Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ceO16qlffjwVmTDre4MTi9JYh1w.roa
File: ceO16qlffjwVmTDre4MTi9JYh1w.roa (raw, json)
Hash identifier: LdrSCC7KTOiFTOG9K1IEELZSSon5d8KH3uKvarSFJ6c=
Subject key identifier: 71:E3:B5:EA:A9:5F:7E:3C:15:99:30:EB:7B:83:13:8B:D2:58:87:5C
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01941F8C097D53B79525446D90B8825FA0DD
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ceO16qlffjwVmTDre4MTi9JYh1w.roa
Signing time: Wed 01 Jan 2025 01:47:38 +0000
ROA not before: Wed 01 Jan 2025 01:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.66.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:09:7d:53:b7:95:25:44:6d:90:b8:82:5f:a0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 1 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71e3b5eaa95f7e3c159930eb7b83138bd258875c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:db:3e:1b:c9:c1:35:fe:99:e5:05:f9:21:
c4:9f:2a:89:e7:3c:4b:d5:86:3e:f3:c9:9d:c0:1b:
db:e4:b4:43:bf:72:68:0c:ec:c3:c3:10:18:4e:e0:
5e:23:ad:57:41:4b:62:60:d9:9e:8d:1f:dd:22:da:
a1:32:60:08:8e:ce:d0:a6:a7:84:e1:54:22:5a:ca:
11:95:b8:ba:53:45:8c:8f:2c:79:12:e9:f8:ae:24:
95:e4:ff:8f:1b:f9:d9:24:d6:d2:16:64:c1:ff:8a:
37:dd:bc:38:36:b0:fe:99:d6:77:e3:99:8b:4c:9d:
49:27:16:dd:03:3f:73:3a:83:af:5e:db:4c:b8:67:
5e:73:99:00:6d:7c:ff:5f:a7:a3:c4:67:3e:6b:46:
0f:7a:cf:6f:a3:32:ae:f5:c4:02:30:1d:dd:60:22:
a4:0e:50:e2:9f:77:55:d7:c9:a0:67:e1:7f:ae:6b:
a4:b5:05:d7:1e:c6:d7:d2:83:3f:95:64:cc:2f:1d:
1b:82:d7:e3:b0:f0:91:cf:cb:72:be:fc:38:22:af:
2d:26:5e:49:39:cd:96:f3:80:68:df:fc:b5:ec:34:
38:01:93:c2:b0:a4:a0:1f:cd:e3:5a:c5:c4:10:14:
52:9b:2b:65:5b:72:8a:b4:b4:19:7a:b3:bf:03:8d:
8f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:B5:EA:A9:5F:7E:3C:15:99:30:EB:7B:83:13:8B:D2:58:87:5C
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ceO16qlffjwVmTDre4MTi9JYh1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.94.0/23
Signature Algorithm: sha256WithRSAEncryption
58:a8:40:5f:2a:a6:60:26:b7:f4:9f:ac:1d:a1:60:a7:9e:06:
5d:a8:86:ba:62:b5:38:3e:94:86:26:ab:b6:99:f6:73:be:ac:
19:24:42:27:31:07:16:9c:2a:1f:52:f6:65:14:d2:4b:d1:37:
3e:66:10:d2:b8:f2:72:a2:9f:65:57:2f:8a:54:0b:fc:3d:73:
a9:71:f3:49:b2:cc:87:18:9c:0c:24:4a:c9:05:8e:9b:cd:11:
1c:23:f1:dd:b9:29:bf:e5:05:fb:cf:21:af:c1:af:1a:11:73:
70:48:a9:cf:a1:24:59:de:2a:bd:58:49:aa:1b:a3:d1:48:27:
d2:a5:a1:5d:ff:55:26:bd:3b:49:15:5c:d1:fd:47:5d:22:71:
71:da:72:2e:17:e9:9c:52:42:5d:87:35:f2:7a:99:37:04:e3:
36:08:9b:f9:5c:fd:45:3e:93:c4:6d:7b:bc:ca:3e:30:46:28:
54:eb:60:1c:e1:59:23:d1:f9:f2:5e:59:f8:7b:86:b7:4e:fc:
a8:9a:e8:0d:37:f5:66:26:00:42:c7:e6:ee:25:9f:e8:03:0b:
24:e6:10:6d:ae:06:17:8a:73:87:d7:f3:c2:8a:e5:25:25:8c:
5a:20:7c:01:16:e5:af:5a:58:e2:a9:3b:b5:3e:11:4e:43:18:
e2:e9:c1:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjAl9U7eVJURtkLiCX6DdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjUwMTAxMDE0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWUzYjVlYWE5NWY3ZTNjMTU5OTMwZWI3YjgzMTM4YmQyNTg4NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrXbPhvJwTX+meUF+SHEnyqJ5zxL
1YY+88mdwBvb5LRDv3JoDOzDwxAYTuBeI61XQUtiYNmejR/dItqhMmAIjs7QpqeE
4VQiWsoRlbi6U0WMjyx5Eun4riSV5P+PG/nZJNbSFmTB/4o33bw4NrD+mdZ345mL
TJ1JJxbdAz9zOoOvXttMuGdec5kAbXz/X6ejxGc+a0YPes9vozKu9cQCMB3dYCKk
DlDin3dV18mgZ+F/rmuktQXXHsbX0oM/lWTMLx0bgtfjsPCRz8tyvvw4Iq8tJl5J
Oc2W84Bo3/y17DQ4AZPCsKSgH83jWsXEEBRSmytlW3KKtLQZerO/A42PcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHHjteqpX348FZkw63uDE4vSWIdcMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvY2VPMTZxbGZmandWbVREcmU0TVRpOUpZaDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUJeMA0G
CSqGSIb3DQEBCwUAA4IBAQBYqEBfKqZgJrf0n6wdoWCnngZdqIa6YrU4PpSGJqu2
mfZzvqwZJEInMQcWnCofUvZlFNJL0Tc+ZhDSuPJyop9lVy+KVAv8PXOpcfNJssyH
GJwMJErJBY6bzREcI/HduSm/5QX7zyGvwa8aEXNwSKnPoSRZ3iq9WEmqG6PRSCfS
paFd/1UmvTtJFVzR/UddInFx2nIuF+mcUkJdhzXyepk3BOM2CJv5XP1FPpPEbXu8
yj4wRihU62Ac4Vkj0fnyXln4e4a3TvyomugNN/VmJgBCx+buJZ/oAwsk5hBtrgYX
inOH1/PCiuUlJYxaIHwBFuWvWljiqTu1PhFOQxji6cEy
-----END CERTIFICATE-----
Generated at Wed Feb 5 08:51:18 2025 by rpki-client