Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4qpuc0weJhujXKMCY6O8LKvinZI.roa
File: 4qpuc0weJhujXKMCY6O8LKvinZI.roa (raw, json)
Hash identifier: yf/Hp5sPbrul+e7b5fsc+MSpIGrBUkoI1tFfZf/pzOU=
Subject key identifier: E2:AA:6E:73:4C:1E:26:1B:A3:5C:A3:02:63:A3:BC:2C:AB:E2:9D:92
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0195A5171DACE40BC2F14BB8EDA9F6D65466
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4qpuc0weJhujXKMCY6O8LKvinZI.roa
Signing time: Mon 17 Mar 2025 17:11:50 +0000
ROA not before: Mon 17 Mar 2025 17:11:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.131.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:17:1d:ac:e4:0b:c2:f1:4b:b8:ed:a9:f6:d6:54:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 17 17:11:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2aa6e734c1e261ba35ca30263a3bc2cabe29d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8c:9d:24:e1:3e:81:8e:ac:eb:bf:5d:c8:d1:
79:48:2c:5e:5c:d4:d6:c5:97:91:6b:ff:bb:c3:ec:
08:ab:6c:cc:c5:24:9d:05:df:1c:d6:43:19:37:17:
25:17:58:19:b6:91:30:ea:ec:14:38:fd:ff:3d:00:
3e:15:98:d4:cc:98:33:11:08:0b:a5:24:d4:38:96:
e4:f0:a1:69:c6:fa:37:74:d3:cb:88:e1:98:93:86:
51:4a:31:4e:b8:ca:58:c3:f0:2a:4e:6d:f1:8e:f0:
5d:95:a9:7f:3d:1c:6b:73:4a:16:85:18:b4:bd:bb:
30:bc:1e:61:45:5f:7c:c5:44:88:83:21:04:25:c7:
de:39:ef:42:78:b4:3a:49:97:ef:d6:56:f0:d1:e7:
ce:22:65:1a:d5:7a:c5:d4:6b:d0:c4:25:76:f3:ab:
49:41:f4:27:66:69:9d:80:c3:b7:c0:4b:c7:6d:9f:
93:a0:6e:44:ea:6a:60:d0:0e:a3:f0:c6:bb:30:77:
df:2e:bc:54:54:df:4b:bb:f4:07:4e:e0:94:da:91:
c6:15:1c:1e:de:af:59:f8:b4:96:d0:c2:2e:15:39:
bf:e1:68:3c:aa:7e:ec:1c:9d:b8:b9:8d:55:06:9b:
fe:27:2d:81:7e:f4:59:2f:6b:38:b2:f5:db:f0:d1:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:6E:73:4C:1E:26:1B:A3:5C:A3:02:63:A3:BC:2C:AB:E2:9D:92
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4qpuc0weJhujXKMCY6O8LKvinZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.187.0/24
Signature Algorithm: sha256WithRSAEncryption
55:0e:51:fc:3b:7f:af:2d:78:89:13:11:b0:6b:4e:c9:bb:81:
e1:18:cd:de:d6:ae:fe:55:02:a1:d0:e0:9e:ea:89:48:f1:87:
d7:7b:69:87:c7:4a:6d:23:3c:37:79:13:40:41:b4:c3:76:d3:
6c:da:3c:b8:d4:c6:a6:58:17:22:13:73:0e:2e:c6:b4:c6:a7:
70:46:3d:bc:b6:2c:34:8d:2a:a3:c6:0b:15:43:e2:70:81:69:
c3:32:df:1c:9f:13:f1:49:39:db:1f:b0:6b:49:10:02:9a:96:
4c:1b:9b:97:3b:c7:fc:19:8e:2f:ea:ac:e8:a8:87:9c:bf:b9:
ad:6b:61:8e:93:26:33:79:62:6b:35:f7:1b:e2:22:ba:6c:e2:
92:40:fb:4c:53:0b:46:a2:b6:80:c7:e9:4a:00:ea:72:ad:13:
fe:92:7b:4c:3d:e6:eb:74:89:33:5e:6f:07:1c:5a:58:5d:41:
54:85:d8:b3:e2:a6:89:45:00:52:86:8a:7c:1b:a1:7a:90:4f:
55:97:52:94:1f:4a:8f:e3:0c:92:7f:92:e7:47:53:97:38:5f:
77:74:3b:94:92:d7:18:0c:01:f3:ba:ca:5e:a6:1d:f3:d9:30:
9c:ae:95:d2:e6:97:98:42:83:0a:b7:f0:46:22:19:a6:8f:f4:
ca:a3:df:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWlFx2s5AvC8Uu47an21lRmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjUwMzE3MTcxMTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmFhNmU3MzRjMWUyNjFiYTM1Y2EzMDI2M2EzYmMyY2FiZTI5ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YydJOE+gY6s679dyNF5SCxeXNTW
xZeRa/+7w+wIq2zMxSSdBd8c1kMZNxclF1gZtpEw6uwUOP3/PQA+FZjUzJgzEQgL
pSTUOJbk8KFpxvo3dNPLiOGYk4ZRSjFOuMpYw/AqTm3xjvBdlal/PRxrc0oWhRi0
vbswvB5hRV98xUSIgyEEJcfeOe9CeLQ6SZfv1lbw0efOImUa1XrF1GvQxCV286tJ
QfQnZmmdgMO3wEvHbZ+ToG5E6mpg0A6j8Ma7MHffLrxUVN9Lu/QHTuCU2pHGFRwe
3q9Z+LSW0MIuFTm/4Wg8qn7sHJ24uY1VBpv+Jy2BfvRZL2s4svXb8NGYlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOKqbnNMHiYbo1yjAmOjvCyr4p2SMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvNHFwdWMwd2VKaHVqWEtNQ1k2TzhMS3ZpblpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYO7MA0G
CSqGSIb3DQEBCwUAA4IBAQBVDlH8O3+vLXiJExGwa07Ju4HhGM3e1q7+VQKh0OCe
6olI8YfXe2mHx0ptIzw3eRNAQbTDdtNs2jy41MamWBciE3MOLsa0xqdwRj28tiw0
jSqjxgsVQ+JwgWnDMt8cnxPxSTnbH7BrSRACmpZMG5uXO8f8GY4v6qzoqIecv7mt
a2GOkyYzeWJrNfcb4iK6bOKSQPtMUwtGoraAx+lKAOpyrRP+kntMPebrdIkzXm8H
HFpYXUFUhdiz4qaJRQBShop8G6F6kE9Vl1KUH0qP4wySf5LnR1OXOF93dDuUktcY
DAHzuspeph3z2TCcrpXS5peYQoMKt/BGIhmmj/TKo9/w
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:55:55 2025 by rpki-client