Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/dQipKZolIhGkhWFJoygF3CDiTvg.roa
File: dQipKZolIhGkhWFJoygF3CDiTvg.roa (raw, json)
Hash identifier: +eA96uDNL0C8CyvGH+7b3dtqwE+sSbn83k1fDZzMPtg=
Subject key identifier: 75:08:A9:29:9A:25:22:11:A4:85:61:49:A3:28:05:DC:20:E2:4E:F8
Certificate issuer: /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial: 01942747FFAF354F495B3B0A3C911D738DE5
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/dQipKZolIhGkhWFJoygF3CDiTvg.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202913
IP address blocks: 45.148.196.0/22 maxlen: 22
45.148.196.0/23 maxlen: 23
45.148.196.0/24 maxlen: 24
45.148.197.0/24 maxlen: 24
45.148.198.0/23 maxlen: 23
45.148.198.0/24 maxlen: 24
45.148.199.0/24 maxlen: 24
45.148.199.0/25 maxlen: 25
45.148.199.128/25 maxlen: 25
80.78.128.0/22 maxlen: 22
80.78.128.0/23 maxlen: 23
80.78.128.0/24 maxlen: 24
80.78.129.0/24 maxlen: 24
80.78.130.0/23 maxlen: 23
80.78.130.0/24 maxlen: 24
80.78.131.0/24 maxlen: 24
185.130.144.0/22 maxlen: 22
185.130.144.0/23 maxlen: 23
185.130.144.0/24 maxlen: 24
185.130.145.0/24 maxlen: 24
185.130.146.0/23 maxlen: 23
185.130.146.0/24 maxlen: 24
185.130.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ff:af:35:4f:49:5b:3b:0a:3c:91:1d:73:8d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7508a9299a252211a4856149a32805dc20e24ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b5:30:bf:74:b3:44:be:5d:8f:4f:4c:df:34:
cf:a4:da:33:66:3e:95:28:16:81:80:ce:62:23:1d:
7a:fc:30:3b:ef:2b:bc:20:1d:70:85:b3:87:f5:bc:
fe:3e:b4:2b:0c:3b:9b:9b:23:9d:7a:69:5f:e3:bd:
be:fd:2a:29:56:c0:c6:e8:e7:f0:71:6e:03:7d:9a:
16:b4:e2:e5:4c:5c:1f:c3:02:61:eb:83:9d:b9:ff:
2e:6f:14:5f:ef:ce:37:12:8d:23:28:7c:79:2d:41:
4a:d6:37:c4:1c:f9:85:a6:82:5f:52:18:ef:4f:44:
2b:80:a8:e2:10:87:d8:37:cf:23:e5:12:62:c3:46:
83:b5:02:6c:ea:16:80:b3:30:3a:a3:d7:40:8c:6f:
9e:07:15:e4:3f:0d:77:1c:bd:46:a7:8e:66:04:eb:
4a:68:31:0c:53:8c:9b:a9:d3:af:76:41:f6:0c:8b:
88:2e:64:ea:53:c4:a2:81:92:bf:ae:1d:ef:90:92:
00:72:04:e2:36:ab:f8:e0:f2:6e:76:d5:e2:9b:a9:
20:17:1f:16:f0:c7:33:82:b6:83:0e:2d:be:36:e7:
15:ea:b2:d2:ce:aa:08:f4:84:c9:3f:47:c9:7e:7d:
8c:ce:10:c0:ab:bb:ba:fa:d6:fe:1e:0a:e1:28:40:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:08:A9:29:9A:25:22:11:A4:85:61:49:A3:28:05:DC:20:E2:4E:F8
X509v3 Authority Key Identifier:
keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/dQipKZolIhGkhWFJoygF3CDiTvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.196.0/22
80.78.128.0/22
185.130.144.0/22
