Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa
File: VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa (raw, json)
Hash identifier: UCNXZIoFQpfnjE6fYM3S8XtL2xTSW1yWAPPGK6KgE1I=
Subject key identifier: 54:FE:8B:86:13:3B:40:7E:01:8C:75:E2:D9:1C:A2:3B:08:92:54:AF
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 019566F2D12D1F69361D39C6109924582EFE
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa
Signing time: Wed 05 Mar 2025 15:35:44 +0000
ROA not before: Wed 05 Mar 2025 15:35:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53730
IP address blocks: 45.145.55.0/24 maxlen: 24
194.34.245.0/24 maxlen: 24
194.34.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:f2:d1:2d:1f:69:36:1d:39:c6:10:99:24:58:2e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Mar 5 15:35:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54fe8b86133b407e018c75e2d91ca23b089254af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:03:c6:ad:2c:d8:da:ac:69:26:f7:ae:02:f8:
ad:34:36:b9:2f:2d:10:76:73:46:79:76:02:82:97:
5d:5c:11:fa:a1:7f:3d:e6:c0:58:45:1a:db:30:70:
9f:dc:bc:a2:5d:0a:be:0c:18:7d:a3:44:ac:b9:ea:
b0:19:47:df:e9:b7:f7:6e:87:26:92:cf:68:25:ac:
ea:dc:7c:d0:94:41:ad:d2:27:8f:3a:ee:67:6f:0e:
b9:2e:0c:2c:bb:83:b8:c9:85:7f:51:50:eb:0c:20:
39:70:0b:d1:9c:28:c6:1d:33:cb:df:ca:32:c6:1b:
13:69:5e:33:54:40:96:b8:e5:38:24:c8:50:06:35:
be:8a:59:b2:c7:1a:1e:9f:cb:13:d5:b7:b9:34:96:
f3:4e:1a:f6:b5:8c:c2:c0:89:f2:9b:ce:78:0e:ba:
0d:92:0d:33:18:26:bd:ad:d7:b1:87:8b:ce:64:21:
ee:42:ba:4b:7a:d1:78:e0:bf:56:60:39:c5:3a:01:
fd:f9:36:04:a7:b9:3e:af:21:cb:54:5e:f3:b1:43:
18:dd:d3:ba:ce:bf:a3:68:21:86:89:ba:41:bd:fb:
e0:69:6c:97:92:fe:d6:25:d1:28:bf:1d:85:b8:bb:
cc:bd:c8:a3:f7:9c:0c:bd:7c:6a:96:1c:92:56:bc:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FE:8B:86:13:3B:40:7E:01:8C:75:E2:D9:1C:A2:3B:08:92:54:AF
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/VP6LhhM7QH4BjHXi2RyiOwiSVK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.55.0/24
194.34.245.0/24
194.34.247.0/24
Signature Algorithm: sha256WithRSAEncryption
79:62:86:1a:1d:33:c7:e0:b9:b7:6f:cd:e1:93:55:47:84:9a:
c4:47:8f:38:4f:0e:96:34:00:01:22:bd:b9:a3:3b:cb:a9:c7:
8c:7a:6a:03:01:ae:82:aa:e8:da:59:fc:6a:b6:18:f5:6d:0d:
c5:93:5f:9e:1e:8d:b5:22:4a:e7:93:a0:71:03:d2:df:5a:e2:
55:fd:b7:a1:d6:e9:1a:63:5e:47:ea:eb:32:0e:c6:fb:f4:a4:
97:40:43:c6:53:f4:bd:4e:9a:27:57:6b:3d:31:14:d4:1a:bd:
9c:c2:1f:96:04:b8:f2:16:72:08:9b:d4:fe:a1:93:69:7b:7e:
11:fd:e4:05:dc:af:e1:3f:8c:07:70:58:e8:eb:a9:2a:83:d3:
16:a7:c4:5d:85:54:77:ad:b5:2b:ae:01:0a:47:25:c8:30:30:
9c:2b:77:a9:b5:e5:8b:db:c7:1c:9c:28:d0:94:a0:4e:b8:27:
9d:00:6a:73:5d:d2:59:d6:16:32:f4:91:1f:34:3e:36:e2:12:
7e:1e:8e:65:3f:14:a7:bd:65:48:bb:79:b7:9c:f4:33:34:dc:
fa:00:69:86:e8:c7:56:37:43:11:ca:43:a2:0d:50:1e:da:02:
65:de:9d:32:c3:62:b4:7e:c4:37:9b:81:71:06:cd:ff:88:37:
ba:69:49:fc
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVm8tEtH2k2HTnGEJkkWC7+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3
ZWNiMGYwHhcNMjUwMzA1MTUzNTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGZlOGI4NjEzM2I0MDdlMDE4Yzc1ZTJkOTFjYTIzYjA4OTI1NGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1APGrSzY2qxpJveuAvitNDa5Ly0Q
dnNGeXYCgpddXBH6oX895sBYRRrbMHCf3LyiXQq+DBh9o0SsueqwGUff6bf3bocm
ks9oJazq3HzQlEGt0iePOu5nbw65Lgwsu4O4yYV/UVDrDCA5cAvRnCjGHTPL38oy
xhsTaV4zVECWuOU4JMhQBjW+ilmyxxoen8sT1be5NJbzThr2tYzCwInym854DroN
kg0zGCa9rdexh4vOZCHuQrpLetF44L9WYDnFOgH9+TYEp7k+ryHLVF7zsUMY3dO6
zr+jaCGGibpBvfvgaWyXkv7WJdEovx2FuLvMvcij95wMvXxqlhySVrw07wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFT+i4YTO0B+AYx14tkcojsIklSvMB8GA1UdIwQY
MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt
ZmQ3ZjE3YmIxYTVjLzEvVlA2TGhoTTdRSDRCakhYaTJSeWlPd2lTVks4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj
LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZE3AwQA
wiL1AwQAwiL3MA0GCSqGSIb3DQEBCwUAA4IBAQB5YoYaHTPH4Lm3b83hk1VHhJrE
R484Tw6WNAABIr25ozvLqceMemoDAa6CqujaWfxqthj1bQ3Fk1+eHo21Ikrnk6Bx
A9LfWuJV/beh1ukaY15H6usyDsb79KSXQEPGU/S9TponV2s9MRTUGr2cwh+WBLjy
FnIIm9T+oZNpe34R/eQF3K/hP4wHcFjo66kqg9MWp8RdhVR3rbUrrgEKRyXIMDCc
K3epteWL28ccnCjQlKBOuCedAGpzXdJZ1hYy9JEfND424hJ+Ho5lPxSnvWVIu3m3
nPQzNNz6AGmG6MdWN0MRykOiDVAe2gJl3p0yw2K0fsQ3m4FxBs3/iDe6aUn8
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:52:29 2025 by rpki-client