Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/KbVVLoKnD4mlgl5TIV3McwuxVoI.roa
File: KbVVLoKnD4mlgl5TIV3McwuxVoI.roa (raw, json)
Hash identifier: DwijRcJ4u/ewGGrVNNlm9UACKA8Pc1qx2xZVXY2BQQk=
Subject key identifier: 29:B5:55:2E:82:A7:0F:89:A5:82:5E:53:21:5D:CC:73:0B:B1:56:82
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01942445191123CFCEE6D2357C3ED7534EF6
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/KbVVLoKnD4mlgl5TIV3McwuxVoI.roa
Signing time: Wed 01 Jan 2025 23:48:15 +0000
ROA not before: Wed 01 Jan 2025 23:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44893
IP address blocks: 45.142.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:19:11:23:cf:ce:e6:d2:35:7c:3e:d7:53:4e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29b5552e82a70f89a5825e53215dcc730bb15682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:97:30:35:45:61:8a:0b:85:a8:e8:75:56:
92:7b:ad:42:7d:0b:bd:da:3b:6f:20:e4:85:b8:ba:
85:0e:6d:a9:01:17:7e:da:64:ac:83:0d:04:11:0d:
c2:56:86:cd:9d:df:34:1f:34:4f:28:91:0c:92:15:
5d:08:d4:65:ac:3b:24:0e:96:7c:9d:b2:27:cc:c5:
3b:c8:45:fd:8e:34:68:11:7d:ce:2d:37:e4:0b:4d:
34:a1:ad:c4:11:e0:2c:5b:df:85:48:6a:0e:c2:ad:
84:6a:ea:49:59:80:21:0a:9d:0c:8e:e5:71:dc:7c:
78:d7:47:40:e9:74:b8:1e:2e:db:9e:28:5f:6b:a9:
ae:c9:44:00:9e:d8:04:ec:4e:89:dd:bd:cc:6e:97:
66:26:b8:79:6c:62:1d:76:ce:05:08:1f:e7:95:0b:
60:18:46:19:d1:2c:ec:94:78:f0:ef:de:cb:6d:7d:
f9:4d:9c:be:3b:5f:36:15:41:e1:02:82:19:2b:14:
98:41:d1:5e:9d:8f:64:8b:61:c2:29:9d:4d:39:6a:
e7:37:a1:71:38:7d:74:98:cb:d3:bc:19:e1:70:32:
e2:0a:57:df:46:c1:72:71:70:ab:5c:64:50:ab:fa:
fd:ad:b4:d2:a5:f8:b7:11:88:dc:81:fa:6c:b6:0c:
3a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B5:55:2E:82:A7:0F:89:A5:82:5E:53:21:5D:CC:73:0B:B1:56:82
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/KbVVLoKnD4mlgl5TIV3McwuxVoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b9:37:21:35:9c:1b:68:3b:41:11:82:6e:2f:20:cf:e6:65:
2e:b2:b7:27:69:e3:f8:be:d2:8c:e8:86:5f:cf:d5:6c:78:de:
09:75:c0:7c:04:24:a4:e4:27:85:dc:63:24:b0:39:c7:c4:1a:
f1:ec:97:c9:03:29:df:f9:01:a0:b2:17:31:e1:c8:7b:1c:bc:
e1:98:de:82:b8:d9:bc:69:ce:2a:fc:bf:be:01:b5:2d:b0:78:
76:94:b1:88:05:70:f4:fa:4a:b4:f5:d1:9c:d9:53:c3:fe:2f:
aa:cd:0c:6a:a3:a8:43:48:1e:01:92:f1:b6:bb:9b:b0:ba:ea:
ee:0a:8d:ca:68:70:37:72:df:3e:e0:15:62:1d:11:fe:1e:4e:
6c:32:cf:f0:5b:fd:86:22:77:d2:6a:2d:35:21:74:7e:a1:89:
16:69:f6:3d:de:48:b6:88:fc:30:92:ef:aa:b1:4d:54:49:06:
dd:a6:79:dc:06:8d:ae:c8:d9:61:ce:23:aa:be:2b:1c:9a:16:
6d:18:03:fa:36:d2:90:ec:f2:e4:2f:19:f3:3d:53:1e:69:dc:
52:5d:f5:ad:36:7a:2f:e6:f6:34:ee:69:dd:8c:cf:8c:f0:79:
5e:0a:7e:dd:73:5b:c9:c5:28:f0:a7:c9:12:36:86:2c:e2:41:
58:4f:e4:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRRkRI8/O5tI1fD7XU072MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWI1NTUyZTgyYTcwZjg5YTU4MjVlNTMyMTVkY2M3MzBiYjE1NjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKeXMDVFYYoLhajodVaSe61CfQu9
2jtvIOSFuLqFDm2pARd+2mSsgw0EEQ3CVobNnd80HzRPKJEMkhVdCNRlrDskDpZ8
nbInzMU7yEX9jjRoEX3OLTfkC000oa3EEeAsW9+FSGoOwq2EaupJWYAhCp0MjuVx
3Hx410dA6XS4Hi7bnihfa6muyUQAntgE7E6J3b3MbpdmJrh5bGIdds4FCB/nlQtg
GEYZ0SzslHjw797LbX35TZy+O182FUHhAoIZKxSYQdFenY9ki2HCKZ1NOWrnN6Fx
OH10mMvTvBnhcDLiClffRsFycXCrXGRQq/r9rbTSpfi3EYjcgfpstgw6IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCm1VS6Cpw+JpYJeUyFdzHMLsVaCMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvS2JWVkxvS25ENG1sZ2w1VElWM01jd3V4Vm9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY4mMA0G
CSqGSIb3DQEBCwUAA4IBAQCbuTchNZwbaDtBEYJuLyDP5mUusrcnaeP4vtKM6IZf
z9VseN4JdcB8BCSk5CeF3GMksDnHxBrx7JfJAynf+QGgshcx4ch7HLzhmN6CuNm8
ac4q/L++AbUtsHh2lLGIBXD0+kq09dGc2VPD/i+qzQxqo6hDSB4BkvG2u5uwuuru
Co3KaHA3ct8+4BViHRH+Hk5sMs/wW/2GInfSai01IXR+oYkWafY93ki2iPwwku+q
sU1USQbdpnncBo2uyNlhziOqviscmhZtGAP6NtKQ7PLkLxnzPVMeadxSXfWtNnov
5vY07mndjM+M8HleCn7dc1vJxSjwp8kSNoYs4kFYT+Tg
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:44 2025 by rpki-client