Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/hWPfJRigBwQrXXI_iYiIoMMdvMI.roa
File: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (raw, json)
Hash identifier: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=
Subject key identifier: 85:63:DF:25:18:A0:07:04:2B:5D:72:3F:89:88:88:A0:C3:1D:BC:C2
Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Certificate serial: 019427B55A7619320689DC83960BB77213A9
Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/hWPfJRigBwQrXXI_iYiIoMMdvMI.roa
Signing time: Thu 02 Jan 2025 15:49:43 +0000
ROA not before: Thu 02 Jan 2025 15:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3352
IP address blocks: 45.153.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5a:76:19:32:06:89:dc:83:96:0b:b7:72:13:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be
Validity
Not Before: Jan 2 15:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8563df2518a007042b5d723f898888a0c31dbcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:f5:fc:ea:4b:0c:0b:f2:97:40:01:53:aa:
f4:e0:67:2f:0c:8a:48:5e:2e:af:21:c3:76:9f:61:
c1:09:63:85:55:ba:05:e9:8d:86:fe:e0:69:e9:d4:
49:0c:86:98:e7:0d:44:33:0e:05:5b:06:7a:e8:43:
f8:76:82:48:f9:99:a4:29:d8:6d:92:6d:f4:b4:87:
3b:bb:2d:dd:5a:9f:bf:0e:51:af:71:86:10:f1:13:
a3:ba:ad:3c:7f:b2:9a:b6:81:45:64:cd:4c:ac:24:
a1:e9:29:dd:5f:a8:92:cb:f0:9f:19:c3:77:53:77:
ea:81:96:d6:fc:f9:ea:b3:06:7a:ab:5e:27:dc:73:
1f:5b:c9:d6:78:71:24:7c:cf:6f:ac:66:ae:88:99:
f4:c1:69:8a:45:1a:44:bb:52:18:af:e8:4b:64:e5:
a9:5b:fc:12:bf:8d:16:18:c1:46:cc:ec:ef:ee:12:
2a:50:70:ea:20:d5:34:fb:7f:79:70:1a:78:10:21:
60:1a:69:1b:4c:a5:9c:2a:64:6d:66:75:12:1c:34:
49:a9:da:a0:2b:5d:65:32:20:b8:c4:61:28:95:5b:
8e:3a:3f:f1:04:56:8d:ad:11:bd:6a:95:cc:33:aa:
56:0c:56:85:5a:7e:b2:85:a2:13:6d:19:f9:39:36:
ed:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:63:DF:25:18:A0:07:04:2B:5D:72:3F:89:88:88:A0:C3:1D:BC:C2
X509v3 Authority Key Identifier:
keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/hWPfJRigBwQrXXI_iYiIoMMdvMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.96.0/22
Signature Algorithm: sha256WithRSAEncryption
82:10:21:a3:c7:4a:fb:e0:7c:d7:39:d5:9e:cd:3a:a3:ca:0d:
a5:28:18:f5:ad:01:25:f0:12:51:29:88:c0:73:29:81:59:3f:
39:9e:6e:37:d1:98:c4:f8:fe:9b:ac:8e:b3:a8:07:53:54:1d:
ae:fb:d7:71:bc:0d:24:fe:16:b0:56:62:ae:ad:5e:d9:19:0a:
b8:7a:56:5c:b1:6f:8c:4b:ca:05:3c:a8:41:62:a4:76:ee:fe:
5e:4d:c8:49:7e:45:43:43:b6:3b:27:ad:8c:5b:cf:9c:e1:5b:
1c:7a:79:ea:2d:a6:97:27:a1:c9:cc:64:d0:d9:80:44:d8:81:
87:a0:3a:e8:f3:4a:31:d1:a2:a7:83:99:88:93:16:df:3e:8a:
ba:1b:66:b8:a9:44:d7:6c:00:9a:e4:44:c4:99:bf:f9:21:50:
05:14:f2:fd:84:58:bd:8f:6a:91:46:19:3c:34:be:a0:9b:ed:
62:32:06:fc:f1:4a:bc:5e:b3:88:cd:e1:0b:3d:af:ba:1b:10:
61:d7:84:58:e8:ae:ac:7d:b5:5f:e7:f7:ad:48:9e:c1:36:11:
2e:7b:44:b9:5d:a9:7c:43:30:35:16:f3:bb:7e:ed:83:0e:fb:
32:30:0b:f2:57:14:2f:d2:4b:02:05:4c:9b:29:3e:39:bb:bc:
c4:63:fd:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntVp2GTIGidyDlgu3chOpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDBjNDFmZGU5OTY1MWIxMzI5MDZmZjA2MDJiNDdiNTYw
N2E1YmUwHhcNMjUwMTAyMTU0OTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTYzZGYyNTE4YTAwNzA0MmI1ZDcyM2Y4OTg4ODhhMGMzMWRiY2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQT1/OpLDAvyl0ABU6r04GcvDIpI
Xi6vIcN2n2HBCWOFVboF6Y2G/uBp6dRJDIaY5w1EMw4FWwZ66EP4doJI+ZmkKdht
km30tIc7uy3dWp+/DlGvcYYQ8ROjuq08f7KatoFFZM1MrCSh6SndX6iSy/CfGcN3
U3fqgZbW/PnqswZ6q14n3HMfW8nWeHEkfM9vrGauiJn0wWmKRRpEu1IYr+hLZOWp
W/wSv40WGMFGzOzv7hIqUHDqINU0+395cBp4ECFgGmkbTKWcKmRtZnUSHDRJqdqg
K11lMiC4xGEolVuOOj/xBFaNrRG9apXMM6pWDFaFWn6yhaITbRn5OTbtsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIVj3yUYoAcEK11yP4mIiKDDHbzCMB8GA1UdIwQY
MBaAFFrQxB/emWUbEykG/wYCtHtWB6W+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xYmMwY2ItZGZhNC00MTUxLWE2MWIt
MzM1YTdlNDM4NGIxLzEvaFdQZkpSaWdCd1FyWFhJX2lZaUlvTU1kdk1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8xYmMwY2ItZGZhNC00MTUxLWE2MWItMzM1YTdlNDM4NGIx
LzEvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZlgMA0G
CSqGSIb3DQEBCwUAA4IBAQCCECGjx0r74HzXOdWezTqjyg2lKBj1rQEl8BJRKYjA
cymBWT85nm430ZjE+P6brI6zqAdTVB2u+9dxvA0k/hawVmKurV7ZGQq4elZcsW+M
S8oFPKhBYqR27v5eTchJfkVDQ7Y7J62MW8+c4VscennqLaaXJ6HJzGTQ2YBE2IGH
oDro80ox0aKng5mIkxbfPoq6G2a4qUTXbACa5ETEmb/5IVAFFPL9hFi9j2qRRhk8
NL6gm+1iMgb88Uq8XrOIzeELPa+6GxBh14RY6K6sfbVf5/etSJ7BNhEue0S5Xal8
QzA1FvO7fu2DDvsyMAvyVxQv0ksCBUybKT45u7zEY/2/
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:19 2025 by rpki-client