Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/du_MXb8GLOewa44v34_3lLw6dnw.roa
File: du_MXb8GLOewa44v34_3lLw6dnw.roa (raw, json)
Hash identifier: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=
Subject key identifier: 76:EF:CC:5D:BF:06:2C:E7:B0:6B:8E:2F:DF:8F:F7:94:BC:3A:76:7C
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019427B5BBA7CB5BC6B115E36FBCD746337C
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/du_MXb8GLOewa44v34_3lLw6dnw.roa
Signing time: Thu 02 Jan 2025 15:50:08 +0000
ROA not before: Thu 02 Jan 2025 15:50:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 264409
IP address blocks: 45.149.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:bb:a7:cb:5b:c6:b1:15:e3:6f:bc:d7:46:33:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 2 15:50:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76efcc5dbf062ce7b06b8e2fdf8ff794bc3a767c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:ad:7a:02:0e:b1:35:b0:37:98:d8:d4:49:
f7:df:6d:fd:29:95:72:5f:f7:a1:85:10:ea:f5:6e:
74:01:47:ab:9e:dd:55:d2:46:07:90:6b:13:6f:f7:
11:74:8c:07:09:3c:73:da:b1:50:83:82:75:6a:57:
7f:a5:de:0b:7d:4f:7a:8c:8d:ac:ea:64:6e:f0:53:
af:3a:e4:aa:1f:ca:9f:62:6f:87:8a:59:e9:31:c6:
f8:32:97:c4:b2:26:52:01:53:f0:38:d3:64:eb:19:
0d:ab:5e:02:bf:f6:5e:22:0f:01:76:d0:84:08:76:
ce:90:6b:c4:aa:0d:03:e6:1c:0f:15:39:31:06:7a:
ba:5e:b7:01:bf:c5:4b:3a:77:af:64:e3:5f:d8:97:
e8:3f:db:a9:0f:f8:98:70:b3:24:cc:9f:17:44:22:
12:fc:4c:32:de:6f:96:4e:6d:7b:e2:95:b2:65:17:
a2:df:b1:45:a7:22:6f:be:b7:6f:4e:e5:53:29:9d:
ba:4d:45:31:ee:bf:fa:1b:93:96:71:c6:66:59:9c:
9f:f5:24:fe:01:57:f8:bd:a8:b0:24:85:4c:e9:f3:
6c:d4:05:bf:91:b9:cf:71:b9:dc:c9:de:50:36:e9:
23:78:3b:10:81:ec:19:b4:db:39:d5:12:67:86:6b:
a2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EF:CC:5D:BF:06:2C:E7:B0:6B:8E:2F:DF:8F:F7:94:BC:3A:76:7C
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/du_MXb8GLOewa44v34_3lLw6dnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.95.0/24
Signature Algorithm: sha256WithRSAEncryption
95:06:1e:a3:25:72:a0:b4:06:80:99:ea:81:8e:22:af:af:57:
17:b6:2e:59:ae:30:a1:16:61:33:da:33:5e:09:95:89:c3:b0:
af:01:fd:64:0e:25:0f:33:90:94:15:94:16:29:ee:b6:ff:f4:
8e:0b:71:38:c5:af:e9:cc:cf:8e:9e:c8:21:a0:b9:51:98:f8:
e7:e9:04:d4:2c:0e:59:4c:ad:15:6f:d8:43:e4:73:a8:f7:2a:
d4:96:c4:d4:32:b0:87:3d:73:84:e3:d1:e1:e9:4b:8f:96:56:
aa:41:ba:3d:89:c6:f5:96:cc:fd:ad:26:c4:32:68:23:1d:39:
66:36:45:ff:a7:5c:60:4c:7b:3f:9e:68:d7:85:b9:24:e8:02:
93:d3:bd:e5:7c:2f:2f:4f:b5:03:61:d3:d3:c9:24:92:5b:0b:
d6:7d:de:69:34:a8:3e:74:da:2b:38:7f:33:8f:7e:b8:3d:84:
92:48:61:56:2d:d6:56:ef:3f:a1:59:54:9f:32:f5:6b:6d:a7:
f4:28:e6:9e:bf:e1:81:1b:3a:f3:ea:17:d6:8b:e5:39:ee:43:
3e:f6:fc:c6:23:24:5d:f7:06:35:91:e9:83:90:38:0a:87:cf:
09:35:ee:24:9a:3a:58:72:34:27:6c:f0:1d:84:73:4a:13:b0:
a1:2d:97:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntbuny1vGsRXjb7zXRjN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjUwMTAyMTU1MDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmVmY2M1ZGJmMDYyY2U3YjA2YjhlMmZkZjhmZjc5NGJjM2E3NjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGCtegIOsTWwN5jY1En33239KZVy
X/ehhRDq9W50AUernt1V0kYHkGsTb/cRdIwHCTxz2rFQg4J1ald/pd4LfU96jI2s
6mRu8FOvOuSqH8qfYm+HilnpMcb4MpfEsiZSAVPwONNk6xkNq14Cv/ZeIg8BdtCE
CHbOkGvEqg0D5hwPFTkxBnq6XrcBv8VLOnevZONf2JfoP9upD/iYcLMkzJ8XRCIS
/Ewy3m+WTm174pWyZRei37FFpyJvvrdvTuVTKZ26TUUx7r/6G5OWccZmWZyf9ST+
AVf4vaiwJIVM6fNs1AW/kbnPcbncyd5QNukjeDsQgewZtNs51RJnhmui1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHbvzF2/BiznsGuOL9+P95S8OnZ8MB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvZHVfTVhiOEdMT2V3YTQ0djM0XzNsTHc2ZG53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZVfMA0G
CSqGSIb3DQEBCwUAA4IBAQCVBh6jJXKgtAaAmeqBjiKvr1cXti5ZrjChFmEz2jNe
CZWJw7CvAf1kDiUPM5CUFZQWKe62//SOC3E4xa/pzM+OnsghoLlRmPjn6QTULA5Z
TK0Vb9hD5HOo9yrUlsTUMrCHPXOE49Hh6UuPllaqQbo9icb1lsz9rSbEMmgjHTlm
NkX/p1xgTHs/nmjXhbkk6AKT073lfC8vT7UDYdPTySSSWwvWfd5pNKg+dNorOH8z
j364PYSSSGFWLdZW7z+hWVSfMvVrbaf0KOaev+GBGzrz6hfWi+U57kM+9vzGIyRd
9wY1kemDkDgKh88JNe4kmjpYcjQnbPAdhHNKE7ChLZcn
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:13 2025 by rpki-client