Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/l7jY8kwE-M6c_UhPj-FUehU05zw.roa
File: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (raw, json)
Hash identifier: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=
Subject key identifier: 97:B8:D8:F2:4C:04:F8:CE:9C:FD:48:4F:8F:E1:54:7A:15:34:E7:3C
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019426D9B16B8D988A2F12EFF2FCA7096921
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/l7jY8kwE-M6c_UhPj-FUehU05zw.roa
Signing time: Thu 02 Jan 2025 11:49:48 +0000
ROA not before: Thu 02 Jan 2025 11:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136133
IP address blocks: 45.154.180.0/24 maxlen: 24
45.154.181.0/24 maxlen: 24
45.154.182.0/24 maxlen: 24
45.154.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b1:6b:8d:98:8a:2f:12:ef:f2:fc:a7:09:69:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Jan 2 11:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97b8d8f24c04f8ce9cfd484f8fe1547a1534e73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:94:2b:9f:85:7d:d2:3d:19:98:c9:61:8e:
80:90:25:45:a0:25:5c:fc:a0:c4:d7:fa:7c:d3:f4:
6e:26:4e:65:64:f6:e8:41:e5:a1:4d:fb:7c:6b:8d:
cc:04:12:bf:06:6e:52:02:36:fb:c0:11:75:74:cb:
fc:69:8f:b8:e6:6f:69:fc:92:9a:1b:53:2a:c9:e8:
f6:9c:66:72:f2:b6:10:11:e4:a5:00:8a:fc:c7:3c:
b9:6a:cb:b0:8f:1c:f4:8f:5f:95:ad:9c:a9:b7:0a:
64:89:e5:10:6d:68:d6:2c:ce:04:d5:ae:9b:0e:f0:
47:92:3e:ac:57:f5:8f:20:3d:be:00:11:a7:a0:0d:
3b:ef:64:9f:63:4e:2c:93:c9:9f:b3:71:71:04:fb:
8b:58:49:c3:fc:98:8d:67:06:d7:11:bc:91:d8:61:
ad:09:82:b8:6f:bc:59:83:b4:d5:64:95:0d:4f:b3:
09:05:63:42:6a:59:04:67:9c:34:55:b7:90:c3:fb:
ce:b3:1b:41:15:c8:be:d6:57:70:7c:9c:24:84:a6:
c1:d4:77:bf:0e:43:55:0f:43:27:26:3f:fd:e0:ee:
b2:9e:5d:30:5b:a0:dc:fa:b3:ce:5a:7d:ce:53:1b:
a0:5e:bc:d9:d9:6f:ae:e9:c0:f0:72:1a:02:e2:0e:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B8:D8:F2:4C:04:F8:CE:9C:FD:48:4F:8F:E1:54:7A:15:34:E7:3C
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/l7jY8kwE-M6c_UhPj-FUehU05zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.180.0/22
Signature Algorithm: sha256WithRSAEncryption
63:9e:d9:f3:9b:b7:5f:a3:c3:f1:2e:97:69:23:0e:11:6b:c9:
0c:47:c7:fd:d8:67:1f:51:98:67:0c:41:8f:ea:71:ee:f5:d1:
6d:58:6b:1b:dd:a8:17:b5:d5:a1:2a:3e:f2:59:02:9f:35:3a:
39:6c:9c:01:60:bd:ca:18:a0:e6:b1:8a:ab:fe:0b:d4:0d:aa:
c0:50:9e:38:8a:f7:b9:5f:cb:33:4d:4d:61:69:3a:98:2b:0f:
36:9b:c4:b5:5c:84:d7:61:58:12:14:37:02:be:0c:04:0c:7c:
f3:13:dd:29:a2:f8:dc:57:d7:ed:24:ca:24:dd:49:cc:f6:9b:
a4:28:62:ab:d6:e6:e3:42:c9:1d:d9:6f:d3:9d:c7:4d:83:b4:
92:05:6f:06:57:a8:29:13:23:8b:28:e7:e7:0f:68:88:bd:27:
45:26:12:08:19:43:97:2d:34:82:ba:ed:27:06:d1:97:ac:d7:
3a:79:9f:df:73:5f:b6:74:7c:8c:dd:87:ab:ed:bc:96:fd:fa:
e7:9d:39:ec:2e:a0:0b:fd:a3:5e:64:20:6f:c4:2b:39:12:47:
9d:a2:1f:58:69:50:4b:e6:11:d6:06:37:ed:c4:17:cd:36:1f:
e6:42:2e:52:4a:9f:c4:5c:82:93:32:fb:9c:8b:b8:5b:18:49:
73:c4:1f:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2bFrjZiKLxLv8vynCWkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2
ZjYwOWQwHhcNMjUwMTAyMTE0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2I4ZDhmMjRjMDRmOGNlOWNmZDQ4NGY4ZmUxNTQ3YTE1MzRlNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTCUK5+FfdI9GZjJYY6AkCVFoCVc
/KDE1/p80/RuJk5lZPboQeWhTft8a43MBBK/Bm5SAjb7wBF1dMv8aY+45m9p/JKa
G1Mqyej2nGZy8rYQEeSlAIr8xzy5asuwjxz0j1+VrZyptwpkieUQbWjWLM4E1a6b
DvBHkj6sV/WPID2+ABGnoA0772SfY04sk8mfs3FxBPuLWEnD/JiNZwbXEbyR2GGt
CYK4b7xZg7TVZJUNT7MJBWNCalkEZ5w0VbeQw/vOsxtBFci+1ldwfJwkhKbB1He/
DkNVD0MnJj/94O6ynl0wW6Dc+rPOWn3OUxugXrzZ2W+u6cDwchoC4g7G2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJe42PJMBPjOnP1IT4/hVHoVNOc8MB8GA1UdIwQY
MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt
ODc5MTNjMzU0OTJhLzEvbDdqWThrd0UtTTZjX1VoUGotRlVlaFUwNXp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh
LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZq0MA0G
CSqGSIb3DQEBCwUAA4IBAQBjntnzm7dfo8PxLpdpIw4Ra8kMR8f92GcfUZhnDEGP
6nHu9dFtWGsb3agXtdWhKj7yWQKfNTo5bJwBYL3KGKDmsYqr/gvUDarAUJ44ive5
X8szTU1haTqYKw82m8S1XITXYVgSFDcCvgwEDHzzE90povjcV9ftJMok3UnM9puk
KGKr1ubjQskd2W/TncdNg7SSBW8GV6gpEyOLKOfnD2iIvSdFJhIIGUOXLTSCuu0n
BtGXrNc6eZ/fc1+2dHyM3Yer7byW/frnnTnsLqAL/aNeZCBvxCs5Ekedoh9YaVBL
5hHWBjftxBfNNh/mQi5SSp/EXIKTMvuci7hbGElzxB8l
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:37:36 2025 by rpki-client