Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/__OxFEyH1FYcvs1JCgS-JD7OZlw.roa
File: __OxFEyH1FYcvs1JCgS-JD7OZlw.roa (raw, json)
Hash identifier: YSuGVAn8QITI9B6yQeEMR6fNv8UQPFQ3OllUy3lS53Q=
Subject key identifier: FF:F3:B1:14:4C:87:D4:56:1C:BE:CD:49:0A:04:BE:24:3E:CE:66:5C
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 019423D723FF6A15B6F025AA4830C0FC135B
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/__OxFEyH1FYcvs1JCgS-JD7OZlw.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64473
IP address blocks: 45.92.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:23:ff:6a:15:b6:f0:25:aa:48:30:c0:fc:13:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fff3b1144c87d4561cbecd490a04be243ece665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:e0:f5:d8:c7:d1:e0:e6:42:48:cf:fe:bd:
0f:39:82:b2:c4:17:ff:31:be:0b:55:2c:4f:b3:d4:
9f:ca:db:84:77:48:8e:a2:4e:6f:cd:af:ac:99:66:
00:4a:a8:e3:23:2e:fd:c8:ad:da:14:12:9c:a9:7d:
8f:72:f5:73:78:93:07:a2:bd:10:b6:31:b0:71:91:
f4:fe:03:29:8b:b0:7c:5b:a8:71:99:98:75:ab:7f:
6f:ef:3a:b6:eb:af:9f:d0:94:33:f8:55:28:bf:cd:
1e:76:70:fb:b1:ae:d7:5a:06:09:42:0b:c3:5a:9b:
95:ad:47:ca:87:4f:06:fd:ba:31:7a:a4:e2:82:18:
dc:ce:e7:10:17:c7:cc:a3:11:00:f2:df:e7:42:22:
0e:38:d8:c8:72:ef:23:d6:78:0d:f9:59:7f:13:09:
01:a3:12:f9:14:a1:9f:ef:bd:ea:15:3d:93:d8:63:
be:2d:76:30:54:be:ea:5a:0a:80:fe:49:ea:1e:70:
19:4d:24:a1:1b:ce:29:5d:67:52:2f:fd:24:d1:2a:
d3:08:90:a2:e0:a3:66:e2:31:31:95:76:30:32:7b:
fb:8a:a5:c7:84:1a:e1:8e:64:9d:e8:49:f6:e2:dc:
c4:3b:79:ca:32:3c:ba:9c:51:e4:6e:d1:55:b7:4c:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:B1:14:4C:87:D4:56:1C:BE:CD:49:0A:04:BE:24:3E:CE:66:5C
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/__OxFEyH1FYcvs1JCgS-JD7OZlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:99:e8:3c:9a:da:b8:ac:77:09:a6:eb:44:a6:60:3a:6b:eb:
ff:ed:4b:fb:98:e4:8f:75:93:c3:0b:df:a7:19:4e:82:de:2a:
5b:49:ea:fe:8c:cb:42:ba:96:0f:e1:6f:61:cd:f3:b1:23:30:
87:1c:0e:86:1a:03:52:35:29:34:c7:2e:33:dc:09:7d:5c:2c:
85:b0:dd:99:ee:14:89:e4:13:ab:c9:49:fb:5b:bc:ef:11:3d:
6a:8c:cd:25:10:59:64:aa:2c:f5:ae:45:4e:bc:0f:5b:3e:cb:
14:5b:63:36:7d:b9:21:12:88:c0:88:c5:d4:f0:b8:7d:42:21:
01:94:9e:0b:fc:17:bb:2c:9d:eb:93:c3:b8:4d:d0:fb:2c:f7:
6d:c2:03:22:41:a6:f2:9b:6e:85:d7:c6:5e:d9:d6:26:bf:a3:
6d:f2:2d:bf:60:59:31:3b:48:22:6c:8b:b5:44:61:f4:e2:3b:
0b:19:68:ea:2e:d8:07:d6:cc:b9:d6:65:48:cc:5e:be:64:b1:
82:4d:75:f3:ef:6d:b9:05:72:e7:98:b3:e6:32:05:c9:ed:06:
18:7e:55:32:71:fd:92:99:d0:d2:5f:0d:f3:40:37:33:fb:ba:
80:e2:c9:4a:1b:68:12:99:24:c7:a1:a7:7c:c2:88:a3:52:4e:
ad:d8:9b:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1yP/ahW28CWqSDDA/BNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0
NWJhMmEwHhcNMjUwMTAxMjE0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmYzYjExNDRjODdkNDU2MWNiZWNkNDkwYTA0YmUyNDNlY2U2NjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy/g9djH0eDmQkjP/r0POYKyxBf/
Mb4LVSxPs9SfytuEd0iOok5vza+smWYASqjjIy79yK3aFBKcqX2PcvVzeJMHor0Q
tjGwcZH0/gMpi7B8W6hxmZh1q39v7zq266+f0JQz+FUov80ednD7sa7XWgYJQgvD
WpuVrUfKh08G/boxeqTighjczucQF8fMoxEA8t/nQiIOONjIcu8j1ngN+Vl/EwkB
oxL5FKGf773qFT2T2GO+LXYwVL7qWgqA/knqHnAZTSShG84pXWdSL/0k0SrTCJCi
4KNm4jExlXYwMnv7iqXHhBrhjmSd6En24tzEO3nKMjy6nFHkbtFVt0w/SwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP/zsRRMh9RWHL7NSQoEviQ+zmZcMB8GA1UdIwQY
MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It
MTE1OWRiZmJlZDU0LzEvX19PeEZFeUgxRlljdnMxSkNnUy1KRDdPWmx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0
LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVwoMA0G
CSqGSIb3DQEBCwUAA4IBAQBemeg8mtq4rHcJputEpmA6a+v/7Uv7mOSPdZPDC9+n
GU6C3ipbSer+jMtCupYP4W9hzfOxIzCHHA6GGgNSNSk0xy4z3Al9XCyFsN2Z7hSJ
5BOryUn7W7zvET1qjM0lEFlkqiz1rkVOvA9bPssUW2M2fbkhEojAiMXU8Lh9QiEB
lJ4L/Be7LJ3rk8O4TdD7LPdtwgMiQabym26F18Ze2dYmv6Nt8i2/YFkxO0gibIu1
RGH04jsLGWjqLtgH1sy51mVIzF6+ZLGCTXXz7225BXLnmLPmMgXJ7QYYflUycf2S
mdDSXw3zQDcz+7qA4slKG2gSmSTHoad8woijUk6t2Jvi
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:33:30 2025 by rpki-client