Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa
File: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (raw, json)
Hash identifier: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=
Subject key identifier: 74:A9:6F:DE:AE:56:D1:99:0F:B3:E7:C7:34:65:73:54:F7:A1:AE:19
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0194266BC5C90C8C1A48469E07AED82F8103
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42979
IP address blocks: 45.95.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c5:c9:0c:8c:1a:48:46:9e:07:ae:d8:2f:81:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74a96fdeae56d1990fb3e7c734657354f7a1ae19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:3f:55:d0:d0:18:d5:9e:f7:e6:ad:23:2a:
37:e1:65:82:08:59:e4:ca:a2:4c:f1:fd:82:e4:8c:
33:d7:c7:03:0d:5b:be:27:5d:e1:77:d4:1c:81:5f:
af:6f:fb:35:d4:72:b2:fc:c2:bf:ad:d1:6a:8a:06:
bf:10:db:47:c4:ee:00:4c:57:ea:b4:26:0a:e7:41:
3c:bf:aa:72:60:c0:38:ba:23:e8:94:66:40:fa:c6:
12:f3:97:4a:d9:9f:4a:1f:71:7b:ad:dc:34:1d:6d:
44:d1:53:63:20:54:11:8e:95:6f:a7:45:c0:f0:1e:
bf:5a:86:cb:0f:2a:e3:45:66:de:37:3b:c7:b3:33:
c5:c5:d2:49:5e:2a:ee:55:a4:7c:5f:85:ba:ae:45:
49:61:2a:e0:fa:20:24:34:65:c5:a5:a0:54:e8:bc:
e9:fd:af:bc:40:1b:ba:4a:2c:9a:23:f6:15:e7:a4:
80:40:34:7e:f6:2c:ac:dc:39:b2:b9:4e:c2:14:22:
f1:39:92:4c:85:e5:95:2a:0d:fe:67:11:bc:33:d7:
54:da:c4:cd:99:0f:bd:f8:f2:28:f8:07:d6:50:b7:
81:8e:6d:ed:d6:06:83:7d:99:ba:5a:b5:17:d4:c5:
c6:ac:de:28:a2:d2:ff:c1:d2:9d:90:ba:fa:80:ec:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A9:6F:DE:AE:56:D1:99:0F:B3:E7:C7:34:65:73:54:F7:A1:AE:19
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.33.0/24
Signature Algorithm: sha256WithRSAEncryption
63:25:b5:6a:7b:7c:0d:38:11:32:cb:0c:f9:51:5f:35:af:51:
9d:c2:5e:29:a3:cb:01:db:d9:8b:6a:0a:6d:eb:82:38:25:99:
fa:0e:84:7a:a6:30:ff:4a:f0:51:d1:dc:86:fb:0e:49:cd:67:
fd:4e:a3:6b:bc:c8:d6:d6:7d:95:67:c0:c4:67:ad:81:2d:37:
ca:3c:4d:24:75:f5:5d:cb:08:33:b2:ce:5a:63:d2:5e:26:4d:
69:fd:1f:2e:08:01:5a:93:dd:c0:84:eb:54:0c:f8:29:8a:94:
6c:a8:11:ec:c1:bf:26:5b:d0:48:73:d5:45:10:ea:11:2f:76:
ce:a5:6a:62:10:a0:c6:a2:7e:d6:9b:d9:70:75:9e:97:f6:0b:
76:7c:93:19:4e:e3:ff:41:c4:bd:9f:4b:94:c8:f8:47:1e:b0:
ae:13:02:fe:3d:64:92:7d:55:54:b8:6c:3d:fa:6e:26:e0:e3:
f5:e5:11:6a:a9:ac:c1:7f:17:a4:f8:7f:67:5f:ab:5e:61:5f:
cd:66:23:b2:84:02:92:41:4a:e9:99:4b:84:db:83:2e:a3:6c:
bf:8a:8d:49:16:11:ca:a2:0b:d8:c7:0e:47:9c:ca:1f:0e:9e:
7a:ad:c5:dc:0a:31:0d:5a:28:7b:c4:73:b3:f3:a5:d9:e4:6c:
4b:a6:35:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8XJDIwaSEaeB67YL4EDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjUwMTAyMDk0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGE5NmZkZWFlNTZkMTk5MGZiM2U3YzczNDY1NzM1NGY3YTFhZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48Y/VdDQGNWe9+atIyo34WWCCFnk
yqJM8f2C5Iwz18cDDVu+J13hd9QcgV+vb/s11HKy/MK/rdFqiga/ENtHxO4ATFfq
tCYK50E8v6pyYMA4uiPolGZA+sYS85dK2Z9KH3F7rdw0HW1E0VNjIFQRjpVvp0XA
8B6/WobLDyrjRWbeNzvHszPFxdJJXiruVaR8X4W6rkVJYSrg+iAkNGXFpaBU6Lzp
/a+8QBu6SiyaI/YV56SAQDR+9iys3DmyuU7CFCLxOZJMheWVKg3+ZxG8M9dU2sTN
mQ+9+PIo+AfWULeBjm3t1gaDfZm6WrUX1MXGrN4ootL/wdKdkLr6gOwWBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSpb96uVtGZD7PnxzRlc1T3oa4ZMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvZEtsdjNxNVcwWmtQcy1mSE5HVnpWUGVocmhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV8hMA0G
CSqGSIb3DQEBCwUAA4IBAQBjJbVqe3wNOBEyywz5UV81r1Gdwl4po8sB29mLagpt
64I4JZn6DoR6pjD/SvBR0dyG+w5JzWf9TqNrvMjW1n2VZ8DEZ62BLTfKPE0kdfVd
ywgzss5aY9JeJk1p/R8uCAFak93AhOtUDPgpipRsqBHswb8mW9BIc9VFEOoRL3bO
pWpiEKDGon7Wm9lwdZ6X9gt2fJMZTuP/QcS9n0uUyPhHHrCuEwL+PWSSfVVUuGw9
+m4m4OP15RFqqazBfxek+H9nX6teYV/NZiOyhAKSQUrpmUuE24Muo2y/io1JFhHK
ogvYxw5HnMofDp56rcXcCjENWih7xHOz86XZ5GxLpjWA
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:38 2025 by rpki-client