Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/su-hbEzusTLSOxmaXJEWMOWCTZI.roa
File: su-hbEzusTLSOxmaXJEWMOWCTZI.roa (raw, json)
Hash identifier: wY777l5pDJFcS+82iBVpdLmEK77pZHYgVlbVwhboSl4=
Subject key identifier: B2:EF:A1:6C:4C:EE:B1:32:D2:3B:19:9A:5C:91:16:30:E5:82:4D:92
Certificate issuer: /CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Certificate serial: 01941FFA44B5EAC14318240468CE5F4FFA78
Authority key identifier: 45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/su-hbEzusTLSOxmaXJEWMOWCTZI.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207535
IP address blocks: 5.154.180.0/24 maxlen: 24
91.192.11.0/24 maxlen: 24
91.250.242.0/24 maxlen: 24
2a10:ab40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:44:b5:ea:c1:43:18:24:04:68:ce:5f:4f:fa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=453b84e8e0e5617c34260d768f440a5131f2dcf4
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2efa16c4ceeb132d23b199a5c911630e5824d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:15:57:12:80:19:19:04:cc:b4:c4:91:5f:9b:
e2:42:af:a4:42:86:d8:f0:28:98:c4:7c:3e:c6:47:
7a:77:43:5c:7c:a8:47:18:18:2b:d8:d7:52:ec:61:
61:d5:f8:5e:d6:37:77:2f:23:ea:44:e7:41:e3:ac:
6b:df:0e:67:c4:c9:53:27:25:c9:23:bd:78:c3:f7:
1a:91:7c:1c:76:6f:7f:f5:19:ae:b4:3d:01:57:a1:
64:f0:3e:68:d3:55:81:96:39:f7:74:f8:25:20:25:
a5:ff:1c:01:76:e5:e7:89:e0:ab:79:47:33:88:bd:
c3:26:3d:75:d5:e6:e9:d7:ed:a8:d1:97:c4:27:1d:
eb:f4:22:22:d7:12:70:5d:95:4d:81:ac:60:eb:3a:
db:c2:21:20:62:22:bd:d4:35:30:09:bb:49:fc:c4:
4e:e2:4c:e9:be:e9:c1:b7:79:67:06:d5:e5:d6:78:
27:98:d3:4e:7e:1e:93:b6:a4:8a:12:2e:0f:59:ad:
be:64:8e:9a:8f:9b:2c:3c:9f:54:64:03:b1:b6:e8:
e7:d2:1b:b7:67:06:bc:43:7f:ce:ef:a4:40:d5:33:
f6:8d:96:7c:64:f7:6f:93:0d:25:5e:33:9f:2d:5e:
31:83:6a:9c:45:ad:35:d5:b1:74:fb:a6:bd:85:f6:
4c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EF:A1:6C:4C:EE:B1:32:D2:3B:19:9A:5C:91:16:30:E5:82:4D:92
X509v3 Authority Key Identifier:
keyid:45:3B:84:E8:E0:E5:61:7C:34:26:0D:76:8F:44:0A:51:31:F2:DC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/su-hbEzusTLSOxmaXJEWMOWCTZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/65985b-55b7-4cb7-a4f4-998783c6841d/1/RTuE6ODlYXw0Jg12j0QKUTHy3PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.180.0/24
91.192.11.0/24
91.250.242.0/24
IPv6:
2a10:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
1d:d1:9d:11:91:66:a2:1f:ac:be:3b:5e:72:89:fe:f5:13:6c:
