Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa
File: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (raw, json)
Hash identifier: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=
Subject key identifier: E6:DF:E0:10:FC:B3:38:D3:70:99:C5:FF:E9:EC:34:22:1D:CC:93:64
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 019427474622480B2D86C85CBAC70634B1E9
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa
Signing time: Thu 02 Jan 2025 13:49:29 +0000
ROA not before: Thu 02 Jan 2025 13:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135392
IP address blocks: 45.84.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:46:22:48:0b:2d:86:c8:5c:ba:c7:06:34:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 13:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6dfe010fcb338d37099c5ffe9ec34221dcc9364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:5e:82:15:fd:1f:96:2b:ff:95:2e:92:5f:
8d:1d:e1:ab:fd:4d:d5:9b:9d:f8:53:08:cd:35:86:
a5:c3:b7:a7:c3:60:71:bc:65:7d:59:8f:57:81:6a:
e7:b9:66:9e:11:4c:13:ff:85:ba:65:aa:f3:b6:6f:
33:50:50:25:bc:a0:65:4a:ce:9e:8a:0f:11:72:00:
74:6d:08:92:57:f2:bc:31:6e:01:88:9d:9f:05:2c:
71:86:40:42:98:b7:6c:80:15:ec:89:d9:e9:c5:c0:
24:62:ee:3b:0a:03:87:3c:0a:99:52:d3:89:65:83:
03:a4:f6:86:f8:f5:5b:da:07:5d:3b:60:67:11:ae:
43:a3:56:6d:d5:6c:af:ec:0e:21:60:31:59:be:fc:
c0:36:d5:e0:22:28:2e:2f:4d:db:16:aa:1a:74:e1:
9d:f7:b0:83:72:01:fe:d5:7b:82:0c:4a:b4:a5:ca:
9c:7d:e5:fe:40:a6:88:bc:20:d3:26:4f:de:f7:8e:
75:6f:4f:08:56:89:3d:ba:f9:eb:2d:ce:9f:de:62:
44:1f:36:72:95:f2:c6:cd:cd:bb:1d:4c:b2:a0:84:
27:6a:ed:52:97:f6:9a:84:30:de:00:d4:50:14:3a:
75:af:eb:0c:96:64:df:99:ef:36:1a:d7:82:2c:fb:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DF:E0:10:FC:B3:38:D3:70:99:C5:FF:E9:EC:34:22:1D:CC:93:64
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1e:34:58:52:37:ea:1b:91:5a:e6:37:cb:a8:5e:06:57:0e:
32:03:ba:7e:8d:a3:39:ca:97:fd:1f:7b:44:2c:83:53:9e:04:
d3:73:dd:49:25:27:a8:39:fb:33:47:a6:b8:ea:98:eb:ef:43:
96:5c:ea:f4:98:c9:c1:4c:84:c7:64:b7:1a:d2:92:fc:55:3c:
88:94:ae:8c:d2:80:b3:aa:1f:c1:09:95:70:de:c5:09:70:72:
df:e3:0d:9f:17:79:99:a4:f4:db:6c:41:d7:03:e1:10:6c:f9:
c4:46:c3:f0:5d:db:d9:d3:76:9d:3e:40:ad:fb:a1:fa:7f:57:
dc:3f:cd:90:0e:08:7f:16:31:a7:49:76:f5:eb:2a:7b:ce:bb:
f5:74:6b:66:9c:2f:6c:7f:a9:05:3d:a3:93:3d:f5:b6:9d:fc:
32:1f:93:d7:e7:4a:59:22:ca:02:4e:17:d4:8b:4c:9a:7c:76:
45:a6:e9:e3:d9:ee:94:88:d2:7b:f2:a2:e7:e7:4b:0d:65:2a:
35:15:26:58:b6:68:d2:b1:ed:c7:64:f0:b4:92:f8:7d:e4:a7:
d9:2b:d9:84:75:61:3f:05:28:98:1f:d0:94:54:55:eb:18:d0:
ed:91:64:9d:ba:45:df:9b:15:20:e2:ba:04:b0:ac:90:2d:0f:
d5:dc:14:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR0YiSAsthshcuscGNLHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjUwMTAyMTM0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmRmZTAxMGZjYjMzOGQzNzA5OWM1ZmZlOWVjMzQyMjFkY2M5MzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp5eghX9H5Yr/5Uukl+NHeGr/U3V
m534UwjNNYalw7enw2BxvGV9WY9XgWrnuWaeEUwT/4W6Zarztm8zUFAlvKBlSs6e
ig8RcgB0bQiSV/K8MW4BiJ2fBSxxhkBCmLdsgBXsidnpxcAkYu47CgOHPAqZUtOJ
ZYMDpPaG+PVb2gddO2BnEa5Do1Zt1Wyv7A4hYDFZvvzANtXgIiguL03bFqoadOGd
97CDcgH+1XuCDEq0pcqcfeX+QKaIvCDTJk/e9451b08IVok9uvnrLc6f3mJEHzZy
lfLGzc27HUyyoIQnau1Sl/aahDDeANRQFDp1r+sMlmTfme82GteCLPtd/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFObf4BD8szjTcJnF/+nsNCIdzJNkMB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvNXRfZ0VQeXpPTk53bWNYXzZldzBJaDNNazJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTyMA0G
CSqGSIb3DQEBCwUAA4IBAQCeHjRYUjfqG5Fa5jfLqF4GVw4yA7p+jaM5ypf9H3tE
LINTngTTc91JJSeoOfszR6a46pjr70OWXOr0mMnBTITHZLca0pL8VTyIlK6M0oCz
qh/BCZVw3sUJcHLf4w2fF3mZpPTbbEHXA+EQbPnERsPwXdvZ03adPkCt+6H6f1fc
P82QDgh/FjGnSXb16yp7zrv1dGtmnC9sf6kFPaOTPfW2nfwyH5PX50pZIsoCThfU
i0yafHZFpunj2e6UiNJ78qLn50sNZSo1FSZYtmjSse3HZPC0kvh95KfZK9mEdWE/
BSiYH9CUVFXrGNDtkWSdukXfmxUg4roEsKyQLQ/V3BRD
-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:51 2025 by rpki-client