Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/YlAQYHKswIx5RRtI3kgTMKsZmbI.roa
File: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (raw, json)
Hash identifier: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=
Subject key identifier: 62:50:10:60:72:AC:C0:8C:79:45:1B:48:DE:48:13:30:AB:19:99:B2
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067BD84A34C4122EC8FF50E4512518B
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/YlAQYHKswIx5RRtI3kgTMKsZmbI.roa
Signing time: Wed 01 Jan 2025 05:47:37 +0000
ROA not before: Wed 01 Jan 2025 05:47:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35251
IP address blocks: 45.138.68.0/24 maxlen: 24
45.138.69.0/24 maxlen: 24
45.138.70.0/24 maxlen: 24
45.138.71.0/24 maxlen: 24
45.158.20.0/24 maxlen: 24
45.158.21.0/24 maxlen: 24
45.158.22.0/24 maxlen: 24
45.158.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:bd:84:a3:4c:41:22:ec:8f:f5:0e:45:12:51:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6250106072acc08c79451b48de481330ab1999b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a9:b8:54:64:5f:7c:05:05:e9:69:6a:d6:e2:
6b:1f:9e:cc:65:b5:56:aa:44:fe:81:51:30:28:60:
25:82:5a:b3:2b:ba:d6:21:47:2f:c1:e2:5a:d9:0f:
01:6f:86:e4:0f:e2:a7:16:13:0f:e8:77:78:69:d3:
a0:0a:a1:22:3c:d7:23:86:70:87:46:ea:60:61:65:
c1:41:fc:0f:52:62:95:29:40:a8:ea:34:a8:9a:9f:
ff:d4:dd:21:72:7d:59:60:e8:39:f6:b9:68:b3:36:
e2:1f:aa:83:11:c4:24:4e:c7:93:d4:08:7a:1c:73:
b4:40:fa:cd:14:fb:2b:37:6c:75:51:d2:5d:69:93:
5e:d0:f4:4f:f5:76:d4:7a:dc:7c:8b:3a:8e:14:93:
85:10:96:3f:2b:6a:83:52:3b:69:6c:cd:8a:80:3f:
2a:63:24:d6:cb:80:34:a9:fe:94:fe:36:87:92:84:
0d:3f:15:f7:51:a6:15:11:4a:1c:31:75:16:5f:47:
b5:21:0e:41:d7:21:ab:13:55:62:2c:a0:b7:22:c2:
51:80:ac:9c:a4:9c:62:55:b7:47:c8:30:1f:fc:37:
b7:2f:8c:0d:af:a4:79:b4:05:c0:d1:48:d9:e2:36:
7f:ab:80:fc:95:c8:33:58:e8:75:c7:0c:d5:19:17:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:50:10:60:72:AC:C0:8C:79:45:1B:48:DE:48:13:30:AB:19:99:B2
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/YlAQYHKswIx5RRtI3kgTMKsZmbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.68.0/22
45.158.20.0/22
Signature Algorithm: sha256WithRSAEncryption
99:56:be:bd:6e:2e:ba:ff:59:63:32:16:d2:fb:b3:a3:9d:4e:
56:67:49:21:d7:6a:5c:17:ca:16:85:7d:a1:49:7c:d8:85:9a:
e4:36:88:3e:6b:7d:9a:74:b0:d1:7c:cc:ca:89:12:eb:76:8c:
4d:24:3d:7c:a9:22:1a:1c:f5:9d:3c:53:ce:53:5d:67:c5:46:
c4:ae:c4:86:91:a0:54:84:39:b2:0d:e6:bf:b9:4a:1b:c3:bd:
4f:5c:19:f5:40:25:82:36:c0:ad:f5:f8:77:d2:7f:58:bf:12:
9f:ff:ac:3c:b9:4f:1e:61:b7:3b:c4:b9:50:61:1a:0a:18:7f:
48:1c:0a:05:06:5b:72:c3:b5:4d:aa:b3:c5:2f:61:6e:3c:ee:
fc:7b:99:00:1a:c0:48:f0:3c:06:3f:7c:02:ce:e9:27:38:7b:
56:95:e0:13:f2:50:6d:32:4a:08:86:1c:bc:12:21:d5:c7:b8:
79:c1:46:b6:49:8f:ac:48:a6:8a:d0:6a:b1:6a:77:ff:24:6e:
7f:0b:9f:1b:1a:e9:ee:7c:ba:17:4b:0c:52:c0:2b:ed:d7:b0:
a5:c4:b7:a1:02:78:38:d8:0b:5d:a7:6a:d3:3e:87:cd:51:79:
81:e6:0e:ed:53:fc:54:e7:92:37:7a:59:9e:c1:67:c1:ff:0d:
7e:02:af:ca
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgZ72Eo0xBIuyP9Q5FElGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1
YTYyNDQwHhcNMjUwMTAxMDU0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjUwMTA2MDcyYWNjMDhjNzk0NTFiNDhkZTQ4MTMzMGFiMTk5OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6m4VGRffAUF6Wlq1uJrH57MZbVW
qkT+gVEwKGAlglqzK7rWIUcvweJa2Q8Bb4bkD+KnFhMP6Hd4adOgCqEiPNcjhnCH
RupgYWXBQfwPUmKVKUCo6jSomp//1N0hcn1ZYOg59rloszbiH6qDEcQkTseT1Ah6
HHO0QPrNFPsrN2x1UdJdaZNe0PRP9XbUetx8izqOFJOFEJY/K2qDUjtpbM2KgD8q
YyTWy4A0qf6U/jaHkoQNPxX3UaYVEUocMXUWX0e1IQ5B1yGrE1ViLKC3IsJRgKyc
pJxiVbdHyDAf/De3L4wNr6R5tAXA0UjZ4jZ/q4D8lcgzWOh1xwzVGRcuvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGJQEGByrMCMeUUbSN5IEzCrGZmyMB8GA1UdIwQY
MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt
MDg1MmNiMzUzMjkzLzEvWWxBUVlIS3N3SXg1UlJ0STNrZ1RNS3NabWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz
LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYpEAwQC
LZ4UMA0GCSqGSIb3DQEBCwUAA4IBAQCZVr69bi66/1ljMhbS+7OjnU5WZ0kh12pc
F8oWhX2hSXzYhZrkNog+a32adLDRfMzKiRLrdoxNJD18qSIaHPWdPFPOU11nxUbE
rsSGkaBUhDmyDea/uUobw71PXBn1QCWCNsCt9fh30n9YvxKf/6w8uU8eYbc7xLlQ
YRoKGH9IHAoFBltyw7VNqrPFL2FuPO78e5kAGsBI8DwGP3wCzuknOHtWleAT8lBt
MkoIhhy8EiHVx7h5wUa2SY+sSKaK0Gqxanf/JG5/C58bGunufLoXSwxSwCvt17Cl
xLehAng42Atdp2rTPofNUXmB5g7tU/xU55I3elmewWfB/w1+Aq/K
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:38 2025 by rpki-client