Signature Algorithm: sha256WithRSAEncryption
40:80:49:94:49:08:d6:27:83:94:64:b6:4c:52:29:88:10:26:
db:db:ab:38:d9:80:11:0c:9b:26:95:05:3f:0d:3e:79:76:79:
5e:b6:15:52:cc:fd:c1:77:17:cb:16:a4:e2:5f:5d:99:05:e8:
7a:c6:bb:42:94:af:26:44:50:fa:31:97:bb:04:9c:5b:fa:a7:
1e:90:06:91:b1:04:a7:8f:44:d9:68:e9:f5:91:54:a4:45:e0:
1a:7f:b7:cf:8e:36:3e:d7:d9:7e:af:03:f6:22:70:d0:05:aa:
8b:97:aa:61:bf:ff:90:3b:84:ff:a0:c6:6d:09:01:84:36:d9:
9f:20:bd:b8:62:bc:ee:45:0f:b2:08:7d:36:eb:cf:8a:e4:09:
ea:63:2a:74:ac:45:33:bf:4c:58:d6:15:30:3f:e8:6e:fb:96:
51:04:71:ce:af:6a:59:33:9d:5d:24:25:65:5f:e4:d2:da:7b:
fa:13:7d:ba:2e:81:d9:f7:c5:36:c3:b9:cd:94:27:01:87:04:
e3:a7:89:49:75:2e:2b:b6:85:cb:00:e0:2b:fe:ad:97:ac:e3:
13:fb:e7:62:72:c9:d3:0b:97:50:d7:d3:f4:9a:29:e7:7a:6c:
75:bf:7c:05:ad:eb:c3:e3:57:05:88:3b:de:3a:46:86:24:45:
fd:57:27:99
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQnR/+vNU9JWzsKPJEdc43lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZjZjMzNiZmI5ZDk0YmQwZjc0YTczOGU3ZjE2ZDBlOWRh
MGMzYjkwHhcNMjUwMTAyMTM1MDE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTA4YTkyOTlhMjUyMjExYTQ4NTYxNDlhMzI4MDVkYzIwZTI0ZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bUwv3SzRL5dj09M3zTPpNozZj6V
KBaBgM5iIx16/DA77yu8IB1whbOH9bz+PrQrDDubmyOdemlf472+/SopVsDG6Ofw
cW4DfZoWtOLlTFwfwwJh64Oduf8ubxRf7843Eo0jKHx5LUFK1jfEHPmFpoJfUhjv
T0QrgKjiEIfYN88j5RJiw0aDtQJs6haAszA6o9dAjG+eBxXkPw13HL1Gp45mBOtK
aDEMU4ybqdOvdkH2DIuILmTqU8SigZK/rh3vkJIAcgTiNqv44PJudtXim6kgFx8W
8MczgraDDi2+NucV6rLSzqoI9ITJP0fJfn2MzhDAq7u6+tb+HgrhKEAocQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHUIqSmaJSIRpIVhSaMoBdwg4k74MB8GA1UdIwQY
MBaAFLf2wzv7nZS9D3SnOOfxbQ6doMO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdF9iRE9fdWRsTDBQZEtjNDVfRnREcDJndzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNGQ5MDMtNWJhYS00MzQxLTkzOTIt
YTNlNDgxZmI1MWI5LzEvZFFpcEtab2xJaEdraFdGSm95Z0YzQ0RpVHZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNGQ5MDMtNWJhYS00MzQxLTkzOTItYTNlNDgxZmI1MWI5
LzEvdF9iRE9fdWRsTDBQZEtjNDVfRnREcDJndzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZTEAwQC
UE6AAwQCuYKQMA0GCSqGSIb3DQEBCwUAA4IBAQBAgEmUSQjWJ4OUZLZMUimIECbb
26s42YARDJsmlQU/DT55dnlethVSzP3BdxfLFqTiX12ZBeh6xrtClK8mRFD6MZe7
BJxb+qcekAaRsQSnj0TZaOn1kVSkReAaf7fPjjY+19l+rwP2InDQBaqLl6phv/+Q
O4T/oMZtCQGENtmfIL24YrzuRQ+yCH0268+K5AnqYyp0rEUzv0xY1hUwP+hu+5ZR
BHHOr2pZM51dJCVlX+TS2nv6E326LoHZ98U2w7nNlCcBhwTjp4lJdS4rtoXLAOAr
/q2XrOMT++dicsnTC5dQ19P0minnemx1v3wFrevD41cFiDveOkaGJEX9VyeZ
-----END CERTIFICATE-----
Generated at Wed Mar 12 21:12:22 2025 by rpki-client