Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dfCFtR7LqZH1GGKbGHKvMTx-iIc.roa
File: dfCFtR7LqZH1GGKbGHKvMTx-iIc.roa (raw, json)
Hash identifier: 4HRd4YmcCKwbA/sVgoHzrSF3OBX2saWVpV1ATH0wHbM=
Subject key identifier: 75:F0:85:B5:1E:CB:A9:91:F5:18:62:9B:18:72:AF:31:3C:7E:88:87
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0194244539BC2645BE68B50A9367D6F22681
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dfCFtR7LqZH1GGKbGHKvMTx-iIc.roa
Signing time: Wed 01 Jan 2025 23:48:23 +0000
ROA not before: Wed 01 Jan 2025 23:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395092
IP address blocks: 45.139.54.0/24 maxlen: 24
92.119.161.0/24 maxlen: 24
92.119.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:39:bc:26:45:be:68:b5:0a:93:67:d6:f2:26:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75f085b51ecba991f518629b1872af313c7e8887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:18:d5:1e:42:5c:e5:83:73:09:68:bf:39:c3:
6a:6e:2c:72:16:b0:89:86:f4:c4:41:d0:24:77:9d:
f0:64:61:4b:d1:bf:17:a3:39:c7:87:de:ac:31:af:
36:a8:a8:f3:fb:1b:d8:07:1a:40:d5:95:d8:5e:21:
d5:f1:6c:25:47:61:1e:d3:94:45:78:4d:12:6c:ac:
95:32:24:cf:46:2d:42:75:62:66:0f:14:f5:eb:34:
5f:13:48:ed:d1:61:a9:79:f6:0c:00:9a:18:ca:02:
ba:10:2c:e5:b4:b5:ba:de:9f:3f:dc:38:eb:5d:6c:
05:0e:38:2a:0d:13:c4:7c:d9:fe:bf:3b:b5:ef:b7:
77:52:5b:8a:ca:c3:77:10:38:d5:9f:88:a5:68:fc:
34:8b:c1:0c:bc:1e:c9:8d:a4:6e:0f:82:81:bb:f5:
07:6d:fe:d5:79:50:2b:7f:a5:4a:47:4c:cf:5c:1a:
4c:1e:71:2c:0c:ed:e6:32:c0:45:7e:b9:b3:fe:3f:
32:62:45:2f:51:c0:97:d6:f3:07:e0:bb:81:16:bb:
bb:6e:f9:81:15:23:9e:2b:fc:75:87:c4:33:97:fa:
1e:c0:5e:3c:83:37:70:ab:17:0e:cf:1c:17:61:52:
e9:65:7b:30:db:b5:31:72:d5:cf:1b:b1:0c:13:ea:
6f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F0:85:B5:1E:CB:A9:91:F5:18:62:9B:18:72:AF:31:3C:7E:88:87
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/dfCFtR7LqZH1GGKbGHKvMTx-iIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.54.0/24
92.119.161.0/24
92.119.163.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5f:be:48:ba:bf:cd:d5:35:6a:4a:7f:6d:13:f8:ef:d9:cd:
26:38:52:79:79:c3:7d:9d:ba:7c:2a:87:14:cb:62:81:a0:58:
7d:7b:cc:d3:83:0a:43:c0:12:82:d3:30:81:64:bb:ae:6f:c9:
aa:48:62:e0:20:eb:c1:29:08:e6:56:c3:ad:5f:b3:54:8b:37:
4f:4b:4b:7a:d4:2d:f6:b4:ee:24:7b:76:53:ab:7b:ca:06:1f:
de:70:47:a0:16:cf:1d:3f:64:4b:83:64:73:73:f2:c3:95:07:
98:ab:7a:ca:d7:dd:f4:89:5e:9b:1b:77:02:38:49:a2:ad:34:
70:8c:e7:b7:bb:f2:25:e2:77:82:26:ff:b9:f5:79:74:dc:48:
31:72:b6:e3:6b:4f:fa:5f:08:2a:44:ad:e9:10:5c:b7:93:fb:
54:7f:99:97:01:9b:c8:ff:90:48:1f:cf:30:c3:69:44:ae:58:
ae:c9:f8:46:5d:4d:56:e0:01:65:d4:8e:64:28:59:38:91:a2:
27:2b:82:ab:62:6a:b2:a9:72:81:fc:e5:82:5b:f0:46:80:2e:
41:a4:fe:86:8b:99:8c:94:79:7b:f4:98:49:8d:74:fd:93:56:
ce:ae:66:83:bc:37:de:54:7e:28:eb:f7:ae:20:10:f6:d5:fe:
ab:8c:50:36
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQkRTm8JkW+aLUKk2fW8iaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjUwMTAxMjM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NWYwODViNTFlY2JhOTkxZjUxODYyOWIxODcyYWYzMTNjN2U4ODg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RjVHkJc5YNzCWi/OcNqbixyFrCJ
hvTEQdAkd53wZGFL0b8XoznHh96sMa82qKjz+xvYBxpA1ZXYXiHV8WwlR2Ee05RF
eE0SbKyVMiTPRi1CdWJmDxT16zRfE0jt0WGpefYMAJoYygK6ECzltLW63p8/3Djr
XWwFDjgqDRPEfNn+vzu177d3UluKysN3EDjVn4ilaPw0i8EMvB7JjaRuD4KBu/UH
bf7VeVArf6VKR0zPXBpMHnEsDO3mMsBFfrmz/j8yYkUvUcCX1vMH4LuBFru7bvmB
FSOeK/x1h8Qzl/oewF48gzdwqxcOzxwXYVLpZXsw27UxctXPG7EME+pvnwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHXwhbUey6mR9RhimxhyrzE8foiHMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvZGZDRnRSN0xxWkgxR0dLYkdIS3ZNVHgtaUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYs2AwQA
XHehAwQAXHejMA0GCSqGSIb3DQEBCwUAA4IBAQBzX75Iur/N1TVqSn9tE/jv2c0m
OFJ5ecN9nbp8KocUy2KBoFh9e8zTgwpDwBKC0zCBZLuub8mqSGLgIOvBKQjmVsOt
X7NUizdPS0t61C32tO4ke3ZTq3vKBh/ecEegFs8dP2RLg2Rzc/LDlQeYq3rK1930
iV6bG3cCOEmirTRwjOe3u/Il4neCJv+59Xl03Egxcrbja0/6XwgqRK3pEFy3k/tU
f5mXAZvI/5BIH88ww2lErliuyfhGXU1W4AFl1I5kKFk4kaInK4KrYmqyqXKB/OWC
W/BGgC5BpP6Gi5mMlHl79JhJjXT9k1bOrmaDvDfeVH4o6/euIBD21f6rjFA2
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:36:44 2025 by rpki-client