Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/DTywXpxdMwSFx8Fi3gmDYCu-07Y.roa
File: DTywXpxdMwSFx8Fi3gmDYCu-07Y.roa (raw, json)
Hash identifier: YmbLb04yWXUjcfDqoeoKhhoF4tpGIDXV8teNKK4hwuM=
Subject key identifier: 0D:3C:B0:5E:9C:5D:33:04:85:C7:C1:62:DE:09:83:60:2B:BE:D3:B6
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019427B39CC862B017529737FA3181211B1E
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/DTywXpxdMwSFx8Fi3gmDYCu-07Y.roa
Signing time: Thu 02 Jan 2025 15:47:49 +0000
ROA not before: Thu 02 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49321
IP address blocks: 45.149.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:9c:c8:62:b0:17:52:97:37:fa:31:81:21:1b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 2 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d3cb05e9c5d330485c7c162de0983602bbed3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:6b:f1:1d:89:e5:15:e9:09:dc:fe:dd:a0:
52:ab:9f:67:4f:2d:50:35:7f:48:9f:e7:1b:3e:c6:
69:18:74:40:bd:57:a9:df:7a:b4:09:92:b3:5d:9d:
3f:3b:4e:11:a9:c5:9e:4b:d4:c7:a9:c1:15:f2:e4:
b8:65:ba:cf:60:a8:98:32:d3:3a:b8:c5:61:51:f1:
04:b9:0a:fe:15:74:01:44:b7:a1:e4:7a:da:ee:56:
25:bb:56:2f:59:9b:c0:15:9f:d8:00:c3:83:8b:ab:
9c:d3:f8:6a:68:82:39:9a:97:2f:d4:27:c1:49:bb:
3c:d0:fe:3a:e5:6e:b3:f6:9d:55:06:f8:55:88:a7:
50:cb:3f:7c:c6:80:24:00:96:d1:ed:1c:c6:87:9b:
78:73:b5:8f:d4:dd:84:2a:1f:a1:74:49:24:b2:63:
72:dc:93:a3:45:9a:5b:1d:76:7d:91:5a:ca:4c:f8:
d4:74:82:ea:1b:ff:1c:f0:f9:fa:76:21:6b:c4:85:
89:40:97:af:40:2b:7c:d9:48:ef:73:9b:92:76:cb:
78:0d:2a:d2:ff:58:62:6a:12:4e:8d:52:45:1d:a0:
5c:ac:8c:e9:d3:e2:f1:1f:52:d3:dd:95:42:25:7a:
d2:e5:bc:c7:f9:9a:b8:1f:57:92:54:af:ba:e2:12:
65:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3C:B0:5E:9C:5D:33:04:85:C7:C1:62:DE:09:83:60:2B:BE:D3:B6
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/DTywXpxdMwSFx8Fi3gmDYCu-07Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c1:e0:3a:2c:31:39:1b:32:21:ce:7b:51:02:8f:94:c9:ca:
c8:aa:55:ba:77:75:b1:1a:c6:b3:c5:8b:89:4d:d8:9e:e1:c1:
15:25:f6:8d:0a:99:cb:d8:56:bf:0a:33:ae:ed:a8:78:30:cc:
0e:a2:bb:79:0f:81:17:89:d2:54:76:90:93:28:61:9f:a3:a9:
3b:d6:8f:7e:c8:47:5e:af:8e:0f:46:23:67:55:d4:11:f1:c2:
e0:58:9c:e6:b9:a0:43:21:d6:c3:f1:93:6f:fc:8a:d8:fb:d3:
0e:f2:63:33:1e:a4:3c:fd:4c:d2:98:19:8c:56:a2:60:2f:88:
9f:3f:5d:77:27:1f:2d:f6:df:52:fa:e6:da:7a:d6:25:c4:05:
30:18:ea:85:ea:3f:e0:d1:9a:63:04:80:9f:32:a6:16:f5:19:
6c:d9:2c:a5:54:17:3f:16:95:72:62:da:2a:27:01:06:b2:07:
e3:dc:aa:a8:06:b7:27:21:0b:22:5f:49:50:fd:8e:ea:d8:b6:
60:61:8e:8a:7d:ad:9e:ae:2b:00:76:7b:aa:9a:88:69:bc:80:
9e:0c:44:9d:4f:e9:01:73:e7:fa:fe:23:ca:0b:99:9b:6a:4d:
db:2c:fd:bb:52:79:c0:40:6f:df:68:a3:37:c3:07:ec:89:12:
21:4e:a6:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQns5zIYrAXUpc3+jGBIRseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjUwMTAyMTU0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDNjYjA1ZTljNWQzMzA0ODVjN2MxNjJkZTA5ODM2MDJiYmVkM2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvlr8R2J5RXpCdz+3aBSq59nTy1Q
NX9In+cbPsZpGHRAvVep33q0CZKzXZ0/O04RqcWeS9THqcEV8uS4ZbrPYKiYMtM6
uMVhUfEEuQr+FXQBRLeh5Hra7lYlu1YvWZvAFZ/YAMODi6uc0/hqaII5mpcv1CfB
Sbs80P465W6z9p1VBvhViKdQyz98xoAkAJbR7RzGh5t4c7WP1N2EKh+hdEkksmNy
3JOjRZpbHXZ9kVrKTPjUdILqG/8c8Pn6diFrxIWJQJevQCt82Ujvc5uSdst4DSrS
/1hiahJOjVJFHaBcrIzp0+LxH1LT3ZVCJXrS5bzH+Zq4H1eSVK+64hJlZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA08sF6cXTMEhcfBYt4Jg2ArvtO2MB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvRFR5d1hweGRNd1NGeDhGaTNnbURZQ3UtMDdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZUCMA0G
CSqGSIb3DQEBCwUAA4IBAQBNweA6LDE5GzIhzntRAo+UycrIqlW6d3WxGsazxYuJ
Tdie4cEVJfaNCpnL2Fa/CjOu7ah4MMwOort5D4EXidJUdpCTKGGfo6k71o9+yEde
r44PRiNnVdQR8cLgWJzmuaBDIdbD8ZNv/IrY+9MO8mMzHqQ8/UzSmBmMVqJgL4if
P113Jx8t9t9S+ubaetYlxAUwGOqF6j/g0ZpjBICfMqYW9Rls2SylVBc/FpVyYtoq
JwEGsgfj3KqoBrcnIQsiX0lQ/Y7q2LZgYY6Kfa2erisAdnuqmohpvICeDESdT+kB
c+f6/iPKC5mbak3bLP27UnnAQG/faKM3wwfsiRIhTqbQ
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:54:06 2025 by rpki-client