Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/PR7h8oep4HkWGcRzvS4-gRfixMM.roa
File: PR7h8oep4HkWGcRzvS4-gRfixMM.roa (raw, json)
Hash identifier: Ff4Pkc/6nXpndO4Ei0ieXIWUczca12lTRXydMV3acQQ=
Subject key identifier: 3D:1E:E1:F2:87:A9:E0:79:16:19:C4:73:BD:2E:3E:81:17:E2:C4:C3
Certificate issuer: /CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Certificate serial: 019638FFCCABC70B8DBD9CC7BE5DBB2A697E
Authority key identifier: 47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/PR7h8oep4HkWGcRzvS4-gRfixMM.roa
Signing time: Tue 15 Apr 2025 10:30:10 +0000
ROA not before: Tue 15 Apr 2025 10:30:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51248
IP address blocks: 45.151.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:ff:cc:ab:c7:0b:8d:bd:9c:c7:be:5d:bb:2a:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4705d3c6a5b0512682cdfdf363b19a9c567f1f6c
Validity
Not Before: Apr 15 10:30:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d1ee1f287a9e0791619c473bd2e3e8117e2c4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:dc:75:6f:ce:6d:6b:0e:3a:b2:3b:07:96:c0:
ab:67:db:33:b1:09:e8:eb:11:48:f0:79:7e:d8:86:
fd:2f:26:4e:af:f9:fa:9f:31:25:ff:08:77:87:92:
1a:9a:97:18:82:9d:82:ca:b5:2c:10:b2:fb:f9:d4:
83:da:0c:8b:1d:7c:c8:59:70:3a:df:05:70:c7:56:
59:c9:d5:bd:06:92:0a:8d:c4:9b:f5:9b:2e:46:24:
05:1e:61:1c:36:2e:8f:6e:13:44:48:37:98:d8:18:
29:ff:1d:22:ce:c0:47:7c:23:33:05:69:81:a2:0c:
7a:6d:96:a8:ae:73:16:f5:11:60:b9:e0:26:39:76:
de:29:b3:0c:b8:ac:83:50:c2:0b:da:91:6d:30:38:
d8:f7:c0:bd:0f:f8:08:18:51:96:55:44:5d:f0:12:
86:b1:b9:99:1c:c0:cc:e0:7f:a8:b1:62:82:7e:9e:
ec:32:60:53:8e:7c:82:52:49:87:c2:56:6a:43:46:
75:84:62:6a:d9:c1:f0:b2:4f:1f:da:04:07:28:e0:
3f:10:94:3b:84:83:aa:7f:06:1b:20:b3:0f:f6:fd:
71:7b:19:eb:6e:1b:08:ac:01:8a:87:a8:0f:7d:b7:
9c:04:51:df:cd:7e:d9:1a:c8:a0:ad:45:82:7d:8d:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1E:E1:F2:87:A9:E0:79:16:19:C4:73:BD:2E:3E:81:17:E2:C4:C3
X509v3 Authority Key Identifier:
keyid:47:05:D3:C6:A5:B0:51:26:82:CD:FD:F3:63:B1:9A:9C:56:7F:1F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwXTxqWwUSaCzf3zY7GanFZ_H2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/PR7h8oep4HkWGcRzvS4-gRfixMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/56aee9-996c-438f-bb00-0dfa6b22eff2/1/RwXTxqWwUSaCzf3zY7GanFZ_H2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:3c:49:d3:32:6d:a2:af:1c:0f:83:ac:a7:2d:6d:1b:4b:97:
