Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa
File: d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa (raw, json)
Hash identifier: eCiVHw72+bTZlv8fotK++2o6VMWQ+UX2AuVuNcdkIqk=
Subject key identifier: 77:73:78:3E:CB:AF:0A:5D:6B:BD:7E:28:B2:C4:65:FD:77:38:8E:C0
Certificate issuer: /CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Certificate serial: 019522629CFA3E8847781E1800E4B8292CE6
Authority key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa
Signing time: Thu 20 Feb 2025 08:04:02 +0000
ROA not before: Thu 20 Feb 2025 08:04:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6260
IP address blocks: 45.132.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:62:9c:fa:3e:88:47:78:1e:18:00:e4:b8:29:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Validity
Not Before: Feb 20 08:04:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7773783ecbaf0a5d6bbd7e28b2c465fd77388ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:27:98:e2:01:ee:fd:8f:04:6e:b8:28:5d:6b:
85:fd:d3:54:32:b2:d0:c1:43:c3:d4:3b:56:07:1e:
b8:92:24:c3:42:01:9c:18:8d:0e:a3:6a:cc:c6:7b:
3a:a6:94:e5:06:4b:cd:b6:25:61:4f:ab:2f:fc:0a:
df:81:50:a3:e2:c6:75:f8:ea:72:2e:25:21:78:ed:
96:95:25:e3:7d:aa:03:1d:63:ff:56:a8:23:51:18:
8f:bc:59:e9:43:b8:e7:2e:f8:c9:15:49:18:bd:ba:
5e:a4:8c:87:cf:f1:12:ed:07:10:01:ec:53:68:cf:
a8:68:94:48:ee:5c:4d:09:8d:d5:ba:15:8d:65:d7:
48:97:20:c4:5f:ff:ea:38:b4:e8:e7:1d:73:7a:dc:
d3:fb:b1:9e:f6:b0:4b:91:60:0e:36:61:ed:94:70:
91:b2:9a:84:0a:4b:94:b6:54:51:63:9e:20:72:df:
7c:e4:92:80:32:3b:61:e1:1a:70:d7:0d:7a:39:57:
59:ec:cb:60:e2:cc:29:c4:4d:2f:8c:8a:a4:9a:9f:
b1:c8:4b:ea:dc:70:57:49:20:e5:bf:48:ef:0c:8e:
57:a4:b3:2c:18:f4:b7:ae:0a:01:56:31:6e:6c:90:
2f:00:a0:66:a0:e4:ea:66:bf:17:ff:82:22:d1:df:
4f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:73:78:3E:CB:AF:0A:5D:6B:BD:7E:28:B2:C4:65:FD:77:38:8E:C0
X509v3 Authority Key Identifier:
keyid:41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/d3N4PsuvCl1rvX4ossRl_Xc4jsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:1d:25:2a:48:d7:24:30:13:24:65:b0:9b:19:01:9d:dd:7e:
fe:4d:07:a8:56:07:38:a8:d3:24:11:fb:80:d2:d9:28:78:80:
8f:93:c4:c4:79:4d:02:65:a9:56:c2:ba:79:30:66:5a:3d:d7:
fc:df:25:29:51:3e:3f:35:26:a8:db:46:dc:fe:dc:c4:de:08:
ca:21:b5:ef:c8:bb:63:29:4d:72:5a:52:02:2a:f3:1d:35:4e:
02:91:03:00:38:a9:64:83:42:7d:91:31:c4:94:44:90:44:a0:
e5:16:6b:49:39:38:99:47:45:aa:a7:ea:00:4c:db:3f:cc:42:
48:b4:c5:c5:e0:6d:37:ff:b4:79:13:80:28:dd:40:33:59:4c:
72:9f:b4:15:9f:62:4d:04:ca:b0:2f:ab:c9:37:7d:80:86:de:
3b:c0:d8:35:be:27:71:31:cf:66:2a:1d:cc:a6:2b:e0:b9:9b:
7b:20:1e:64:48:ff:70:27:98:fc:cc:b6:fe:7a:d6:dc:97:89:
30:07:0a:fc:9d:5c:75:c1:91:5f:be:e3:14:ad:60:29:c8:73:
44:f5:40:16:99:5b:44:75:79:41:d0:56:fe:63:9f:f6:43:eb:
fc:99:4f:c2:4d:f8:b2:61:86:24:a9:4a:af:8f:e7:b8:3a:78:
ba:dc:e1:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUiYpz6PohHeB4YAOS4KSzmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTYyMzBlNThkZWNjMGNiY2ZiMTVmNTZhYTY0ZGVkZDFm
Mzg5ZjUwHhcNMjUwMjIwMDgwNDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzczNzgzZWNiYWYwYTVkNmJiZDdlMjhiMmM0NjVmZDc3Mzg4ZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyeY4gHu/Y8EbrgoXWuF/dNUMrLQ
wUPD1DtWBx64kiTDQgGcGI0Oo2rMxns6ppTlBkvNtiVhT6sv/ArfgVCj4sZ1+Opy
LiUheO2WlSXjfaoDHWP/VqgjURiPvFnpQ7jnLvjJFUkYvbpepIyHz/ES7QcQAexT
aM+oaJRI7lxNCY3VuhWNZddIlyDEX//qOLTo5x1zetzT+7Ge9rBLkWAONmHtlHCR
spqECkuUtlRRY54gct985JKAMjth4Rpw1w16OVdZ7Mtg4swpxE0vjIqkmp+xyEvq
3HBXSSDlv0jvDI5XpLMsGPS3rgoBVjFubJAvAKBmoOTqZr8X/4Ii0d9PEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHdzeD7Lrwpda71+KLLEZf13OI7AMB8GA1UdIwQY
MBaAFEGWIw5Y3swMvPsV9WqmTe3R84n1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQt
MmJlZmZmZDU3ZmI3LzEvZDNONFBzdXZDbDFydlg0b3NzUmxfWGM0anNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kYTk2ZjUtM2YzMy00NmY5LWE1MTQtMmJlZmZmZDU3ZmI3
LzEvUVpZakRsamV6QXk4LXhYMWFxWk43ZEh6aWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYQDMA0G
CSqGSIb3DQEBCwUAA4IBAQA9HSUqSNckMBMkZbCbGQGd3X7+TQeoVgc4qNMkEfuA
0tkoeICPk8TEeU0CZalWwrp5MGZaPdf83yUpUT4/NSao20bc/tzE3gjKIbXvyLtj
KU1yWlICKvMdNU4CkQMAOKlkg0J9kTHElESQRKDlFmtJOTiZR0Wqp+oATNs/zEJI
tMXF4G03/7R5E4Ao3UAzWUxyn7QVn2JNBMqwL6vJN32Aht47wNg1vidxMc9mKh3M
pivguZt7IB5kSP9wJ5j8zLb+etbcl4kwBwr8nVx1wZFfvuMUrWApyHNE9UAWmVtE
dXlB0Fb+Y5/2Q+v8mU/CTfiyYYYkqUqvj+e4Oni63OFz
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:47:59 2025 by rpki-client