Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/uBhMU8FaL6yzEgI8KXo0amRkPt0.roa
File: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (raw, json)
Hash identifier: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=
Subject key identifier: B8:18:4C:53:C1:5A:2F:AC:B3:12:02:3C:29:7A:34:6A:64:64:3E:DD
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 019420D59A1F2A756270AE7A59B8E91D8BF8
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/uBhMU8FaL6yzEgI8KXo0amRkPt0.roa
Signing time: Wed 01 Jan 2025 07:47:37 +0000
ROA not before: Wed 01 Jan 2025 07:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.143.132.0/24 maxlen: 24
45.143.133.0/24 maxlen: 24
45.143.134.0/24 maxlen: 24
45.143.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9a:1f:2a:75:62:70:ae:7a:59:b8:e9:1d:8b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Jan 1 07:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b8184c53c15a2facb312023c297a346a64643edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:4a:cb:6d:0f:61:b0:df:02:48:b6:5e:ef:
17:5c:98:12:75:d7:ff:d7:cc:83:27:94:af:a3:af:
d5:34:6a:35:4e:8d:69:5d:4e:59:8e:38:b0:8b:a0:
4e:44:51:57:1b:c3:05:a6:a4:31:aa:2a:06:1a:05:
6c:a2:1f:c7:2c:0c:f8:f8:8f:2c:da:c3:2e:56:22:
5a:b6:33:fb:04:8d:c1:4e:97:13:08:2b:ae:0d:75:
73:ef:78:76:c4:61:fe:3d:57:d4:28:e8:da:c5:9a:
98:8b:cb:55:e5:a8:4f:b3:66:eb:fb:4d:62:61:fb:
46:f0:92:86:ad:14:ac:a3:70:98:ad:ae:64:7c:3a:
5f:3d:04:c9:e3:45:3c:a3:f5:9b:ce:ce:98:e8:57:
ce:ef:b5:6d:2d:5a:41:9c:39:07:12:89:c7:65:15:
f0:6b:de:8f:7e:81:dc:b6:31:a0:04:8d:81:3b:8a:
23:47:9d:f5:3e:a0:64:13:f5:03:90:bd:7c:ca:b1:
e2:f0:a8:ed:cd:6a:4c:81:fa:33:4d:21:8d:74:ea:
e8:88:39:96:ee:56:de:b1:a2:a9:c3:86:3c:e2:39:
b0:e1:59:74:f2:c0:30:69:61:ee:86:f3:02:6c:a7:
1c:11:7c:82:ea:b4:ea:1e:bc:8b:6d:64:eb:e6:a0:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:18:4C:53:C1:5A:2F:AC:B3:12:02:3C:29:7A:34:6A:64:64:3E:DD
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/uBhMU8FaL6yzEgI8KXo0amRkPt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:c4:ef:0d:57:2f:10:07:33:f4:ab:c7:ca:62:0f:f1:c3:5d:
1d:62:4a:ef:0e:6f:5c:d0:12:39:82:c6:61:90:29:cc:ec:8f:
63:08:fc:a9:7d:5c:87:8f:64:52:b6:51:94:ce:78:5a:9e:ca:
c8:5f:6e:ae:e6:4d:b1:37:b5:bb:bb:08:df:be:7b:b1:b3:a1:
8e:c8:51:10:18:7a:0c:e2:8a:bd:1e:60:93:a0:85:37:fa:c7:
18:7d:fd:ee:15:6e:f5:fc:33:75:ac:cd:85:ce:0f:26:e8:29:
95:dc:c1:32:74:8d:09:5d:f7:16:29:42:d6:75:31:a3:11:52:
b9:72:ac:60:3a:36:6e:0a:32:71:f0:5e:87:53:e4:0c:fd:30:
1e:b5:a7:96:b9:5a:c9:45:28:ff:c8:cc:1a:2c:95:d8:76:d5:
36:fc:b2:cf:73:cd:df:71:58:73:07:cd:10:e4:ec:c9:19:7d:
92:0d:b0:26:1f:0f:f5:cb:f6:2b:f5:a7:33:01:77:88:69:05:
2a:8f:d3:50:cc:bf:7f:08:64:20:42:7b:5c:60:91:11:91:9b:
71:34:c2:56:2c:6b:80:86:09:24:50:f5:66:8a:60:54:b0:76:
de:8d:ae:6b:78:3f:76:ed:40:d5:3e:b8:76:9f:fc:cd:b6:6a:
33:bb:06:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1ZofKnVicK56WbjpHYv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MGU3ZGY0M2M4MmQxMjBhMTNkM2M4NjVmMWYwNmY0OTY0
NGIxZTEwHhcNMjUwMTAxMDc0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODE4NGM1M2MxNWEyZmFjYjMxMjAyM2MyOTdhMzQ2YTY0NjQzZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1hKy20PYbDfAki2Xu8XXJgSddf/
18yDJ5Svo6/VNGo1To1pXU5Zjjiwi6BORFFXG8MFpqQxqioGGgVsoh/HLAz4+I8s
2sMuViJatjP7BI3BTpcTCCuuDXVz73h2xGH+PVfUKOjaxZqYi8tV5ahPs2br+01i
YftG8JKGrRSso3CYra5kfDpfPQTJ40U8o/Wbzs6Y6FfO77VtLVpBnDkHEonHZRXw
a96PfoHctjGgBI2BO4ojR531PqBkE/UDkL18yrHi8KjtzWpMgfozTSGNdOroiDmW
7lbesaKpw4Y84jmw4Vl08sAwaWHuhvMCbKccEXyC6rTqHryLbWTr5qCjJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgYTFPBWi+ssxICPCl6NGpkZD7dMB8GA1UdIwQY
MBaAFCUOffQ8gtEgoT08hl8fBvSWRLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYt
NGE5YmIyZmU3MzMxLzEvdUJoTVU4RmFMNnl6RWdJOEtYbzBhbVJrUHQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYtNGE5YmIyZmU3MzMx
LzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY+EMA0G
CSqGSIb3DQEBCwUAA4IBAQCixO8NVy8QBzP0q8fKYg/xw10dYkrvDm9c0BI5gsZh
kCnM7I9jCPypfVyHj2RStlGUznhansrIX26u5k2xN7W7uwjfvnuxs6GOyFEQGHoM
4oq9HmCToIU3+scYff3uFW71/DN1rM2Fzg8m6CmV3MEydI0JXfcWKULWdTGjEVK5
cqxgOjZuCjJx8F6HU+QM/TAetaeWuVrJRSj/yMwaLJXYdtU2/LLPc83fcVhzB80Q
5OzJGX2SDbAmHw/1y/Yr9aczAXeIaQUqj9NQzL9/CGQgQntcYJERkZtxNMJWLGuA
hgkkUPVmimBUsHbeja5reD927UDVPrh2n/zNtmozuwZz
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:36 2025 by rpki-client