Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/OfliSFK47yOA2Tkix0wrkAH4x2c.roa
File: OfliSFK47yOA2Tkix0wrkAH4x2c.roa (raw, json)
Hash identifier: B0Voqn9uU+7JqaJFZrNcBBKpjX2nZFFKEZ39gYCt+es=
Subject key identifier: 39:F9:62:48:52:B8:EF:23:80:D9:39:22:C7:4C:2B:90:01:F8:C7:67
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 0194236976710827F64E09E54EA3F78A0A3A
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/OfliSFK47yOA2Tkix0wrkAH4x2c.roa
Signing time: Wed 01 Jan 2025 19:48:21 +0000
ROA not before: Wed 01 Jan 2025 19:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57752
IP address blocks: 45.10.45.0/24 maxlen: 24
45.10.46.0/23 maxlen: 23
45.88.68.0/22 maxlen: 24
45.89.152.0/22 maxlen: 22
45.91.144.0/22 maxlen: 22
45.130.236.0/22 maxlen: 22
45.130.236.0/24 maxlen: 24
45.130.237.0/24 maxlen: 24
45.130.238.0/24 maxlen: 24
45.130.239.0/24 maxlen: 24
83.136.148.0/23 maxlen: 23
83.136.150.0/23 maxlen: 23
91.206.10.0/24 maxlen: 24
109.205.64.0/21 maxlen: 21
176.118.172.0/22 maxlen: 22
185.17.56.0/22 maxlen: 22
185.17.56.0/24 maxlen: 24
185.17.57.0/24 maxlen: 24
185.54.36.0/22 maxlen: 22
185.167.220.0/22 maxlen: 22
185.234.48.0/22 maxlen: 22
195.12.37.0/24 maxlen: 24
2a03:dc00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:76:71:08:27:f6:4e:09:e5:4e:a3:f7:8a:0a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Jan 1 19:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39f9624852b8ef2380d93922c74c2b9001f8c767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:29:7b:80:2c:bc:bf:bc:2c:cc:96:01:b5:
1d:0a:5b:2d:6e:27:be:ed:9b:67:a9:d1:62:00:00:
c7:c4:b8:ab:57:e3:5b:d7:b0:1a:98:90:9d:fb:a9:
01:d1:31:9c:a3:54:4a:2a:7a:9b:e7:82:7c:ba:6b:
14:cd:f5:19:ff:f1:8c:e0:61:fd:8c:49:6c:0a:a3:
59:67:f6:75:63:0f:28:bf:94:de:e3:7c:3b:19:0c:
83:b9:1b:8d:7c:18:a0:a9:34:cd:6b:fb:79:97:31:
18:20:d0:eb:23:3f:02:93:7e:cd:1f:06:e1:9a:ea:
07:f6:f0:31:f5:86:40:0b:fa:0b:6b:60:3e:41:a4:
0b:4a:8d:b5:3c:14:dd:1f:71:10:7c:8f:62:34:4f:
aa:71:7d:54:fd:25:b6:92:f9:e3:ad:ea:6a:7c:68:
96:89:9f:cc:a8:80:5b:71:fb:46:16:bb:33:80:3b:
eb:9d:ed:f9:39:d5:b9:70:3f:ba:3a:82:2b:95:92:
10:b3:74:ff:2b:6b:7c:39:e5:69:32:a3:ee:2e:fc:
3b:f8:78:97:28:d5:e8:eb:1b:b0:d4:46:13:03:f4:
b7:f0:40:08:a9:b6:ab:a5:ae:e3:7b:57:30:02:28:
4e:e0:81:55:24:60:b9:eb:90:02:ef:f8:cb:5e:61:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F9:62:48:52:B8:EF:23:80:D9:39:22:C7:4C:2B:90:01:F8:C7:67
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/OfliSFK47yOA2Tkix0wrkAH4x2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.45.0-45.10.47.255
45.88.68.0/22
45.89.152.0/22
45.91.144.0/22
45.130.236.0/22
83.136.148.0/22
91.206.10.0/24
109.205.64.0/21
176.118.172.0/22
