Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa
File: RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa (raw, json)
Hash identifier: M6AyczLNwaE/pwZJ9qp9kSzxL5JgaMLnNyyEPKCm858=
Subject key identifier: 46:81:93:CA:5B:00:BC:9D:24:7D:4A:90:98:E1:8C:18:F9:78:94:CC
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 01942824348AC5F7F07E7C6A04D1F51813BC
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa
Signing time: Thu 02 Jan 2025 17:50:48 +0000
ROA not before: Thu 02 Jan 2025 17:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 11331
IP address blocks: 45.157.70.0/24 maxlen: 24
45.157.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:34:8a:c5:f7:f0:7e:7c:6a:04:d1:f5:18:13:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Jan 2 17:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=468193ca5b00bc9d247d4a9098e18c18f97894cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:81:c6:3e:41:62:2d:e6:08:93:3e:66:1d:
f0:45:79:7b:35:9b:96:56:24:39:de:13:ff:09:d5:
e9:dc:ea:6c:a9:c0:ec:63:c0:61:f2:db:7d:ce:a4:
5b:3d:5f:16:9d:2e:71:68:38:fe:91:28:ce:0c:67:
0d:2f:4b:22:2e:05:01:6d:7e:fa:5d:b7:10:be:16:
c5:3a:de:a5:00:c6:68:c1:28:4d:04:6f:a1:2c:d6:
25:fc:74:4e:2f:f6:e8:1f:92:90:74:20:aa:b1:0a:
9d:d9:ad:66:ec:0b:70:79:93:57:8d:a8:ec:9b:44:
af:64:50:66:8f:d2:26:ad:a1:53:31:b2:9c:d4:1a:
57:22:78:29:91:06:a4:0b:6e:4f:9b:59:ae:0d:fc:
29:38:6d:92:0c:5c:e3:8e:21:07:21:8a:54:c0:ae:
4b:36:4b:f5:18:b9:6a:d1:3f:3d:f6:25:f3:40:86:
03:53:9b:47:bd:ce:3e:e4:94:99:2b:8e:9f:87:bc:
26:a9:2f:23:5e:ed:fd:89:2e:f6:55:64:06:5a:b2:
a4:64:70:4d:5e:fa:99:55:a7:7e:e6:70:6d:4b:52:
e6:20:58:f7:38:af:ec:b2:1f:d4:23:bc:68:91:6f:
a7:b7:bb:22:ca:61:aa:cf:cf:f5:90:c1:09:e0:c7:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:81:93:CA:5B:00:BC:9D:24:7D:4A:90:98:E1:8C:18:F9:78:94:CC
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.70.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:00:a2:ba:27:b3:b2:5f:28:ea:0e:44:f7:73:f6:d5:aa:26:
59:e4:b3:82:0e:25:b9:d3:f6:3e:a5:0b:55:68:71:58:09:fe:
22:6d:26:0b:14:9a:81:dc:68:f0:39:cc:b3:02:71:98:0e:27:
8c:2e:ef:7d:92:43:b2:b0:1c:22:47:4d:8f:f7:59:13:85:68:
7f:93:d5:63:13:bd:6c:d4:4e:4f:94:d2:50:f2:fc:19:ca:50:
97:79:16:3f:38:89:89:f9:c1:18:b7:39:13:19:7d:16:b8:c8:
82:b6:c0:e4:36:88:ff:c6:0f:a8:96:30:95:9f:f7:e6:10:a7:
7e:7b:0b:63:91:d4:01:6f:e0:4d:92:44:ba:d2:85:68:47:93:
21:78:f5:3f:4d:48:09:bd:a3:f3:3d:7a:3f:51:53:57:68:7e:
dc:8b:ec:28:f5:97:2f:4a:ad:bc:9b:bd:60:bc:c2:21:56:40:
2e:0f:04:9c:12:47:44:44:27:8a:ca:2a:cd:9c:e4:4f:b7:8a:
03:28:60:a9:1a:bb:de:59:26:01:24:a6:94:d2:fe:73:5e:02:
15:6d:8d:63:57:6a:43:fd:4b:db:2c:28:34:ee:dd:00:b3:86:
4d:39:35:cd:bb:69:aa:1b:9c:05:6d:1b:98:8a:69:75:b4:71:
b1:9f:20:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJDSKxffwfnxqBNH1GBO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDAzMTUzNzNiMDliMDYxYWE1OWYxMjlkNTkyZWFiZjdi
M2FhZWYwHhcNMjUwMTAyMTc1MDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjgxOTNjYTViMDBiYzlkMjQ3ZDRhOTA5OGUxOGMxOGY5Nzg5NGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7SBxj5BYi3mCJM+Zh3wRXl7NZuW
ViQ53hP/CdXp3OpsqcDsY8Bh8tt9zqRbPV8WnS5xaDj+kSjODGcNL0siLgUBbX76
XbcQvhbFOt6lAMZowShNBG+hLNYl/HROL/boH5KQdCCqsQqd2a1m7AtweZNXjajs
m0SvZFBmj9ImraFTMbKc1BpXIngpkQakC25Pm1muDfwpOG2SDFzjjiEHIYpUwK5L
Nkv1GLlq0T899iXzQIYDU5tHvc4+5JSZK46fh7wmqS8jXu39iS72VWQGWrKkZHBN
XvqZVad+5nBtS1LmIFj3OK/ssh/UI7xokW+nt7siymGqz8/1kMEJ4Mc4gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEaBk8pbALydJH1KkJjhjBj5eJTMMB8GA1UdIwQY
MBaAFKHQMVNzsJsGGqWfEp1ZLqv3s6rvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMt
ZGZjYmRmM2IxMDU4LzEvUm9HVHlsc0F2SjBrZlVxUW1PR01HUGw0bE13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xYmNiMmQtZjU4Yi00ZTQ0LWIxMzMtZGZjYmRmM2IxMDU4
LzEvb2RBeFUzT3dtd1lhcFo4U25Wa3VxX2V6cXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ1GMA0G
CSqGSIb3DQEBCwUAA4IBAQB9AKK6J7OyXyjqDkT3c/bVqiZZ5LOCDiW50/Y+pQtV
aHFYCf4ibSYLFJqB3GjwOcyzAnGYDieMLu99kkOysBwiR02P91kThWh/k9VjE71s
1E5PlNJQ8vwZylCXeRY/OImJ+cEYtzkTGX0WuMiCtsDkNoj/xg+oljCVn/fmEKd+
ewtjkdQBb+BNkkS60oVoR5MhePU/TUgJvaPzPXo/UVNXaH7ci+wo9ZcvSq28m71g
vMIhVkAuDwScEkdERCeKyirNnORPt4oDKGCpGrveWSYBJKaU0v5zXgIVbY1jV2pD
/UvbLCg07t0As4ZNOTXNu2mqG5wFbRuYiml1tHGxnyCy
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:15:54 2025 by rpki-client