Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RoeNvfze_l0wwHQkC4K5aDQfvPw.roa
File: RoeNvfze_l0wwHQkC4K5aDQfvPw.roa (raw, json)
Hash identifier: 881DMTU1fN+tJeM1pZWk8T7Ybb/x/aaC41MxboLed+s=
Subject key identifier: 46:87:8D:BD:FC:DE:FE:5D:30:C0:74:24:0B:82:B9:68:34:1F:BC:FC
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D9A23F3244FC1D0AABB0D0B16700
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RoeNvfze_l0wwHQkC4K5aDQfvPw.roa
Signing time: Wed 01 Jan 2025 07:47:53 +0000
ROA not before: Wed 01 Jan 2025 07:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200019
IP address blocks: 45.145.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 19:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d9:a2:3f:32:44:fc:1d:0a:ab:b0:d0:b1:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46878dbdfcdefe5d30c074240b82b968341fbcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:0f:12:3b:88:a0:69:44:e4:b4:37:4c:73:
3d:1d:bd:6a:3d:49:c0:45:e4:65:cc:d5:8a:f1:78:
46:6c:87:e7:1d:fc:a6:be:fe:fd:9a:eb:d3:e4:15:
a4:47:ea:41:67:b4:bf:cd:96:9d:2c:04:d6:20:48:
cf:e6:d7:c5:98:2d:bd:d5:2f:c1:a2:12:60:81:3c:
0d:fc:de:e9:ff:fc:44:fe:f5:7c:0e:09:b4:7c:46:
a9:fa:ff:b0:c6:c3:a0:47:84:99:c3:b4:97:90:3a:
61:03:99:65:b8:01:1d:bd:89:72:0b:aa:6d:2f:d5:
d9:88:e2:ae:61:9d:bf:5c:b5:44:88:68:4b:db:44:
6c:c9:ef:3f:d6:03:30:ee:c1:5d:92:86:bc:c3:07:
ba:97:f1:18:4f:df:c9:64:b8:77:f6:95:9c:87:58:
92:4d:39:3a:42:2d:59:73:8e:da:85:ed:85:d9:6e:
63:ce:7b:e6:e1:60:93:2e:bb:28:76:d1:c8:bf:22:
b0:0f:60:13:6c:73:06:3d:66:05:09:a6:c9:9e:ba:
b4:2b:62:69:b3:84:7d:86:72:50:fc:cd:0e:a4:a8:
f5:d6:56:03:a8:85:f4:98:0e:0c:89:92:0d:c8:9f:
7f:a6:fc:95:44:80:1f:28:77:f0:28:1b:c9:1a:fa:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:87:8D:BD:FC:DE:FE:5D:30:C0:74:24:0B:82:B9:68:34:1F:BC:FC
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/RoeNvfze_l0wwHQkC4K5aDQfvPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.0.0/24
Signature Algorithm: sha256WithRSAEncryption
72:a2:25:4a:19:d5:4d:e4:f9:40:79:1e:de:97:42:65:f8:ff:
7b:80:e9:d8:cd:d1:e4:f1:be:b8:91:7f:fc:71:e1:11:ef:ac:
50:58:61:c4:f3:95:94:a4:4d:ab:72:2f:58:80:14:0e:05:59:
00:a5:dc:d4:52:fb:73:c6:e8:15:33:38:aa:f1:eb:e3:fe:04:
b6:fd:5c:a6:30:78:05:76:31:76:fc:62:45:bb:80:82:f0:4e:
f7:29:9d:ce:12:c4:87:8c:9e:ec:33:6c:7d:ac:63:53:40:14:
c1:a1:92:25:93:72:6a:11:1c:3d:3e:01:09:1d:b7:62:d8:7f:
ba:c3:ee:10:7b:10:39:42:8e:b0:30:a9:e8:af:bb:0d:3d:1b:
54:d4:7c:a5:dd:35:77:6b:60:81:d8:8f:ff:52:1b:74:e5:2c:
63:90:52:8d:f3:56:7c:c5:1f:4a:f8:4e:18:f0:d7:c9:41:9a:
0b:52:35:53:5a:be:e0:c9:89:98:56:0e:2b:84:e8:e1:8c:72:
d0:1e:f3:a7:02:0c:56:c5:61:63:37:c5:f8:8e:41:e2:d3:b9:
c8:44:d9:c3:be:40:50:c5:40:c9:82:14:13:0b:13:66:f0:c6:
5a:78:d9:e8:c4:8d:ef:ab:d9:65:7b:04:23:b6:4c:4d:23:9f:
f1:69:0f:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1dmiPzJE/B0Kq7DQsWcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjUwMTAxMDc0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njg3OGRiZGZjZGVmZTVkMzBjMDc0MjQwYjgyYjk2ODM0MWZiY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVAPEjuIoGlE5LQ3THM9Hb1qPUnA
ReRlzNWK8XhGbIfnHfymvv79muvT5BWkR+pBZ7S/zZadLATWIEjP5tfFmC291S/B
ohJggTwN/N7p//xE/vV8Dgm0fEap+v+wxsOgR4SZw7SXkDphA5lluAEdvYlyC6pt
L9XZiOKuYZ2/XLVEiGhL20Rsye8/1gMw7sFdkoa8wwe6l/EYT9/JZLh39pWch1iS
TTk6Qi1Zc47ahe2F2W5jznvm4WCTLrsodtHIvyKwD2ATbHMGPWYFCabJnrq0K2Jp
s4R9hnJQ/M0OpKj11lYDqIX0mA4MiZINyJ9/pvyVRIAfKHfwKBvJGvq4rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEaHjb383v5dMMB0JAuCuWg0H7z8MB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvUm9lTnZmemVfbDB3d0hRa0M0SzVhRFFmdlB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZEAMA0G
CSqGSIb3DQEBCwUAA4IBAQByoiVKGdVN5PlAeR7el0Jl+P97gOnYzdHk8b64kX/8
ceER76xQWGHE85WUpE2rci9YgBQOBVkApdzUUvtzxugVMziq8evj/gS2/VymMHgF
djF2/GJFu4CC8E73KZ3OEsSHjJ7sM2x9rGNTQBTBoZIlk3JqERw9PgEJHbdi2H+6
w+4QexA5Qo6wMKnor7sNPRtU1Hyl3TV3a2CB2I//Uht05SxjkFKN81Z8xR9K+E4Y
8NfJQZoLUjVTWr7gyYmYVg4rhOjhjHLQHvOnAgxWxWFjN8X4jkHi07nIRNnDvkBQ
xUDJghQTCxNm8MZaeNnoxI3vq9llewQjtkxNI5/xaQ99
-----END CERTIFICATE-----
Generated at Fri Apr 11 05:26:49 2025 by rpki-client