Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kOyRvvsUhTk8I_UE5fYRAxsQe60.roa
File: kOyRvvsUhTk8I_UE5fYRAxsQe60.roa (raw, json)
Hash identifier: dLapRCjz6NukP4bI22te7z03ilk1kidXbfVLkhPC3I8=
Subject key identifier: 90:EC:91:BE:FB:14:85:39:3C:23:F5:04:E5:F6:11:03:1B:10:7B:AD
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D70C44BE679A041B679A55988D3BB0
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kOyRvvsUhTk8I_UE5fYRAxsQe60.roa
Signing time: Wed 01 Jan 2025 21:48:03 +0000
ROA not before: Wed 01 Jan 2025 21:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43077
IP address blocks: 45.142.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0c:44:be:67:9a:04:1b:67:9a:55:98:8d:3b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90ec91befb1485393c23f504e5f611031b107bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6a:c2:c6:33:1b:89:33:cd:54:69:8b:08:5d:
f6:84:13:d5:0a:b0:75:fe:4c:9b:19:69:41:4d:ce:
eb:34:3e:87:f2:50:22:3a:9e:d4:be:e3:a6:69:2e:
67:e5:e9:12:cb:17:4f:40:d0:49:9c:54:a5:1c:b0:
34:be:8d:76:79:15:ec:a0:e2:2d:b9:e4:b4:ed:14:
db:cd:df:e5:90:ef:9b:37:78:ac:24:85:b8:12:4d:
6a:dd:76:d7:de:c0:32:da:55:e6:cd:b3:72:a2:54:
18:48:7d:92:fe:0d:40:06:de:94:51:6a:33:8e:66:
42:95:4c:49:3f:9d:e3:bb:ef:f7:b2:e6:d4:50:76:
bc:0f:88:ea:43:ce:8b:b7:c6:8d:00:7a:87:f8:ce:
20:a9:1e:30:c8:de:5a:09:b1:53:e0:c8:9f:5f:f5:
dd:6c:91:dd:29:87:7a:54:13:a0:9f:c3:18:9f:d5:
b0:a8:d0:5c:c1:ac:ea:46:4f:be:db:f4:cf:13:0f:
fd:67:9e:7f:92:70:89:66:64:8d:ff:3a:3c:fb:8f:
cf:8b:ab:7d:94:19:71:b0:55:f3:73:f1:18:9a:69:
fa:34:e3:35:74:29:01:1f:68:a1:4d:85:f1:b3:9c:
06:fc:43:b6:cc:55:d8:72:52:4b:e3:24:00:14:74:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EC:91:BE:FB:14:85:39:3C:23:F5:04:E5:F6:11:03:1B:10:7B:AD
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/kOyRvvsUhTk8I_UE5fYRAxsQe60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.121.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e2:3c:ab:53:4c:ed:ad:bb:a1:96:e0:52:79:a4:75:0a:93:
6d:fd:8b:5d:eb:59:27:04:5f:1e:c6:4e:04:7f:38:ea:0c:9e:
df:4d:52:12:14:e3:50:65:a4:a9:d5:4e:bf:83:66:74:53:62:
3f:da:29:67:c2:5c:20:af:64:db:8b:ce:b8:5a:86:3e:b0:68:
0b:bb:20:72:41:3a:89:0a:c9:d2:02:4f:01:ca:c9:d6:a1:e9:
8f:3b:cc:c6:59:a1:c2:cb:6b:50:95:1b:61:96:76:00:47:99:
34:ee:06:06:0e:69:2c:dc:48:5a:be:48:6a:ae:b8:e7:0c:bb:
05:c3:44:dd:be:80:67:2e:ae:72:72:f4:d0:59:b5:76:5a:3a:
de:50:8f:f7:86:de:95:07:3b:16:d8:37:e4:fc:f1:bd:c2:95:
7a:cd:2f:79:25:a8:c3:d7:4c:2a:36:d9:e9:a7:a6:05:63:a6:
18:f4:cf:d3:0e:90:cd:f8:a4:86:24:62:ec:23:1b:84:3f:79:
7c:79:90:37:2f:3d:da:15:af:7e:db:cd:7f:d3:52:4d:e1:df:
92:53:63:a0:51:fa:4b:e9:36:8a:29:7c:47:6b:d7:f9:f2:15:
8b:67:e8:dc:42:de:da:2f:8f:64:a1:58:f3:0e:42:b1:c2:18:
b3:68:bd:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1wxEvmeaBBtnmlWYjTuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGVjOTFiZWZiMTQ4NTM5M2MyM2Y1MDRlNWY2MTEwMzFiMTA3YmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mrCxjMbiTPNVGmLCF32hBPVCrB1
/kybGWlBTc7rND6H8lAiOp7UvuOmaS5n5ekSyxdPQNBJnFSlHLA0vo12eRXsoOIt
ueS07RTbzd/lkO+bN3isJIW4Ek1q3XbX3sAy2lXmzbNyolQYSH2S/g1ABt6UUWoz
jmZClUxJP53ju+/3subUUHa8D4jqQ86Lt8aNAHqH+M4gqR4wyN5aCbFT4MifX/Xd
bJHdKYd6VBOgn8MYn9WwqNBcwazqRk++2/TPEw/9Z55/knCJZmSN/zo8+4/Pi6t9
lBlxsFXzc/EYmmn6NOM1dCkBH2ihTYXxs5wG/EO2zFXYclJL4yQAFHRL3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJDskb77FIU5PCP1BOX2EQMbEHutMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEva095UnZ2c1VoVGs4SV9VRTVmWVJBeHNRZTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY55MA0G
CSqGSIb3DQEBCwUAA4IBAQAn4jyrU0ztrbuhluBSeaR1CpNt/Ytd61knBF8exk4E
fzjqDJ7fTVISFONQZaSp1U6/g2Z0U2I/2ilnwlwgr2Tbi864WoY+sGgLuyByQTqJ
CsnSAk8BysnWoemPO8zGWaHCy2tQlRthlnYAR5k07gYGDmks3EhavkhqrrjnDLsF
w0TdvoBnLq5ycvTQWbV2WjreUI/3ht6VBzsW2Dfk/PG9wpV6zS95JajD10wqNtnp
p6YFY6YY9M/TDpDN+KSGJGLsIxuEP3l8eZA3Lz3aFa9+281/01JN4d+SU2OgUfpL
6TaKKXxHa9f58hWLZ+jcQt7aL49koVjzDkKxwhizaL0L
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:53:09 2025 by rpki-client