Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa
File: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (raw, json)
Hash identifier: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=
Subject key identifier: 0C:F4:C3:58:1A:5D:2A:B7:3D:60:36:CE:DE:21:3B:88:CB:15:78:04
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 0194221F54ADBD402C069C84F842B39316E9
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa
Signing time: Wed 01 Jan 2025 13:47:46 +0000
ROA not before: Wed 01 Jan 2025 13:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215399
IP address blocks: 194.62.45.0/24 maxlen: 24
2001:67c:e18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:54:ad:bd:40:2c:06:9c:84:f8:42:b3:93:16:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: Jan 1 13:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cf4c3581a5d2ab73d6036cede213b88cb157804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:87:0d:b1:50:02:33:a7:28:57:99:95:62:
db:42:97:33:58:0b:71:60:2a:f6:77:a7:61:70:4f:
e7:98:97:21:a8:1a:b5:2c:30:91:ee:4f:1f:e0:57:
b8:ed:bb:33:c7:45:08:b1:c5:44:d9:74:d5:77:99:
91:bc:b7:bb:24:36:d5:4c:d1:8f:96:83:69:6e:66:
65:69:56:52:f7:e0:df:70:03:8e:0e:88:f0:09:22:
a5:89:2a:9a:ad:3c:f9:d3:61:4d:65:19:09:3e:a4:
03:0b:16:90:52:ac:89:46:d7:18:42:d9:55:c9:91:
b7:14:e8:94:81:8f:88:de:9b:f8:11:2e:da:aa:d4:
a7:53:c9:76:a7:c8:85:b4:d3:fd:f4:96:e8:9e:1b:
0f:59:00:96:2f:e6:ec:70:8c:0f:0a:65:18:6b:ef:
be:41:6a:ca:f7:a5:cb:8e:09:83:65:6f:93:f2:10:
50:56:d6:09:e9:fc:1f:c2:08:f6:b2:13:da:e3:fe:
1c:fe:60:66:96:b4:47:2f:21:98:d0:69:85:2e:32:
63:19:2a:a6:a3:2a:42:a9:d2:f5:83:0f:68:dd:61:
f2:58:89:da:9b:c4:56:00:ff:77:6d:bc:a1:05:ee:
c5:af:26:ce:9b:6a:40:17:0c:79:5a:e7:1e:13:a7:
a5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F4:C3:58:1A:5D:2A:B7:3D:60:36:CE:DE:21:3B:88:CB:15:78:04
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.45.0/24
IPv6:
2001:67c:e18::/48
Signature Algorithm: sha256WithRSAEncryption
33:e7:6c:24:4a:4e:7b:40:bf:37:36:6a:f9:a9:60:bf:9c:64:
fc:e2:a2:3a:d3:37:7c:a1:f0:9c:8f:f7:d1:ad:32:a5:1c:a5:
ef:48:d9:e4:b7:ab:9a:26:d3:33:fe:b5:ec:62:1e:3a:37:27:
ee:cf:79:a5:f2:cb:17:61:3d:5d:e8:9f:69:b4:0d:d4:4e:92:
f9:ae:38:67:ab:29:24:13:1d:b4:fa:03:2e:11:ca:dc:df:e2:
e7:00:fd:a9:d2:49:8c:e7:e1:b5:70:ab:80:47:b7:c4:82:55:
41:da:46:0d:8a:40:ce:95:a3:fd:dd:2a:4b:2d:87:77:18:2c:
bd:8c:8e:aa:df:9b:4c:c9:c3:4f:6f:61:bc:57:01:c9:d0:e4:
7f:2f:31:b9:ad:f8:b5:ef:5e:38:59:ea:fe:6a:40:38:40:e8:
d5:af:05:31:6a:d6:03:ec:d5:74:10:f0:26:86:5b:1f:95:25:
38:d2:99:b8:62:c3:e0:3a:23:bf:8e:b3:75:a8:a1:29:b8:4c:
c7:64:50:6e:d2:6a:14:50:47:67:22:e1:a3:fa:13:52:a8:d3:
eb:1b:02:27:27:8c:6f:24:5b:46:be:05:99:f5:66:64:d0:bd:
9f:c9:4c:97:c4:d9:63:15:a6:58:8e:28:6f:06:b0:17:90:30:
0e:c5:24:5b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQiH1StvUAsBpyE+EKzkxbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2Y4Y2UyMTU4YzNkZjk1MDUzOTE3MWQ5ZWM1MmRmZDUx
NTYzZTQwHhcNMjUwMTAxMTM0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2Y0YzM1ODFhNWQyYWI3M2Q2MDM2Y2VkZTIxM2I4OGNiMTU3ODA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVyHDbFQAjOnKFeZlWLbQpczWAtx
YCr2d6dhcE/nmJchqBq1LDCR7k8f4Fe47bszx0UIscVE2XTVd5mRvLe7JDbVTNGP
loNpbmZlaVZS9+DfcAOODojwCSKliSqarTz502FNZRkJPqQDCxaQUqyJRtcYQtlV
yZG3FOiUgY+I3pv4ES7aqtSnU8l2p8iFtNP99JbonhsPWQCWL+bscIwPCmUYa+++
QWrK96XLjgmDZW+T8hBQVtYJ6fwfwgj2shPa4/4c/mBmlrRHLyGY0GmFLjJjGSqm
oypCqdL1gw9o3WHyWInam8RWAP93bbyhBe7FrybOm2pAFwx5WuceE6elrwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAz0w1gaXSq3PWA2zt4hO4jLFXgEMB8GA1UdIwQY
MBaAFOt/jOIVjD35UFORcdnsUt/VFWPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQt
MzY2OGYwMDA4NjQ4LzEvRFBURFdCcGRLcmM5WURiTzNpRTdpTXNWZUFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQtMzY2OGYwMDA4NjQ4
LzEvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwj4tMA8E
AgACMAkDBwAgAQZ8DhgwDQYJKoZIhvcNAQELBQADggEBADPnbCRKTntAvzc2avmp
YL+cZPziojrTN3yh8JyP99GtMqUcpe9I2eS3q5om0zP+texiHjo3J+7PeaXyyxdh
PV3on2m0DdROkvmuOGerKSQTHbT6Ay4Rytzf4ucA/anSSYzn4bVwq4BHt8SCVUHa
Rg2KQM6Vo/3dKksth3cYLL2Mjqrfm0zJw09vYbxXAcnQ5H8vMbmt+LXvXjhZ6v5q
QDhA6NWvBTFq1gPs1XQQ8CaGWx+VJTjSmbhiw+A6I7+Os3WooSm4TMdkUG7SahRQ
R2ci4aP6E1Ko0+sbAicnjG8kW0a+BZn1ZmTQvZ/JTJfE2WMVpliOKG8GsBeQMA7F
JFs=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:51 2025 by rpki-client