Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa
File: bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa (raw, json)
Hash identifier: 7Dp/8cQlX9mJBbuCpHWin7gTO/+CrJ9Pq/AHAemXX08=
Subject key identifier: 6E:1E:34:43:72:F3:6F:F4:39:5C:41:46:B1:48:EF:E8:B2:40:38:D8
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01941FFA3E68EBDD3DD74EB408AB54C753E4
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215738
IP address blocks: 37.114.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3e:68:eb:dd:3d:d7:4e:b4:08:ab:54:c7:53:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e1e344372f36ff4395c4146b148efe8b24038d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:b8:6d:70:2d:fd:88:a3:ab:59:f6:ce:3c:
a8:af:1a:26:32:c4:a1:b1:15:ec:bb:c7:4a:77:75:
a4:79:66:ec:e9:7d:e6:75:e0:41:0d:80:0c:c1:0e:
1d:cd:3d:fd:2d:ee:20:3f:54:47:4d:ae:6c:f8:1d:
d6:22:fa:2c:b1:47:75:4a:59:c3:c8:16:d6:6c:ad:
af:ca:f8:79:c5:0d:e0:9f:13:2e:86:9a:90:54:a2:
14:a1:c5:e8:00:f8:d4:2f:63:ff:98:aa:3b:f5:45:
d3:0a:2e:4d:de:bf:b9:4f:83:9e:bc:bf:29:c2:89:
0a:cc:b9:4f:55:e8:3b:85:a6:29:67:08:6f:16:c3:
4d:05:1c:22:67:4b:6c:13:f6:78:d9:66:dd:68:45:
7b:32:ee:5b:14:d9:20:67:2a:70:38:8a:36:f8:2a:
1d:0d:98:88:e2:89:cd:34:63:48:ae:d9:75:f5:e3:
d3:ca:85:6d:96:a7:1e:8d:fc:54:a4:5a:6b:6a:05:
cf:53:25:78:98:11:97:3c:a9:b7:0d:ae:57:97:f4:
05:11:3e:c9:d4:17:63:6f:22:30:55:a4:2b:5c:da:
de:cb:2f:76:d1:cc:93:c9:8c:08:18:f6:19:ca:3b:
32:f8:6e:5a:d3:0c:b8:76:96:55:f1:00:a0:ff:d8:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1E:34:43:72:F3:6F:F4:39:5C:41:46:B1:48:EF:E8:B2:40:38:D8
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/bh40Q3Lzb_Q5XEFGsUjv6LJAONg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.36.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:76:cd:61:89:bc:0b:59:11:4e:96:d0:e3:ae:b6:fc:45:58:
93:7c:ee:2e:90:af:fb:08:53:33:be:a8:5f:f8:21:98:1a:ae:
48:92:15:9e:d0:82:86:03:ae:1d:d0:a1:7f:06:d7:87:93:5d:
89:aa:db:64:a3:4d:c6:9c:54:78:f9:7f:7b:45:0f:eb:77:b0:
9d:36:fc:01:9f:7f:d5:d5:16:96:01:54:85:68:7c:eb:14:55:
e9:66:ce:5b:b5:47:bb:20:e8:39:84:7a:f4:7d:87:59:3a:c6:
0c:63:d8:4f:1d:e1:5e:4b:c3:bf:3f:ea:da:1f:cb:f2:d6:12:
19:c5:a9:5e:d8:44:53:09:1f:af:5c:83:9f:f6:c1:a3:ed:24:
83:53:da:a9:96:b1:c3:f7:c3:de:4b:f8:7b:5b:3e:94:d4:eb:
50:e3:d1:6f:ae:e2:26:c6:83:db:97:9b:d0:d7:28:4a:fe:c5:
73:81:19:81:50:ce:3e:b3:82:dd:77:39:85:95:a8:ec:ad:85:
1e:c0:b2:18:d6:fc:2c:97:6c:25:fb:c3:d9:3e:1e:7a:46:fe:
53:ea:78:34:42:17:aa:e1:b6:1b:5e:06:96:f5:6d:6c:aa:9c:
67:63:c7:29:0f:44:8f:d6:a0:3d:38:b5:db:ac:b5:de:10:51:
57:f9:45:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+j5o69091060CKtUx1PkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjUwMTAxMDM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTFlMzQ0MzcyZjM2ZmY0Mzk1YzQxNDZiMTQ4ZWZlOGIyNDAzOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX+4bXAt/Yijq1n2zjyorxomMsSh
sRXsu8dKd3WkeWbs6X3mdeBBDYAMwQ4dzT39Le4gP1RHTa5s+B3WIvossUd1SlnD
yBbWbK2vyvh5xQ3gnxMuhpqQVKIUocXoAPjUL2P/mKo79UXTCi5N3r+5T4OevL8p
wokKzLlPVeg7haYpZwhvFsNNBRwiZ0tsE/Z42WbdaEV7Mu5bFNkgZypwOIo2+Cod
DZiI4onNNGNIrtl19ePTyoVtlqcejfxUpFpragXPUyV4mBGXPKm3Da5Xl/QFET7J
1BdjbyIwVaQrXNreyy920cyTyYwIGPYZyjsy+G5a0wy4dpZV8QCg/9idcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4eNENy82/0OVxBRrFI7+iyQDjYMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvYmg0MFEzTHpiX1E1WEVGR3NVanY2TEpBT05nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJXIkMA0G
CSqGSIb3DQEBCwUAA4IBAQBtds1hibwLWRFOltDjrrb8RViTfO4ukK/7CFMzvqhf
+CGYGq5IkhWe0IKGA64d0KF/BteHk12Jqttko03GnFR4+X97RQ/rd7CdNvwBn3/V
1RaWAVSFaHzrFFXpZs5btUe7IOg5hHr0fYdZOsYMY9hPHeFeS8O/P+raH8vy1hIZ
xale2ERTCR+vXIOf9sGj7SSDU9qplrHD98PeS/h7Wz6U1OtQ49FvruImxoPbl5vQ
1yhK/sVzgRmBUM4+s4LddzmFlajsrYUewLIY1vwsl2wl+8PZPh56Rv5T6ng0Qheq
4bYbXgaW9W1sqpxnY8cpD0SP1qA9OLXbrLXeEFFX+UVE
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:29 2025 by rpki-client