64:ee:9e:4f:25:4a:f0:03:fe:24:dd:d7:57:92:93:d3:48:0f:
b1:84:51:43:c9:58:ef:ef:2e:0b:c9:5a:8b:7e:9f:ed:f7:06:
ec:2b:a0:34:69:2a:78:73:8f:f4:e3:6c:68:e0:65:67:6a:b3:
f2:65:57:04:aa:82:06:18:8a:39:d5:d6:a5:da:9d:04:58:6c:
ba:4f:1f:e4:55:c0:85:f8:4c:07:1c:00:4b:45:61:65:b1:46:
7d:1c:ea:7a:12:8b:7f:83:77:42:1c:1c:37:12:43:d4:c4:77:
5f:74:4c:0d:fe:5a:00:f6:d1:b1:87:d3:b0:27:46:48:d9:59:
97:9b:cd:80:f9:6a:6d:a9:a0:82:dc:46:c5:2f:06:47:d5:de:
b9:8c:be:ab:fd:be:c0:a2:20:24:4e:b0:90:9a:83:f0:3d:3b:
7e:78:ee:49:a9:7c:f0:0e:67:3f:a6:4a:64:94:ae:f1:b8:98:
e2:d0:f6:40:8e:ab:da:91:31:66:ad:73:a6:cf:7c:00:4b:18:
50:7c:e4:4a:53:6c:ec:71:33:bc:98:d1:19:4a:0a:bb:91:2e:
0e:2c:9e:1a:aa:45:e6:03:41:31:48:6b:cc:d4:c1:b1:b0:e9:
0f:33:a7:66
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQf+kS16sFDGCQEaM5fT/p4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1M2I4NGU4ZTBlNTYxN2MzNDI2MGQ3NjhmNDQwYTUxMzFm
MmRjZjQwHhcNMjUwMTAxMDM0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmVmYTE2YzRjZWViMTMyZDIzYjE5OWE1YzkxMTYzMGU1ODI0ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RVXEoAZGQTMtMSRX5viQq+kQobY
8CiYxHw+xkd6d0NcfKhHGBgr2NdS7GFh1fhe1jd3LyPqROdB46xr3w5nxMlTJyXJ
I714w/cakXwcdm9/9RmutD0BV6Fk8D5o01WBljn3dPglICWl/xwBduXnieCreUcz
iL3DJj111ebp1+2o0ZfEJx3r9CIi1xJwXZVNgaxg6zrbwiEgYiK91DUwCbtJ/MRO
4kzpvunBt3lnBtXl1ngnmNNOfh6TtqSKEi4PWa2+ZI6aj5ssPJ9UZAOxtujn0hu3
Zwa8Q3/O76RA1TP2jZZ8ZPdvkw0lXjOfLV4xg2qcRa011bF0+6a9hfZMRwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLLvoWxM7rEy0jsZmlyRFjDlgk2SMB8GA1UdIwQY
MBaAFEU7hOjg5WF8NCYNdo9EClEx8tz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NTk4NWItNTViNy00Y2I3LWE0ZjQt
OTk4NzgzYzY4NDFkLzEvc3UtaGJFenVzVExTT3htYVhKRVdNT1dDVFpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NTk4NWItNTViNy00Y2I3LWE0ZjQtOTk4NzgzYzY4NDFk
LzEvUlR1RTZPRGxZWHcwSmcxMmowUUtVVEh5M1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQABZq0AwQA
W8ALAwQAW/ryMA0EAgACMAcDBQAqEKtAMA0GCSqGSIb3DQEBCwUAA4IBAQAd0Z0R
kWaiH6y+O15yif71E2xk7p5PJUrwA/4k3ddXkpPTSA+xhFFDyVjv7y4LyVqLfp/t
9wbsK6A0aSp4c4/042xo4GVnarPyZVcEqoIGGIo51dal2p0EWGy6Tx/kVcCF+EwH
HABLRWFlsUZ9HOp6Eot/g3dCHBw3EkPUxHdfdEwN/loA9tGxh9OwJ0ZI2VmXm82A
+WptqaCC3EbFLwZH1d65jL6r/b7AoiAkTrCQmoPwPTt+eO5JqXzwDmc/pkpklK7x
uJji0PZAjqvakTFmrXOmz3wASxhQfORKU2zscTO8mNEZSgq7kS4OLJ4aqkXmA0Ex
SGvM1MGxsOkPM6dm
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:01:51 2025 by rpki-client