05:48:e4:d8:af:9c:90:ae:d4:d8:d2:fe:9d:50:1f:2e:b5:8f:
0b:30:91:22:86:06:c8:29:f1:72:28:09:af:d7:fd:65:bb:56:
b1:6b:44:90:a1:7d:14:3d:d4:94:1b:b7:1b:b3:e9:2f:b8:b1:
90:9c:6d:4b:e7:3c:34:e0:d2:00:5c:05:f8:2b:40:d9:36:e1:
54:9a:65:92:38:ef:4c:48:65:93:22:d1:b5:72:f4:ae:34:f8:
98:0a:d2:a6:1b:8c:46:80:3d:c0:29:ea:00:e4:c9:2b:1c:4b:
7e:68:2e:61:26:a2:b4:cf:7e:66:04:37:37:b6:f9:36:84:72:
d8:10:30:48:6d:b5:8f:2f:e8:53:a0:86:01:5f:61:f4:97:0a:
11:95:63:a7:e9:53:c8:ab:65:6e:63:22:16:37:dc:b6:90:e1:
5f:9c:a0:ea:8d:01:4c:67:c4:c9:a6:7e:fd:2e:8f:c9:52:ad:
3f:85:6e:53:7c:e2:b9:c9:cd:fb:81:60:3f:87:58:49:32:0a:
a7:7d:3d:80:10:89:93:68:c6:c5:05:02:33:d6:56:a8:09:1b:
30:24:9c:4f:26:97:6b:5a:c1:c6:f8:ff:ce:47:ac:f4:e1:a6:
5a:20:93:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZY4/8yrxwuNvZzHvl27Kml+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDVkM2M2YTViMDUxMjY4MmNkZmRmMzYzYjE5YTljNTY3
ZjFmNmMwHhcNMjUwNDE1MTAzMDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDFlZTFmMjg3YTllMDc5MTYxOWM0NzNiZDJlM2U4MTE3ZTJjNGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+dx1b85taw46sjsHlsCrZ9szsQno
6xFI8Hl+2Ib9LyZOr/n6nzEl/wh3h5IampcYgp2CyrUsELL7+dSD2gyLHXzIWXA6
3wVwx1ZZydW9BpIKjcSb9ZsuRiQFHmEcNi6PbhNESDeY2Bgp/x0izsBHfCMzBWmB
ogx6bZaornMW9RFgueAmOXbeKbMMuKyDUMIL2pFtMDjY98C9D/gIGFGWVURd8BKG
sbmZHMDM4H+osWKCfp7sMmBTjnyCUkmHwlZqQ0Z1hGJq2cHwsk8f2gQHKOA/EJQ7
hIOqfwYbILMP9v1xexnrbhsIrAGKh6gPfbecBFHfzX7ZGsigrUWCfY3yUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0e4fKHqeB5FhnEc70uPoEX4sTDMB8GA1UdIwQY
MBaAFEcF08alsFEmgs3982OxmpxWfx9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81NmFlZTktOTk2Yy00MzhmLWJiMDAt
MGRmYTZiMjJlZmYyLzEvUFI3aDhvZXA0SGtXR2NSenZTNC1nUmZpeE1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81NmFlZTktOTk2Yy00MzhmLWJiMDAtMGRmYTZiMjJlZmYy
LzEvUndYVHhxV3dVU2FDemYzelk3R2FuRlpfSDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZe3MA0G
CSqGSIb3DQEBCwUAA4IBAQArPEnTMm2irxwPg6ynLW0bS5cFSOTYr5yQrtTY0v6d
UB8utY8LMJEihgbIKfFyKAmv1/1lu1axa0SQoX0UPdSUG7cbs+kvuLGQnG1L5zw0
4NIAXAX4K0DZNuFUmmWSOO9MSGWTItG1cvSuNPiYCtKmG4xGgD3AKeoA5MkrHEt+
aC5hJqK0z35mBDc3tvk2hHLYEDBIbbWPL+hToIYBX2H0lwoRlWOn6VPIq2VuYyIW
N9y2kOFfnKDqjQFMZ8TJpn79Lo/JUq0/hW5TfOK5yc37gWA/h1hJMgqnfT2AEImT
aMbFBQIz1laoCRswJJxPJpdrWsHG+P/OR6z04aZaIJMZ
-----END CERTIFICATE-----
Generated at Sat Apr 19 10:33:35 2025 by rpki-client