15:2a:05:32:32:ec:0a:8c:6e:eb:69:f7:f4:
3a:41:f5:d5:f8:79:72:a2:68:20:02:c4:2b:8d:00:
43:10:f9:fb:ad:07:bf:be:39:d6:bb:a6:aa:1c:7f:
5c:b8:b3:73:4b:99:34:e1:c1:4b:72:c8:c0:b7:ae:
ba:a6:12:c5:31:a0:08:49:d6:de:69:b7:67:5d:dc:
be:f8:ed:aa:6b:3a:e3:b1:05:40:e4:71:ea:55:6b:
e0:74:00:7c:66:73:66:2a:d1:9f:74:a4:64:37:ce:
ad:1c:2b:8a:90:04:24:39:d4:3e:b7:6c:15:59:da:
ba:e3:85:ff:54:63:6c:32:f2:bf:86:7f:1e:35:bd:
1f:ec:0e:1c:79:f0:92:37:60:67:0d:94:a5:6c:4a:
7a:84:1e:ba:01:02:47:91:49:bc:a3:10:1c:83:f4:
4e:e9:57:82:79:26:ec:e8:11:78:65:e9:a9:97:67:
96:3f:49:0d:52:e0:5f:a8:11:2b:90:89:ec:73:f5:
e9:27:5a:fa:ae:5c:b7:73:14:cb:4c:0d:be:dd:dd:
b0:a1:6c:97:2e:b3:92:9c:51:af:d3:ec:fd:aa:a8:
42:8b:1f:e5:48:21:b0:79:02:1c:53:43:3f:9a:03:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5E:9D:E9:D6:09:A2:4A:91:FD:63:49:D1:EE:52:F4:32:28:56:D9
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.36.0/24
45.13.215.0/24
45.129.12.0/24
45.134.49.0/24
45.148.8.0/24
193.29.12.0/24
193.32.160.0/23
Signature Algorithm: sha256WithRSAEncryption
18:52:c0:7e:e5:a6:61:f6:a7:ca:c5:bf:d7:27:ae:0b:f1:9b:
ec:db:1c:f6:30:ea:57:ba:86:f9:28:56:82:7b:bb:0e:ef:60:
9a:5e:65:54:4c:fb:4d:7a:54:60:09:04:67:f1:2d:91:86:9a:
70:58:79:ba:c5:93:af:70:46:7e:d2:fc:b5:8b:88:da:62:c9:
32:de:b7:80:02:b5:0b:0c:36:41:8b:62:a3:84:f1:26:01:ce:
58:57:83:c1:d3:75:5c:21:c3:20:07:41:7b:9e:14:7d:9d:95:
90:45:46:01:a3:76:b1:95:6b:ce:4f:fc:49:fc:56:22:5c:fd:
c0:36:0b:48:70:9f:9b:48:2c:50:01:0b:6e:03:a8:33:c7:a6:
d6:b6:b7:6c:99:48:c0:a0:29:52:01:06:13:c1:52:fd:3f:d8:
4f:3b:21:fc:38:d7:d2:bc:f3:8c:06:2c:1a:8d:7c:2c:a2:19:
da:77:4d:63:47:c3:85:08:1e:75:92:38:c4:ef:0c:e3:91:20:
97:f2:55:73:fc:2b:78:65:f7:d8:9e:0f:07:1a:fe:99:80:71:
2e:ec:90:2e:d7:5b:d0:1e:5e:d8:77:76:73:39:ef:f5:e0:04:
95:b2:3d:71:10:a2:72:7d:67:bc:26:4d:13:1d:68:55:d1:7b:
9d:e2:7a:4c
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQiH6IoxC1MqxFTFLEY1SPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk
NTJiYmYwHhcNMjUwMTAxMTM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDVlOWRlOWQ2MDlhMjRhOTFmZDYzNDlkMWVlNTJmNDMyMjg1NmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM+kGyKsMbqrBv7RkgJFnxUqBTIy
7AqMbutp9/Q6QfXV+HlyomggAsQrjQBDEPn7rQe/vjnWu6aqHH9cuLNzS5k04cFL
csjAt666phLFMaAISdbeabdnXdy++O2qazrjsQVA5HHqVWvgdAB8ZnNmKtGfdKRk
N86tHCuKkAQkOdQ+t2wVWdq644X/VGNsMvK/hn8eNb0f7A4cefCSN2BnDZSlbEp6
hB66AQJHkUm8oxAcg/RO6VeCeSbs6BF4Zempl2eWP0kNUuBfqBErkInsc/XpJ1r6
rly3cxTLTA2+3d2woWyXLrOSnFGv0+z9qqhCix/lSCGweQIcU0M/mgOinwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJ1enenWCaJKkf1jSdHuUvQyKFbZMB8GA1UdIwQY
MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt
NDZlZTU3OGEwYmZlLzEvblY2ZDZkWUpva3FSX1dOSjBlNVM5RElvVnRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl
LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQ0kAwQA
LQ3XAwQALYEMAwQALYYxAwQALZQIAwQAwR0MAwQBwSCgMA0GCSqGSIb3DQEBCwUA
A4IBAQAYUsB+5aZh9qfKxb/XJ64L8Zvs2xz2MOpXuob5KFaCe7sO72CaXmVUTPtN
elRgCQRn8S2RhppwWHm6xZOvcEZ+0vy1i4jaYsky3reAArULDDZBi2KjhPEmAc5Y
V4PB03VcIcMgB0F7nhR9nZWQRUYBo3axlWvOT/xJ/FYiXP3ANgtIcJ+bSCxQAQtu
A6gzx6bWtrdsmUjAoClSAQYTwVL9P9hPOyH8ONfSvPOMBiwajXwsohnad01jR8OF
CB51kjjE7wzjkSCX8lVz/Ct4ZffYng8HGv6ZgHEu7JAu11vQHl7Yd3ZzOe/14ASV
sj1xEKJyfWe8Jk0THWhV0Xud4npM
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:29 2025 by rpki-client