Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HDh5eE2QV2bNgoPCdQCpLT9lkHM.roa
File: HDh5eE2QV2bNgoPCdQCpLT9lkHM.roa (raw, json)
Hash identifier: ykLTkWpvOrqxOeLDHyJnq7MaKIHVcHbzgL0OobCOOIQ=
Subject key identifier: 1C:38:79:78:4D:90:57:66:CD:82:83:C2:75:00:A9:2D:3F:65:90:73
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01961BD8C1E841E769027E71052043068E89
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HDh5eE2QV2bNgoPCdQCpLT9lkHM.roa
Signing time: Wed 09 Apr 2025 18:38:32 +0000
ROA not before: Wed 09 Apr 2025 18:38:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 45.153.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:d8:c1:e8:41:e7:69:02:7e:71:05:20:43:06:8e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 9 18:38:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c3879784d905766cd8283c27500a92d3f659073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:a1:e5:72:ae:a3:3f:5d:5d:56:b3:36:38:
25:45:07:ca:22:b2:2c:f2:b5:c9:10:40:7f:79:1b:
4e:1e:48:5f:c4:96:7d:db:db:08:04:67:d2:ff:2e:
e5:75:89:e2:57:01:a2:9b:fd:c7:8c:d2:fd:21:58:
d5:95:4d:23:67:ca:08:94:ef:62:a3:69:2c:41:fd:
1d:6d:7f:69:05:11:91:d5:f4:e5:52:8b:82:b1:97:
61:9b:1d:00:42:4b:32:e7:b1:83:c8:e1:73:09:9b:
04:ce:a6:a8:68:1b:f6:f2:28:1e:6c:58:a5:f2:ba:
ef:7f:23:c7:d4:0e:5e:90:f4:1b:68:cf:ba:23:9a:
39:10:53:d2:98:20:e5:b4:e7:d6:6b:a9:11:3a:21:
5e:bb:c9:7d:63:c7:b1:cf:81:cc:e3:d4:d6:1a:5e:
00:df:b7:c9:51:e9:5a:21:52:21:3e:36:0d:49:fc:
6c:c2:3d:fc:64:13:09:5f:83:26:71:12:18:2f:ea:
7d:51:8f:06:4e:7e:26:98:89:49:5b:e8:39:df:07:
f0:47:bd:c2:6c:13:86:ad:41:d1:9f:d1:3a:cb:8d:
73:fc:14:ca:b5:56:60:3a:bd:ce:da:69:cc:05:3a:
ce:8c:e7:ae:89:29:5e:1b:48:ac:62:3c:e7:b1:c6:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:38:79:78:4D:90:57:66:CD:82:83:C2:75:00:A9:2D:3F:65:90:73
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HDh5eE2QV2bNgoPCdQCpLT9lkHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.231.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9f:91:89:aa:c0:9b:ac:ea:f6:42:7b:76:3c:6e:61:82:78:
61:ae:92:ea:a1:e0:8c:b4:4c:68:36:4b:67:37:ac:f3:b8:39:
0c:de:47:59:99:d0:39:2f:14:95:d2:96:65:e0:10:a4:b3:39:
bf:72:d6:ab:d6:a0:c5:6a:c5:f2:d7:42:f3:c7:f5:b1:8c:41:
22:8d:f8:11:81:59:8a:9e:48:26:8d:a5:da:98:9b:e8:11:4a:
a0:f1:af:88:f4:9f:e7:64:d4:95:ac:57:54:d7:05:aa:51:85:
ef:fe:ba:6a:e3:be:44:7b:1d:d3:3b:69:31:40:6b:07:b2:e1:
74:5e:70:e2:28:f4:91:b0:4c:92:35:e1:41:56:9f:a7:13:40:
66:86:fb:f5:09:3d:39:f8:60:bb:29:95:b1:e4:15:37:f3:36:
5f:77:67:3c:db:71:fd:49:17:43:1b:97:7e:fd:4c:6d:31:1b:
ad:7a:91:d8:25:ec:1d:39:b7:7e:20:37:0e:15:36:db:2d:0c:
b1:40:e0:dc:7f:80:cb:23:ab:25:4a:03:e7:07:07:18:3d:de:
4d:a4:07:e7:9e:8a:5c:fd:da:d2:05:ea:a7:db:d6:12:51:9a:
bb:aa:04:e2:51:7b:1b:b5:93:33:92:7c:f1:57:48:41:8f:00:
58:04:88:3f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYb2MHoQedpAn5xBSBDBo6JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjUwNDA5MTgzODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzM4Nzk3ODRkOTA1NzY2Y2Q4MjgzYzI3NTAwYTkyZDNmNjU5MDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjah5XKuoz9dXVazNjglRQfKIrIs
8rXJEEB/eRtOHkhfxJZ929sIBGfS/y7ldYniVwGim/3HjNL9IVjVlU0jZ8oIlO9i
o2ksQf0dbX9pBRGR1fTlUouCsZdhmx0AQksy57GDyOFzCZsEzqaoaBv28igebFil
8rrvfyPH1A5ekPQbaM+6I5o5EFPSmCDltOfWa6kROiFeu8l9Y8exz4HM49TWGl4A
37fJUelaIVIhPjYNSfxswj38ZBMJX4MmcRIYL+p9UY8GTn4mmIlJW+g53wfwR73C
bBOGrUHRn9E6y41z/BTKtVZgOr3O2mnMBTrOjOeuiSleG0isYjznsca7WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBw4eXhNkFdmzYKDwnUAqS0/ZZBzMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvSERoNWVFMlFWMmJOZ29QQ2RRQ3BMVDlsa0hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZnnMA0G
CSqGSIb3DQEBCwUAA4IBAQA9n5GJqsCbrOr2Qnt2PG5hgnhhrpLqoeCMtExoNktn
N6zzuDkM3kdZmdA5LxSV0pZl4BCkszm/ctar1qDFasXy10Lzx/WxjEEijfgRgVmK
nkgmjaXamJvoEUqg8a+I9J/nZNSVrFdU1wWqUYXv/rpq475Eex3TO2kxQGsHsuF0
XnDiKPSRsEySNeFBVp+nE0Bmhvv1CT05+GC7KZWx5BU38zZfd2c823H9SRdDG5d+
/UxtMRutepHYJewdObd+IDcOFTbbLQyxQODcf4DLI6slSgPnBwcYPd5NpAfnnopc
/drSBeqn29YSUZq7qgTiUXsbtZMzknzxV0hBjwBYBIg/
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:01:33 2025 by rpki-client