Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/3fEpeO8KRpblUKytupeE9QmRO10.roa
File: 3fEpeO8KRpblUKytupeE9QmRO10.roa (raw, json)
Hash identifier: J/sgD9Gkv93PRSGDC5y1FBEaffbfuEvNlwwRc1f17bc=
Subject key identifier: DD:F1:29:78:EF:0A:46:96:E5:50:AC:AD:BA:97:84:F5:09:91:3B:5D
Certificate issuer: /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial: 0194258F07ABEBF4147E2EAB476408081C83
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/3fEpeO8KRpblUKytupeE9QmRO10.roa
Signing time: Thu 02 Jan 2025 05:48:38 +0000
ROA not before: Thu 02 Jan 2025 05:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.154.18.0/24 maxlen: 24
45.154.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:07:ab:eb:f4:14:7e:2e:ab:47:64:08:08:1c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ddf12978ef0a4696e550acadba9784f509913b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0d:13:37:e2:2f:94:b7:53:d3:75:c9:91:dd:
46:3a:0d:16:9e:74:e7:6c:ce:8d:45:76:e8:6a:a2:
e1:65:90:fd:24:73:5f:a8:32:ed:81:00:96:6d:9f:
0e:ed:92:c2:28:92:3a:15:53:5c:32:69:dd:97:60:
8f:a4:01:f8:eb:be:c9:1e:26:c1:30:99:8e:4d:ac:
b2:b9:c6:1a:dc:23:28:e1:85:cb:e6:2b:2e:9f:84:
c6:c9:81:85:0e:b4:8e:f3:44:c6:59:81:d6:51:ea:
3c:1e:05:5c:b7:22:8b:3c:86:20:d9:54:44:ee:fe:
ac:d7:6b:dd:1a:30:ea:99:e6:11:cb:e1:af:fb:06:
50:06:9e:00:7f:cc:e2:8a:56:ea:3e:c7:01:8b:3c:
53:65:dd:49:c4:89:b4:07:00:49:a8:83:4b:cb:e7:
27:a4:dc:44:d2:ac:02:1a:5a:27:ad:81:40:ad:e7:
99:56:70:24:3e:59:fd:7b:b6:f2:4c:64:d7:77:c5:
44:b2:81:f3:59:30:a9:1a:92:6a:1f:15:78:e7:61:
0d:07:7c:c1:6d:84:2e:ab:fa:f1:6b:27:af:08:f4:
b5:0f:0a:40:06:2d:34:fc:12:0d:69:d7:2c:52:19:
9e:98:e3:80:5f:4b:84:97:df:8c:b0:2b:0b:82:07:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F1:29:78:EF:0A:46:96:E5:50:AC:AD:BA:97:84:F5:09:91:3B:5D
X509v3 Authority Key Identifier:
keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/3fEpeO8KRpblUKytupeE9QmRO10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.18.0/23
Signature Algorithm: sha256WithRSAEncryption
48:12:4d:70:12:c1:4a:e9:ad:5e:93:6a:6a:9e:cb:5a:56:59:
02:10:53:0c:dc:eb:bb:d5:3a:25:10:f9:6d:f5:58:62:7e:aa:
98:60:83:3d:f3:30:23:1c:c6:9e:fa:89:d5:9e:4d:cc:b6:9b:
8c:97:77:ad:a6:10:9f:30:2a:a9:20:b9:37:7b:15:d3:ab:0c:
97:44:c9:2c:26:4c:03:a6:67:63:ae:c5:4b:70:13:7a:0e:d7:
1f:ad:07:85:e7:d9:2e:19:3d:77:98:1d:d5:80:83:0e:7f:e2:
44:7b:cf:93:41:45:6e:94:ab:0a:5f:49:41:0a:2c:f1:91:2a:
be:a2:f1:d0:48:19:6f:42:b7:9a:2a:79:46:a9:dd:a9:37:d9:
92:f8:ce:8c:d4:a8:bf:c5:da:7b:58:43:98:b3:c5:26:80:3c:
92:3d:cd:65:be:5b:88:81:86:ba:00:19:33:32:48:fa:51:4d:
91:4c:f8:b0:4e:f0:d6:ba:35:9e:a0:ce:b5:f5:65:70:ec:95:
b3:81:92:96:5a:c0:11:12:a3:b5:13:65:a4:4e:7d:64:d0:c6:
f5:3f:27:eb:54:0d:62:0e:f0:f3:c3:1b:b4:b2:cc:3d:0f:e5:
e7:3a:ff:0b:3d:57:a0:dd:ef:4a:78:80:c1:55:f2:43:f2:ae:
55:80:72:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljwer6/QUfi6rR2QICByDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzhlYzZiMGI5NjlhYTIyMjhmMTI1ZWRhYTQxOWJhY2Ri
YmYyNWIwHhcNMjUwMTAyMDU0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGYxMjk3OGVmMGE0Njk2ZTU1MGFjYWRiYTk3ODRmNTA5OTEzYjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww0TN+IvlLdT03XJkd1GOg0WnnTn
bM6NRXboaqLhZZD9JHNfqDLtgQCWbZ8O7ZLCKJI6FVNcMmndl2CPpAH4677JHibB
MJmOTayyucYa3CMo4YXL5isun4TGyYGFDrSO80TGWYHWUeo8HgVctyKLPIYg2VRE
7v6s12vdGjDqmeYRy+Gv+wZQBp4Af8ziilbqPscBizxTZd1JxIm0BwBJqINLy+cn
pNxE0qwCGlonrYFAreeZVnAkPln9e7byTGTXd8VEsoHzWTCpGpJqHxV452ENB3zB
bYQuq/rxayevCPS1DwpABi00/BINadcsUhmemOOAX0uEl9+MsCsLggf8/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN3xKXjvCkaW5VCsrbqXhPUJkTtdMB8GA1UdIwQY
MBaAFN947GsLlpqiIo8SXtqkGbrNu/JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTIt
N2U4YzU1MjZkZTdlLzEvM2ZFcGVPOEtScGJsVUt5dHVwZUU5UW1STzEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kYmIwNDMtMzc3Yi00YzRiLWEwYTItN2U4YzU1MjZkZTdl
LzEvMzNqc2F3dVdtcUlpanhKZTJxUVp1czI3OGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZoSMA0G
CSqGSIb3DQEBCwUAA4IBAQBIEk1wEsFK6a1ek2pqnstaVlkCEFMM3Ou71TolEPlt
9VhifqqYYIM98zAjHMae+onVnk3MtpuMl3etphCfMCqpILk3exXTqwyXRMksJkwD
pmdjrsVLcBN6DtcfrQeF59kuGT13mB3VgIMOf+JEe8+TQUVulKsKX0lBCizxkSq+
ovHQSBlvQreaKnlGqd2pN9mS+M6M1Ki/xdp7WEOYs8UmgDySPc1lvluIgYa6ABkz
Mkj6UU2RTPiwTvDWujWeoM619WVw7JWzgZKWWsAREqO1E2WkTn1k0Mb1PyfrVA1i
DvDzwxu0ssw9D+XnOv8LPVeg3e9KeIDBVfJD8q5VgHKA
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:22 2025 by rpki-client