Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/RQstJ5Hzf4lSSJD1OevGZxAEWkw.roa
File: RQstJ5Hzf4lSSJD1OevGZxAEWkw.roa (raw, json)
Hash identifier: DKmpWhYiScUgITQkVLFk78lbIWZwU/oZxtOXJ3y76t0=
Subject key identifier: 45:0B:2D:27:91:F3:7F:89:52:48:90:F5:39:EB:C6:67:10:04:5A:4C
Certificate issuer: /CN=578041152df80f6e531342663dd003109905084f
Certificate serial: 019421B1CBC50E52506316830BDCF41478FF
Authority key identifier: 57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/RQstJ5Hzf4lSSJD1OevGZxAEWkw.roa
Signing time: Wed 01 Jan 2025 11:48:07 +0000
ROA not before: Wed 01 Jan 2025 11:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202182
IP address blocks: 45.153.90.0/24 maxlen: 24
2a13:9c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cb:c5:0e:52:50:63:16:83:0b:dc:f4:14:78:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=578041152df80f6e531342663dd003109905084f
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=450b2d2791f37f89524890f539ebc66710045a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:25:02:d5:8e:26:12:42:f0:f7:61:02:a4:a6:
83:53:48:b8:cc:db:05:9a:a9:54:36:4e:28:8a:59:
a0:b1:61:6d:91:46:78:6e:29:c4:7e:04:f7:61:c8:
97:bb:db:43:8d:e2:aa:cf:eb:bb:d5:c6:51:67:86:
01:0c:0f:7c:5b:31:d8:c0:c8:7b:f9:92:28:13:e6:
81:d4:fb:64:84:d7:9f:78:b9:90:06:b4:4e:fe:36:
e5:39:b8:aa:dc:3e:f8:c1:77:c8:c8:ea:97:77:bd:
97:e5:3d:96:cb:f7:6c:fa:30:ba:1e:98:6b:89:81:
a5:e6:43:1b:92:35:d3:05:d5:53:ad:37:1a:29:a3:
1b:1f:fb:a5:af:ab:98:2c:95:cc:ca:e1:4c:55:09:
dc:9c:cf:07:59:a7:da:de:64:fa:7f:b0:47:71:df:
f3:27:e4:6b:a8:a3:72:89:9d:8f:20:18:71:e8:de:
19:f7:2f:19:e3:98:ec:bd:a4:70:43:0e:45:9c:c9:
d7:60:53:a4:34:64:f4:92:ba:ca:de:12:3c:e0:33:
67:8e:5f:5f:13:d6:30:f4:b5:14:28:a7:d4:85:13:
f3:e4:55:ab:8a:f5:a7:08:38:03:41:98:bb:eb:b6:
5e:ea:95:fb:14:39:ee:3c:46:ba:a4:cf:88:9b:ca:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0B:2D:27:91:F3:7F:89:52:48:90:F5:39:EB:C6:67:10:04:5A:4C
X509v3 Authority Key Identifier:
keyid:57:80:41:15:2D:F8:0F:6E:53:13:42:66:3D:D0:03:10:99:05:08:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4BBFS34D25TE0JmPdADEJkFCE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/RQstJ5Hzf4lSSJD1OevGZxAEWkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afa1ee-8d80-4d5a-a739-c612a70abb42/1/V4BBFS34D25TE0JmPdADEJkFCE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.90.0/24
IPv6:
2a13:9c0::/48
Signature Algorithm: sha256WithRSAEncryption
99:f6:7a:53:6c:89:9d:0c:b7:40:5c:6c:55:dc:f5:a5:61:65:
