Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/RbouPlrvjxMByw-unVzRP4nNXJw.roa
File: RbouPlrvjxMByw-unVzRP4nNXJw.roa (raw, json)
Hash identifier: XJEjUdWYmJvOBDOP+ovs4X9aLXbBgk9gR+EZ+bBT2d8=
Subject key identifier: 45:BA:2E:3E:5A:EF:8F:13:01:CB:0F:AE:9D:5C:D1:3F:89:CD:5C:9C
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 0194206859AA5383FEE07E5B38ADEF9EA0B0
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/RbouPlrvjxMByw-unVzRP4nNXJw.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208283
IP address blocks: 45.144.6.0/23 maxlen: 23
2a0e:e744::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 17:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:59:aa:53:83:fe:e0:7e:5b:38:ad:ef:9e:a0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45ba2e3e5aef8f1301cb0fae9d5cd13f89cd5c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:41:d8:5b:dc:8a:62:3e:c9:3d:07:81:20:
74:f3:7f:94:a7:19:5d:2c:d9:3c:de:c8:d2:16:6a:
ce:11:aa:00:d7:da:b7:77:1a:eb:59:c8:19:d6:cb:
d7:08:40:df:dc:f6:58:5f:1a:88:47:71:40:1d:44:
cd:3e:b6:b7:df:7c:ab:a2:47:6a:e6:2f:8a:3b:c9:
21:61:cc:bc:d2:97:7b:04:91:f3:1b:45:dd:97:54:
20:e6:76:2f:1c:63:10:e1:bb:47:db:8d:29:6e:cc:
0a:37:b2:bd:3a:ef:cc:7d:d8:7b:a3:50:23:43:78:
c5:aa:4a:7e:3a:11:1c:99:24:11:d6:74:3c:c9:d5:
30:13:80:3d:59:bc:1f:4c:42:29:e5:dc:2c:b9:1f:
64:91:eb:e0:a8:18:54:3c:ec:e6:b9:76:2e:9b:4e:
62:b5:a9:b1:62:e2:d2:a2:19:6a:3c:f8:48:f7:c4:
5d:a7:94:8b:90:37:8d:67:a9:a0:5a:bb:4e:cf:d2:
f8:4c:3b:fe:2f:44:5a:6c:88:76:02:1c:9c:1d:f8:
9b:0e:fb:1c:b3:ce:70:81:83:34:26:1d:7b:7a:c7:
b4:8b:40:38:e1:e8:52:33:9c:b6:f5:60:e9:82:78:
75:1b:6d:3a:e4:95:e3:59:01:e6:70:69:7f:5c:d5:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:2E:3E:5A:EF:8F:13:01:CB:0F:AE:9D:5C:D1:3F:89:CD:5C:9C
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/RbouPlrvjxMByw-unVzRP4nNXJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.6.0/23
IPv6:
2a0e:e744::/30
Signature Algorithm: sha256WithRSAEncryption
af:95:83:3d:35:fb:17:ef:0b:f1:9a:4a:3b:ed:e1:c9:0c:ab:
52:c9:ed:dd:b0:bc:71:fe:23:8b:ee:9d:3a:62:08:43:b1:67:
e7:16:8c:a2:08:4f:b5:63:47:a6:03:5d:e6:4d:2e:7b:90:25:
96:9a:88:e4:52:81:de:a4:3a:92:1b:94:fd:3f:02:f6:b0:5c:
c3:67:fe:e1:37:41:4a:49:16:9a:00:ca:41:03:32:d3:c3:5a:
5e:7f:42:f7:0c:cf:35:0b:26:9f:d9:9e:72:c5:c4:42:33:01:
61:b8:39:e7:2d:4d:11:f9:ec:11:4b:fc:84:77:9d:88:5d:6f:
a9:25:16:c8:02:ff:9c:8c:35:90:3b:fd:d6:c0:9b:5a:24:07:
00:d5:b1:a4:98:42:b1:ff:03:cd:cf:38:f2:89:c4:a7:17:ef:
70:45:33:9f:51:fc:b6:15:41:09:6e:cc:e0:29:4d:17:4b:0a:
22:4b:34:39:e6:bd:20:89:4e:6e:dc:10:a4:9d:0d:66:d7:4d:
ff:d0:ab:de:47:30:a2:32:3d:67:12:1f:d4:60:bc:2f:a7:36:
26:f1:86:15:07:3e:0f:be:e7:70:68:70:d5:a6:7c:13:3e:80:
ea:56:1b:de:f9:f1:a7:9d:3f:db:5e:de:c0:71:5c:48:1f:52:
4d:41:db:48
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgaFmqU4P+4H5bOK3vnqCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTc1ZGI0Mzc4ZGZjYTdjMjk1M2I4NmQzYjE4ZGM4YjIx
OGVjNmIwHhcNMjUwMTAxMDU0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWJhMmUzZTVhZWY4ZjEzMDFjYjBmYWU5ZDVjZDEzZjg5Y2Q1YzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuONB2FvcimI+yT0HgSB083+Upxld
LNk83sjSFmrOEaoA19q3dxrrWcgZ1svXCEDf3PZYXxqIR3FAHUTNPra333yrokdq
5i+KO8khYcy80pd7BJHzG0Xdl1Qg5nYvHGMQ4btH240pbswKN7K9Ou/Mfdh7o1Aj
Q3jFqkp+OhEcmSQR1nQ8ydUwE4A9WbwfTEIp5dwsuR9kkevgqBhUPOzmuXYum05i
tamxYuLSohlqPPhI98Rdp5SLkDeNZ6mgWrtOz9L4TDv+L0RabIh2AhycHfibDvsc
s85wgYM0Jh17ese0i0A44ehSM5y29WDpgnh1G2065JXjWQHmcGl/XNWuHQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEW6Lj5a748TAcsPrp1c0T+JzVycMB8GA1UdIwQY
MBaAFKuXXbQ3jfynwpU7htOxjciyGOxrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTIt
Y2RiZDU1NmUxNzQ5LzEvUmJvdVBscnZqeE1CeXctdW5WelJQNG5OWEp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTItY2RiZDU1NmUxNzQ5
LzEvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLZAGMA0E
AgACMAcDBQIqDudEMA0GCSqGSIb3DQEBCwUAA4IBAQCvlYM9NfsX7wvxmko77eHJ
DKtSye3dsLxx/iOL7p06YghDsWfnFoyiCE+1Y0emA13mTS57kCWWmojkUoHepDqS
G5T9PwL2sFzDZ/7hN0FKSRaaAMpBAzLTw1pef0L3DM81Cyaf2Z5yxcRCMwFhuDnn
LU0R+ewRS/yEd52IXW+pJRbIAv+cjDWQO/3WwJtaJAcA1bGkmEKx/wPNzzjyicSn
F+9wRTOfUfy2FUEJbszgKU0XSwoiSzQ55r0giU5u3BCknQ1m103/0KveRzCiMj1n
Eh/UYLwvpzYm8YYVBz4PvudwaHDVpnwTPoDqVhve+fGnnT/bXt7AcVxIH1JNQdtI
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:26:57 2025 by rpki-client