Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H46sB790XpHEnYv4TqNMx8liI5A.roa
File: H46sB790XpHEnYv4TqNMx8liI5A.roa (raw, json)
Hash identifier: tky/zzkhPHiHwewqdrJ7FzGu6YnMSWzvscvwv5Raoik=
Subject key identifier: 1F:8E:AC:07:BF:74:5E:91:C4:9D:8B:F8:4E:A3:4C:C7:C9:62:23:90
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521BF6717654BE3777EA6E82560DCF0
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H46sB790XpHEnYv4TqNMx8liI5A.roa
Signing time: Thu 02 Jan 2025 03:49:16 +0000
ROA not before: Thu 02 Jan 2025 03:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212335
IP address blocks: 45.83.239.0/24 maxlen: 24
45.150.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bf:67:17:65:4b:e3:77:7e:a6:e8:25:60:dc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f8eac07bf745e91c49d8bf84ea34cc7c9622390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:6e:18:46:42:52:af:57:6b:ae:31:06:e3:
18:0b:68:61:8b:f2:b8:12:f3:86:c8:d7:e3:82:96:
14:d1:4e:32:f0:c3:4e:52:96:44:bb:e9:3d:76:9d:
dc:00:b9:61:a1:19:ed:57:9d:ac:35:b4:bd:50:32:
f0:6b:29:49:41:11:bb:63:59:d0:0c:13:48:b8:d4:
b4:cf:e0:f7:0f:d2:03:ad:de:4a:6f:4b:95:05:43:
df:6d:f4:1a:03:07:e6:87:7d:47:5c:8f:05:62:f5:
2f:5d:e1:81:c8:05:6e:d1:8e:b3:9f:45:6b:63:4b:
75:9d:83:a3:22:15:70:be:12:ac:ef:7e:2a:b6:25:
49:bb:0c:ea:fa:21:20:57:86:fc:40:61:a2:10:a3:
85:2d:0e:c9:01:fb:c0:03:76:68:18:a4:21:23:50:
39:67:47:eb:8b:97:bd:79:5d:12:50:76:f3:8d:1c:
3a:7d:79:c6:32:eb:c2:6f:89:8b:1c:7f:3a:45:20:
06:74:d2:4c:ca:46:f7:95:e5:21:28:e9:7a:a5:f8:
57:aa:89:eb:47:2b:e5:91:34:7c:4a:26:2a:1a:f7:
0d:f1:4a:a1:f9:93:cc:c2:53:ab:a6:ad:84:82:d7:
3b:23:20:a6:37:a5:c1:b2:17:f8:63:c5:37:84:31:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8E:AC:07:BF:74:5E:91:C4:9D:8B:F8:4E:A3:4C:C7:C9:62:23:90
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H46sB790XpHEnYv4TqNMx8liI5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.239.0/24
45.150.197.0/24
Signature Algorithm: sha256WithRSAEncryption
31:2d:3a:93:ec:9e:59:95:ef:e4:eb:2c:c4:4c:56:89:24:35:
a3:a0:9f:9c:d7:99:5a:d1:ca:95:de:c1:6d:9a:b0:b1:73:fe:
c2:8f:cd:67:c0:ff:b9:5c:c5:ec:89:8b:60:ea:56:d2:33:d4:
a5:3d:35:61:12:e6:01:b9:ae:c7:7f:cf:4b:c8:b9:38:d0:14:
26:ea:98:6c:7f:7d:76:29:16:fc:08:29:bc:b0:b8:cb:c9:01:
f3:61:a7:b2:a5:73:af:52:c7:c3:40:39:71:8e:e7:f5:7d:bf:
8e:9d:db:84:d6:f4:5a:8e:d6:b2:5a:99:7b:05:f5:c1:51:e8:
26:e0:05:c0:c9:6f:c7:f6:89:3c:d3:b0:4b:c9:d1:3c:df:62:
ab:fe:7d:e4:ad:52:1d:dc:5c:3a:eb:31:fb:7a:4a:a5:77:81:
a8:95:ff:b6:c9:6b:10:a2:f0:c0:64:5e:3c:49:38:03:02:db:
dc:7d:08:9a:30:7f:ea:24:08:7c:b7:86:7e:2d:d7:55:10:a1:
b8:23:4c:04:34:1c:5a:e5:4d:e2:a2:04:8b:9a:d8:67:52:8a:
a6:b5:a4:b6:17:77:81:3b:05:20:ed:ce:92:a5:8c:fe:b1:13:
dc:37:79:2e:a1:6c:0a:12:f6:85:16:b6:72:ea:60:8c:d3:28:
38:ed:1c:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIb9nF2VL43d+puglYNzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjUwMTAyMDM0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjhlYWMwN2JmNzQ1ZTkxYzQ5ZDhiZjg0ZWEzNGNjN2M5NjIyMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvORuGEZCUq9Xa64xBuMYC2hhi/K4
EvOGyNfjgpYU0U4y8MNOUpZEu+k9dp3cALlhoRntV52sNbS9UDLwaylJQRG7Y1nQ
DBNIuNS0z+D3D9IDrd5Kb0uVBUPfbfQaAwfmh31HXI8FYvUvXeGByAVu0Y6zn0Vr
Y0t1nYOjIhVwvhKs734qtiVJuwzq+iEgV4b8QGGiEKOFLQ7JAfvAA3ZoGKQhI1A5
Z0fri5e9eV0SUHbzjRw6fXnGMuvCb4mLHH86RSAGdNJMykb3leUhKOl6pfhXqonr
RyvlkTR8SiYqGvcN8Uqh+ZPMwlOrpq2Egtc7IyCmN6XBshf4Y8U3hDFFJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB+OrAe/dF6RxJ2L+E6jTMfJYiOQMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvSDQ2c0I3OTBYcEhFbll2NFRxTk14OGxpSTVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVPvAwQA
LZbFMA0GCSqGSIb3DQEBCwUAA4IBAQAxLTqT7J5Zle/k6yzETFaJJDWjoJ+c15la
0cqV3sFtmrCxc/7Cj81nwP+5XMXsiYtg6lbSM9SlPTVhEuYBua7Hf89LyLk40BQm
6phsf312KRb8CCm8sLjLyQHzYaeypXOvUsfDQDlxjuf1fb+OnduE1vRajtayWpl7
BfXBUegm4AXAyW/H9ok807BLydE832Kr/n3krVId3Fw66zH7ekqld4Golf+2yWsQ
ovDAZF48STgDAtvcfQiaMH/qJAh8t4Z+LddVEKG4I0wENBxa5U3iogSLmthnUoqm
taS2F3eBOwUg7c6SpYz+sRPcN3kuoWwKEvaFFrZy6mCM0yg47RxJ
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:57:27 2025 by rpki-client