cb:59:b8:61:f2:b9:69:64:8a:19:d3:54:7f:4a:aa:ae:2f:2f:
42:86:fb:5e:bd:36:14:62:19:c6:e0:72:1c:f7:79:6b:91:32:
27:18:12:fe:29:93:e2:5a:8d:56:0f:54:b9:b2:42:75:7f:14:
b4:15:4f:39:4e:53:94:6c:1f:22:c7:8c:2f:aa:a8:14:66:3c:
c9:19:68:5e:49:9f:5a:19:d3:d7:87:3a:c6:73:c1:10:5f:64:
c2:33:a0:08:79:e6:a8:9a:cf:4d:24:34:f3:5c:92:e8:df:8a:
c4:cb:6d:1a:08:db:34:51:3d:ef:c0:cb:07:b5:bd:7d:db:c1:
1f:32:6b:0e:b7:e1:a1:46:35:3c:b6:04:7b:50:4e:dd:b8:da:
11:19:29:ff:a8:5c:f6:50:71:b0:ec:58:e3:ef:d7:32:4c:66:
df:ad:f0:76:e1:49:46:9b:31:40:20:18:a1:79:da:82:0a:4b:
6c:5d:80:78:ff:f8:c0:a7:3a:03:21:09:91:9d:e0:07:a5:fd:
c3:1c:42:3e:23:d9:d8:98:40:64:0d:51:f3:fe:a4:9b:16:16:
5d:e8:94:01:19:c0:59:a1:f6:30:99:06:51:bd:6c:80:53:06:
2a:5d:9b:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhscvFDlJQYxaDC9z0FHj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ODA0MTE1MmRmODBmNmU1MzEzNDI2NjNkZDAwMzEwOTkw
NTA4NGYwHhcNMjUwMTAxMTE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTBiMmQyNzkxZjM3Zjg5NTI0ODkwZjUzOWViYzY2NzEwMDQ1YTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SUC1Y4mEkLw92ECpKaDU0i4zNsF
mqlUNk4oilmgsWFtkUZ4binEfgT3YciXu9tDjeKqz+u71cZRZ4YBDA98WzHYwMh7
+ZIoE+aB1PtkhNefeLmQBrRO/jblObiq3D74wXfIyOqXd72X5T2Wy/ds+jC6Hphr
iYGl5kMbkjXTBdVTrTcaKaMbH/ulr6uYLJXMyuFMVQncnM8HWafa3mT6f7BHcd/z
J+RrqKNyiZ2PIBhx6N4Z9y8Z45jsvaRwQw5FnMnXYFOkNGT0krrK3hI84DNnjl9f
E9Yw9LUUKKfUhRPz5FWrivWnCDgDQZi767Ze6pX7FDnuPEa6pM+Im8rb6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEULLSeR83+JUkiQ9TnrxmcQBFpMMB8GA1UdIwQY
MBaAFFeAQRUt+A9uUxNCZj3QAxCZBQhPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjRCQkZTMzREMjVURTBKbVBkQURFSmtGQ0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZmExZWUtOGQ4MC00ZDVhLWE3Mzkt
YzYxMmE3MGFiYjQyLzEvUlFzdEo1SHpmNGxTU0pEMU9ldkdaeEFFV2t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZmExZWUtOGQ4MC00ZDVhLWE3MzktYzYxMmE3MGFiYjQy
LzEvVjRCQkZTMzREMjVURTBKbVBkQURFSmtGQ0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZlaMA8E
AgACMAkDBwAqEwnAAAAwDQYJKoZIhvcNAQELBQADggEBAJn2elNsiZ0Mt0BcbFXc
9aVhZctZuGHyuWlkihnTVH9Kqq4vL0KG+169NhRiGcbgchz3eWuRMicYEv4pk+Ja
jVYPVLmyQnV/FLQVTzlOU5RsHyLHjC+qqBRmPMkZaF5Jn1oZ09eHOsZzwRBfZMIz
oAh55qiaz00kNPNckujfisTLbRoI2zRRPe/Aywe1vX3bwR8yaw634aFGNTy2BHtQ
Tt242hEZKf+oXPZQcbDsWOPv1zJMZt+t8HbhSUabMUAgGKF52oIKS2xdgHj/+MCn
OgMhCZGd4Ael/cMcQj4j2diYQGQNUfP+pJsWFl3olAEZwFmh9jCZBlG9bIBTBipd
m9o=
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:46:28 2025 by rpki-client