Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/mOu9jLrb-R_yvnWCY3nrq9lD9DE.roa
File: mOu9jLrb-R_yvnWCY3nrq9lD9DE.roa (raw, json)
Hash identifier: 2fjxB0iJ7XeKX3j3JQUiqzGEumVdltx7nxS7/boooNY=
Subject key identifier: 98:EB:BD:8C:BA:DB:F9:1F:F2:BE:75:82:63:79:EB:AB:D9:43:F4:31
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1C877C84CFE4C407268FA6D474D1
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/mOu9jLrb-R_yvnWCY3nrq9lD9DE.roa
Signing time: Thu 02 Jan 2025 07:48:52 +0000
ROA not before: Thu 02 Jan 2025 07:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 26954
IP address blocks: 45.43.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 21:50:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:1c:87:7c:84:cf:e4:c4:07:26:8f:a6:d4:74:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98ebbd8cbadbf91ff2be75826379ebabd943f431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9c:ab:f3:0b:cd:e1:18:5f:3e:66:fd:07:69:
73:c9:e7:12:8a:bb:bd:fb:5b:5e:ae:c1:6c:a5:b7:
09:28:57:ae:98:96:5a:92:8a:d7:2e:39:e5:bc:9b:
10:a3:ca:da:3c:9b:65:8e:3c:49:1d:b1:7f:0a:a2:
5e:fd:fd:66:6a:63:c4:16:47:0c:b6:d4:cc:ab:95:
66:a5:05:a9:3e:a1:03:cd:f5:e0:2c:d8:ca:1e:07:
97:6a:de:80:ee:b9:9b:88:98:e2:62:3f:dc:a1:56:
8b:70:7e:ef:bc:45:2f:33:e8:54:fe:af:8c:bd:6d:
6a:76:fe:c6:b8:0d:dc:d0:ab:01:ba:fe:c2:92:9b:
fd:79:c7:97:de:71:90:e4:82:e5:25:1b:f7:85:c4:
f6:26:ec:25:a6:de:e5:5c:67:b7:c3:41:18:96:aa:
d3:b3:dd:94:0e:5c:69:36:f3:3f:d8:61:d2:e2:cd:
8e:3c:ea:8c:aa:15:6a:32:9d:5a:fb:a2:8c:16:df:
a5:92:89:e9:5a:b1:c9:84:86:79:b4:2f:08:62:1c:
80:ad:35:9d:e4:db:a4:73:34:f4:7d:d7:af:99:fc:
5a:e4:cc:20:20:0a:bf:be:2e:2f:d8:01:d6:7b:a8:
c9:bf:0d:2c:10:16:a3:b2:9f:ee:73:25:97:8c:34:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EB:BD:8C:BA:DB:F9:1F:F2:BE:75:82:63:79:EB:AB:D9:43:F4:31
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/mOu9jLrb-R_yvnWCY3nrq9lD9DE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ef:cd:f8:24:b1:d1:4c:7b:4f:70:8e:f6:52:bc:80:a8:ff:
d0:1f:88:37:3d:b7:c3:6a:00:82:7c:fa:56:c8:ca:20:80:cf:
e2:ed:8a:c3:ad:d3:b3:f1:bc:6e:9b:86:2c:08:bb:69:23:32:
f4:30:99:02:93:29:a1:68:6c:32:7c:f7:6f:2c:0f:ee:53:c8:
a2:b3:4d:6f:d7:06:64:8c:0f:21:a5:be:64:97:32:5c:9b:1b:
a4:c8:d1:74:f2:aa:eb:f3:90:6e:e0:01:28:9f:65:ff:bc:32:
14:ac:63:f2:ef:55:f4:fe:dc:e5:1a:23:fc:6f:a6:4b:83:b7:
c9:7e:51:f6:7d:1c:1a:fa:b3:e1:fe:45:d2:f7:92:c7:f7:c5:
a7:50:2d:87:10:07:69:e6:c5:b7:af:37:04:9a:ff:e1:8e:86:
0c:0a:46:82:84:ca:4d:ec:1f:11:bb:25:8b:57:ef:e5:2c:95:
a8:6e:8c:91:4b:25:64:ed:fe:4e:90:de:b6:09:d2:60:29:79:
8b:59:3f:3f:e2:e1:19:98:31:d7:79:16:47:71:c9:27:f4:d2:
99:40:5b:29:63:31:ba:f8:a5:7a:67:6f:23:55:cb:8a:e8:9b:
0e:db:0f:f9:63:f3:84:ad:1b:d6:36:70:1e:6d:7d:b8:a8:d5:
75:75:42:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/RyHfITP5MQHJo+m1HTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwMTAyMDc0ODUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGViYmQ4Y2JhZGJmOTFmZjJiZTc1ODI2Mzc5ZWJhYmQ5NDNmNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5yr8wvN4RhfPmb9B2lzyecSiru9
+1tersFspbcJKFeumJZakorXLjnlvJsQo8raPJtljjxJHbF/CqJe/f1mamPEFkcM
ttTMq5VmpQWpPqEDzfXgLNjKHgeXat6A7rmbiJjiYj/coVaLcH7vvEUvM+hU/q+M
vW1qdv7GuA3c0KsBuv7Ckpv9eceX3nGQ5ILlJRv3hcT2Juwlpt7lXGe3w0EYlqrT
s92UDlxpNvM/2GHS4s2OPOqMqhVqMp1a+6KMFt+lkonpWrHJhIZ5tC8IYhyArTWd
5NukczT0fdevmfxa5MwgIAq/vi4v2AHWe6jJvw0sEBajsp/ucyWXjDTyUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJjrvYy62/kf8r51gmN566vZQ/QxMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvbU91OWpMcmItUl95dm5XQ1kzbnJxOWxEOURFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSuOMA0G
CSqGSIb3DQEBCwUAA4IBAQCN7834JLHRTHtPcI72UryAqP/QH4g3PbfDagCCfPpW
yMoggM/i7YrDrdOz8bxum4YsCLtpIzL0MJkCkymhaGwyfPdvLA/uU8iis01v1wZk
jA8hpb5klzJcmxukyNF08qrr85Bu4AEon2X/vDIUrGPy71X0/tzlGiP8b6ZLg7fJ
flH2fRwa+rPh/kXS95LH98WnUC2HEAdp5sW3rzcEmv/hjoYMCkaChMpN7B8RuyWL
V+/lLJWoboyRSyVk7f5OkN62CdJgKXmLWT8/4uEZmDHXeRZHcckn9NKZQFspYzG6
+KV6Z28jVcuK6JsO2w/5Y/OErRvWNnAebX24qNV1dUKz
-----END CERTIFICATE-----
Generated at Fri Apr 11 04:04:55 2025 by rpki-client