Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/KpADruS1t-FrRBApnlZPFJY044I.roa
File: KpADruS1t-FrRBApnlZPFJY044I.roa (raw, json)
Hash identifier: FblHHhnY1K4Tn2oDFypjs57NiKHIKxo90JdaB5VDVf0=
Subject key identifier: 2A:90:03:AE:E4:B5:B7:E1:6B:44:10:29:9E:56:4F:14:96:34:E3:82
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019423D6D6BCA8072FC0F8D271364667EA6D
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/KpADruS1t-FrRBApnlZPFJY044I.roa
Signing time: Wed 01 Jan 2025 21:47:49 +0000
ROA not before: Wed 01 Jan 2025 21:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209408
IP address blocks: 45.66.224.0/22 maxlen: 22
194.242.63.0/24 maxlen: 24
2a09:6c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d6:bc:a8:07:2f:c0:f8:d2:71:36:46:67:ea:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a9003aee4b5b7e16b4410299e564f149634e382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:0b:c5:04:e1:f3:e8:6d:bc:9b:e1:01:22:
88:4f:9c:6b:06:6f:fa:57:0c:d0:d4:e4:71:38:9d:
94:25:eb:41:f6:f9:1b:6e:93:2e:dc:27:af:d6:49:
f4:ec:5d:10:16:e2:05:49:fd:35:2b:09:24:68:1c:
68:dc:8a:0f:ff:0c:7b:69:63:a7:26:70:73:1f:f5:
45:4e:8d:ab:9b:fc:49:19:1a:b6:5a:90:08:90:df:
61:80:56:4f:9d:d8:64:d4:d5:96:85:ca:bf:3f:c2:
7f:9c:6d:c4:46:1b:ce:92:f5:b8:c1:b5:38:cf:9b:
bf:0a:5b:4f:f2:79:6f:88:0f:de:a8:8f:9e:49:79:
6a:13:d5:9a:2d:e2:8b:c4:d5:19:1f:49:51:e0:0f:
2a:cc:23:b3:ad:76:b5:ae:6c:a3:20:3e:38:21:fd:
85:91:cf:df:8c:f6:d1:03:af:42:42:85:df:ec:6d:
53:91:2f:8f:88:3f:b8:04:27:65:be:3f:be:17:56:
20:6b:64:71:aa:b8:4d:26:55:82:89:f1:a6:6f:7f:
41:1a:58:07:de:a2:10:52:fd:9d:56:e5:a6:60:fd:
3d:42:d6:54:fb:1d:bf:a4:84:06:61:5d:c2:dd:ad:
bd:7d:ee:88:56:0f:77:a2:e8:99:fa:2e:07:da:cf:
59:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:90:03:AE:E4:B5:B7:E1:6B:44:10:29:9E:56:4F:14:96:34:E3:82
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/KpADruS1t-FrRBApnlZPFJY044I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.224.0/22
194.242.63.0/24
IPv6:
2a09:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
4a:aa:b9:05:c5:3d:55:6d:30:7e:96:93:2d:96:6c:7b:4f:03:
e9:42:d0:bf:a0:ec:84:65:51:a2:ad:e3:8c:81:42:38:3c:f1:
da:26:97:fa:2c:f9:30:64:01:bc:8c:04:09:57:ea:fc:3b:25:
8c:d5:ec:23:4e:3c:ce:dc:ee:c9:e2:f9:f3:5a:51:7e:25:e4:
cc:4c:a7:a7:90:56:90:81:6c:2e:37:3e:5f:31:66:e3:9e:3c:
a9:6f:17:e1:40:70:f6:4f:71:d4:f5:1c:2d:4a:7d:3b:46:78:
bb:f5:82:a3:ae:93:b5:01:fc:03:5f:7b:bf:a2:73:7a:30:fe:
9b:3b:27:26:f8:89:16:76:fa:da:08:ea:b0:b3:79:58:d4:c0:
e4:a5:7c:99:eb:4e:dc:e1:21:e9:ab:7a:fc:85:3c:33:72:c1:
24:98:1d:c9:9a:e2:f3:6a:c3:bf:00:e6:40:6a:e2:6d:c4:f2:
c8:be:23:26:23:ec:b2:fb:1d:b3:99:3b:dd:43:65:5c:ca:c0:
ba:2d:bb:36:ce:97:c4:b2:83:b0:7e:24:71:74:c9:e2:a0:b6:
b4:0f:80:cc:e6:ab:0b:1f:1d:45:17:23:d6:f3:93:a7:ea:4e:
cd:8c:be:90:9d:95:eb:fc:be:68:85:59:45:13:ca:46:6e:7e:
f6:c0:bb:be
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQj1ta8qAcvwPjScTZGZ+ptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjUwMTAxMjE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTkwMDNhZWU0YjViN2UxNmI0NDEwMjk5ZTU2NGYxNDk2MzRlMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTMLxQTh8+htvJvhASKIT5xrBm/6
VwzQ1ORxOJ2UJetB9vkbbpMu3Cev1kn07F0QFuIFSf01KwkkaBxo3IoP/wx7aWOn
JnBzH/VFTo2rm/xJGRq2WpAIkN9hgFZPndhk1NWWhcq/P8J/nG3ERhvOkvW4wbU4
z5u/CltP8nlviA/eqI+eSXlqE9WaLeKLxNUZH0lR4A8qzCOzrXa1rmyjID44If2F
kc/fjPbRA69CQoXf7G1TkS+PiD+4BCdlvj++F1Yga2RxqrhNJlWCifGmb39BGlgH
3qIQUv2dVuWmYP09QtZU+x2/pIQGYV3C3a29fe6IVg93ouiZ+i4H2s9ZXwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCqQA67ktbfha0QQKZ5WTxSWNOOCMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvS3BBRHJ1UzF0LUZyUkJBcG5sWlBGSlkwNDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLULgAwQA
wvI/MA0EAgACMAcDBQMqCWxAMA0GCSqGSIb3DQEBCwUAA4IBAQBKqrkFxT1VbTB+
lpMtlmx7TwPpQtC/oOyEZVGireOMgUI4PPHaJpf6LPkwZAG8jAQJV+r8OyWM1ewj
TjzO3O7J4vnzWlF+JeTMTKenkFaQgWwuNz5fMWbjnjypbxfhQHD2T3HU9RwtSn07
Rni79YKjrpO1AfwDX3u/onN6MP6bOycm+IkWdvraCOqws3lY1MDkpXyZ607c4SHp
q3r8hTwzcsEkmB3JmuLzasO/AOZAauJtxPLIviMmI+yy+x2zmTvdQ2VcysC6Lbs2
zpfEsoOwfiRxdMnioLa0D4DM5qsLHx1FFyPW85On6k7NjL6QnZXr/L5ohVlFE8pG
bn72wLu+
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:57 2025 by rpki-client