185.17.56.0/22
185.54.36.0/22
185.167.220.0/22
185.234.48.0/22
195.12.37.0/24
IPv6:
2a03:dc00::/32
Signature Algorithm: sha256WithRSAEncryption
ab:f7:39:c8:fc:99:85:52:93:56:a5:80:59:36:e4:07:a6:8a:
16:33:4c:12:a8:d0:c5:73:8c:a3:9e:83:40:bc:35:6f:32:0d:
3c:77:5c:71:a8:76:ba:fb:de:02:81:7d:34:f7:87:4a:59:15:
03:b3:88:1c:73:02:9f:28:a9:35:d0:08:4e:c6:2d:99:38:06:
df:95:e6:b9:e8:46:1d:df:a9:0f:3b:5c:23:5b:a7:27:6e:88:
5c:ea:d9:1e:37:cb:82:3c:95:83:d0:cc:5f:c3:7c:52:88:24:
d0:bc:4c:6d:c6:66:57:1b:ee:6c:32:51:96:e8:59:1a:33:49:
d1:08:54:8b:3f:5c:29:43:e2:98:92:38:92:63:e3:5f:54:36:
59:69:3e:b2:af:62:86:e0:de:16:8b:83:a3:2e:67:0f:66:6c:
b9:58:ec:4f:56:a1:e8:84:f0:f9:eb:6b:6b:16:d3:a8:d6:46:
49:dc:97:f6:e3:8b:d1:23:d0:0d:d0:14:80:97:27:0c:61:ce:
55:8c:45:97:25:d8:ae:bf:e7:06:51:0d:c7:7c:d8:a6:c4:af:
f2:e6:1e:dc:a1:08:aa:c6:ce:ae:ce:65:12:40:d2:5b:0d:fa:
4c:be:18:85:84:55:10:f3:c4:02:e5:9d:b9:39:ae:26:83:7e:
5b:c8:0c:21
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgISAZQjaXZxCCf2TgnlTqP3igo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTllNGVhZTQ4YTAxYzc4MWZhYWQxMWY2ZDgxYTkxZWEz
M2JkZmYwHhcNMjUwMTAxMTk0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWY5NjI0ODUyYjhlZjIzODBkOTM5MjJjNzRjMmI5MDAxZjhjNzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuQpe4AsvL+8LMyWAbUdClstbie+
7ZtnqdFiAADHxLirV+Nb17AamJCd+6kB0TGco1RKKnqb54J8umsUzfUZ//GM4GH9
jElsCqNZZ/Z1Yw8ov5Te43w7GQyDuRuNfBigqTTNa/t5lzEYINDrIz8Ck37NHwbh
muoH9vAx9YZAC/oLa2A+QaQLSo21PBTdH3EQfI9iNE+qcX1U/SW2kvnjrepqfGiW
iZ/MqIBbcftGFrszgDvrne35OdW5cD+6OoIrlZIQs3T/K2t8OeVpMqPuLvw7+HiX
KNXo6xuw1EYTA/S38EAIqbarpa7je1cwAihO4IFVJGC565AC7/jLXmEPLwIDAQAB
o4ICbzCCAmswHQYDVR0OBBYEFDn5YkhSuO8jgNk5IsdMK5AB+MdnMB8GA1UdIwQY
MBaAFE+Z5OrkigHHgfqtEfbYGpHqM73/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgt
OGI4ZjNmOGQ3MzAzLzEvT2ZsaVNGSzQ3eU9BMlRraXgwd3JrQUg0eDJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xOWQzMTMtNzc3Yi00MDQ0LWEyMzgtOGI4ZjNmOGQ3MzAz
LzEvVDVuazZ1U0tBY2VCLXEwUjl0Z2FrZW96dmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGEBggrBgEFBQcBBwEB/wR1MHMwYgQCAAEwXDAMAwQALQot
AwQELQogAwQCLVhEAwQCLVmYAwQCLVuQAwQCLYLsAwQCU4iUAwQAW84KAwQDbc1A
AwQCsHasAwQCuRE4AwQCuTYkAwQCuafcAwQCueowAwQAwwwlMA0EAgACMAcDBQAq
A9wAMA0GCSqGSIb3DQEBCwUAA4IBAQCr9znI/JmFUpNWpYBZNuQHpooWM0wSqNDF
c4yjnoNAvDVvMg08d1xxqHa6+94CgX0094dKWRUDs4gccwKfKKk10AhOxi2ZOAbf
lea56EYd36kPO1wjW6cnbohc6tkeN8uCPJWD0Mxfw3xSiCTQvExtxmZXG+5sMlGW
6FkaM0nRCFSLP1wpQ+KYkjiSY+NfVDZZaT6yr2KG4N4Wi4OjLmcPZmy5WOxPVqHo
hPD562trFtOo1kZJ3Jf244vRI9AN0BSAlycMYc5VjEWXJdiuv+cGUQ3HfNimxK/y
5h7coQiqxs6uzmUSQNJbDfpMvhiFhFUQ88QC5Z25Oa4mg35byAwh
-----END CERTIFICATE-----
Generated at Tue Apr 15 07:18:56 2025 by rpki-client