Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/OOWsOYaSoAqJ3HO-R5wNTcf_irg.roa
File: OOWsOYaSoAqJ3HO-R5wNTcf_irg.roa (raw, json)
Hash identifier: FHVKtTLfD9KJ5KSxDig6awJ13wpTnxgLs+NcZ0Q//g4=
Subject key identifier: 38:E5:AC:39:86:92:A0:0A:89:DC:73:BE:47:9C:0D:4D:C7:FF:8A:B8
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 019427486D28579D21D47505CB0279C1AD97
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/OOWsOYaSoAqJ3HO-R5wNTcf_irg.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 45.141.54.0/24 maxlen: 24
45.155.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6d:28:57:9d:21:d4:75:05:cb:02:79:c1:ad:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38e5ac398692a00a89dc73be479c0d4dc7ff8ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:a4:8c:dd:4c:14:68:97:ed:a8:12:bf:c9:
56:18:d1:ca:94:4b:d5:3a:4c:91:c8:e1:7f:ce:33:
88:17:6d:02:a8:12:fe:2f:36:91:9d:a3:c8:fd:99:
f6:40:d3:b5:4b:f5:f3:80:4b:28:33:86:09:e3:c3:
56:bf:b2:f7:61:d3:00:a9:0f:96:6e:c1:13:3a:f3:
87:c3:e6:48:a1:f6:66:0a:9b:57:68:96:53:af:96:
a2:7e:93:e5:02:6f:f5:77:ca:78:27:5b:de:ad:82:
e8:45:f8:be:ee:3e:9b:be:4f:b4:84:39:68:d5:a6:
12:25:e6:46:f6:41:33:ac:c0:4c:86:5d:3a:e4:27:
09:9a:9d:b3:77:34:d6:4e:7f:b3:15:1b:3e:59:c6:
4d:63:9d:0e:38:3c:23:8f:20:3d:0c:43:c2:84:b5:
5b:e2:65:59:03:40:98:05:cf:a1:2c:6b:34:8d:0d:
2a:d7:87:3b:e6:34:89:a9:48:91:f2:0a:38:8b:ce:
08:57:2f:06:ae:5a:cf:e4:45:a7:4d:d6:81:6e:dd:
78:b8:9a:e9:4d:03:6f:3c:42:79:d6:13:fd:76:25:
41:29:26:c2:38:79:45:99:05:05:a1:70:cb:86:6c:
17:8f:13:2f:4a:e0:bc:7a:f2:78:d5:d0:84:5c:45:
06:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E5:AC:39:86:92:A0:0A:89:DC:73:BE:47:9C:0D:4D:C7:FF:8A:B8
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/OOWsOYaSoAqJ3HO-R5wNTcf_irg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.54.0/24
45.155.77.0/24
Signature Algorithm: sha256WithRSAEncryption
59:45:8d:04:7e:f3:d9:e0:28:a2:99:ed:83:a0:bd:36:79:fa:
10:af:e5:67:3e:c8:72:f4:3f:00:b2:0c:64:32:b6:4c:f5:3a:
ab:5d:fd:1a:6f:63:11:c1:8c:88:22:35:3f:6e:a7:9b:1a:2f:
0f:d0:cc:28:2c:ab:55:6a:2e:4b:57:c1:71:18:6c:2c:7d:a7:
0c:c7:b6:30:05:de:bd:e2:02:4d:09:28:ac:a3:51:62:7f:c5:
3e:03:87:9e:e6:c7:98:04:2c:71:61:1f:fb:61:75:cb:bd:1b:
bb:17:07:fc:22:35:53:32:4e:c4:cf:39:cf:8a:41:16:27:fc:
d0:68:18:70:29:a5:67:c9:25:cd:f1:96:4a:cb:c6:7d:35:38:
ca:3a:f4:73:31:94:33:a3:1a:73:3d:45:eb:fd:b1:2c:e4:d5:
82:ad:38:c5:41:e1:9f:b3:1a:c1:78:d1:f7:d3:eb:bb:d6:49:
15:07:cd:7c:17:40:3a:f4:ed:a2:63:7a:52:42:ff:9e:35:cb:
a6:13:3c:70:7c:51:8d:21:2c:fe:18:5d:2f:f2:ac:5e:97:84:
8e:fe:41:5e:cd:45:b5:e3:ca:83:a3:72:73:50:5f:8c:dd:09:
dd:dd:a7:27:95:dd:84:36:38:22:b6:8f:22:6a:74:23:5a:74:
fd:bb:e2:f4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnSG0oV50h1HUFywJ5wa2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2
NGRlMGYwHhcNMjUwMTAyMTM1MDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOGU1YWMzOTg2OTJhMDBhODlkYzczYmU0NzljMGQ0ZGM3ZmY4YWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKCkjN1MFGiX7agSv8lWGNHKlEvV
OkyRyOF/zjOIF20CqBL+LzaRnaPI/Zn2QNO1S/XzgEsoM4YJ48NWv7L3YdMAqQ+W
bsETOvOHw+ZIofZmCptXaJZTr5aifpPlAm/1d8p4J1verYLoRfi+7j6bvk+0hDlo
1aYSJeZG9kEzrMBMhl065CcJmp2zdzTWTn+zFRs+WcZNY50OODwjjyA9DEPChLVb
4mVZA0CYBc+hLGs0jQ0q14c75jSJqUiR8go4i84IVy8GrlrP5EWnTdaBbt14uJrp
TQNvPEJ51hP9diVBKSbCOHlFmQUFoXDLhmwXjxMvSuC8evJ41dCEXEUGNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDjlrDmGkqAKidxzvkecDU3H/4q4MB8GA1UdIwQY
MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt
MTJlYzIyYzljNWEyLzEvT09Xc09ZYVNvQXFKM0hPLVI1d05UY2ZfaXJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy
LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY02AwQA
LZtNMA0GCSqGSIb3DQEBCwUAA4IBAQBZRY0EfvPZ4Ciime2DoL02efoQr+VnPshy
9D8AsgxkMrZM9TqrXf0ab2MRwYyIIjU/bqebGi8P0MwoLKtVai5LV8FxGGwsfacM
x7YwBd694gJNCSiso1Fif8U+A4ee5seYBCxxYR/7YXXLvRu7Fwf8IjVTMk7EzznP
ikEWJ/zQaBhwKaVnySXN8ZZKy8Z9NTjKOvRzMZQzoxpzPUXr/bEs5NWCrTjFQeGf
sxrBeNH30+u71kkVB818F0A69O2iY3pSQv+eNcumEzxwfFGNISz+GF0v8qxel4SO
/kFezUW148qDo3JzUF+M3Qnd3acnld2ENjgito8ianQjWnT9u+L0
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:14 2025 by rpki-client