Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa
File: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (raw, json)
Hash identifier: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=
Subject key identifier: 4E:6D:C6:27:BE:6B:66:A7:D1:18:7C:4D:C1:BD:92:BB:5D:CB:00:0F
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 01941F8C279825C97D436F6604C27CA31EEE
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212369
IP address blocks: 45.155.125.0/24 maxlen: 24
194.36.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:27:98:25:c9:7d:43:6f:66:04:c2:7c:a3:1e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e6dc627be6b66a7d1187c4dc1bd92bb5dcb000f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:9a:ca:ff:57:ae:ee:bc:a8:05:b6:bf:f9:
5b:64:61:09:c8:09:6d:21:ad:75:4e:10:1a:b9:9e:
3c:36:7d:54:e0:b9:8e:7e:a9:15:b1:eb:fd:61:23:
05:a7:d8:a9:ae:75:94:23:65:99:20:a5:13:31:5d:
64:df:4d:7c:3d:c9:49:4f:93:10:ed:ca:40:a2:5f:
d8:a6:0f:dd:06:bf:b4:e2:53:14:08:d2:61:08:0c:
2a:97:12:a3:7a:85:02:e0:84:f3:ad:be:b4:13:95:
bd:07:89:99:ac:6a:ae:f0:4e:6f:92:3e:8c:d9:36:
9d:39:73:8d:f7:4e:31:1e:1a:d7:66:76:63:42:3c:
bc:d6:73:90:48:aa:d0:61:91:b0:87:c5:53:c4:0b:
f5:62:c8:e5:9a:af:65:fe:e2:7d:48:c1:05:f9:5c:
1f:08:40:3a:79:af:d4:4f:7e:03:5a:8c:23:66:7f:
0d:ed:8f:af:5e:99:2e:06:1d:19:f5:07:2d:01:b3:
f5:a9:8b:38:82:ad:d7:f6:4e:2f:29:35:71:5b:5a:
76:ed:86:90:68:7e:bf:06:4d:25:a5:51:a7:0a:27:
1e:d3:76:db:69:1f:59:34:e1:95:aa:bc:90:77:9c:
b2:3b:b0:5e:d9:85:6e:6b:67:ee:22:ba:7e:10:44:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6D:C6:27:BE:6B:66:A7:D1:18:7C:4D:C1:BD:92:BB:5D:CB:00:0F
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.125.0/24
194.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c9:99:4c:d0:50:e1:2d:31:c1:1f:ba:61:36:b5:3d:cc:7a:
06:08:e0:35:60:6e:57:40:4f:31:40:a4:cd:ae:d2:a9:b3:d3:
33:41:a2:99:e9:ef:20:b2:70:fb:1b:f8:d2:18:18:34:06:7c:
d6:4f:40:a2:42:cc:9c:85:a3:8d:bb:a8:c3:35:f0:df:b8:73:
a5:23:1b:48:33:9c:f7:00:66:76:af:61:76:e3:05:f5:d8:16:
00:90:18:41:fd:37:8c:03:f2:79:e0:27:f0:59:da:f9:ab:58:
a0:79:07:fb:63:a8:38:de:8a:16:e9:47:76:36:06:e6:7c:fd:
5d:17:f5:0f:ff:9b:a5:a4:dc:6c:0f:45:c4:3e:f6:20:8c:a0:
39:21:9a:f5:95:31:da:b8:e2:cf:3e:2d:08:1c:af:d0:f1:82:
df:8e:ec:64:92:81:fd:a7:79:70:88:da:e5:a3:81:e8:31:ed:
49:26:e9:5f:e4:24:53:52:84:45:b0:82:b2:a5:bf:7a:4a:8e:
cb:ae:c4:61:81:45:1a:b9:b6:ee:49:c9:41:68:30:e8:ed:50:
38:82:4c:58:5a:69:cc:2c:2e:39:e9:6a:39:a9:fa:07:8c:05:
5c:bc:a1:b0:0a:2d:da:4b:ed:60:1d:fa:af:7a:1d:aa:1a:0f:
21:4b:81:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQfjCeYJcl9Q29mBMJ8ox7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0
MDI1Y2IwHhcNMjUwMTAxMDE0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTZkYzYyN2JlNmI2NmE3ZDExODdjNGRjMWJkOTJiYjVkY2IwMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIaayv9Xru68qAW2v/lbZGEJyAlt
Ia11ThAauZ48Nn1U4LmOfqkVsev9YSMFp9iprnWUI2WZIKUTMV1k3018PclJT5MQ
7cpAol/Ypg/dBr+04lMUCNJhCAwqlxKjeoUC4ITzrb60E5W9B4mZrGqu8E5vkj6M
2TadOXON904xHhrXZnZjQjy81nOQSKrQYZGwh8VTxAv1Ysjlmq9l/uJ9SMEF+Vwf
CEA6ea/UT34DWowjZn8N7Y+vXpkuBh0Z9QctAbP1qYs4gq3X9k4vKTVxW1p27YaQ
aH6/Bk0lpVGnCice03bbaR9ZNOGVqryQd5yyO7Be2YVua2fuIrp+EERRfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE5txie+a2an0Rh8TcG9krtdywAPMB8GA1UdIwQY
MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt
NmVlYzc3ZDliOTg1LzEvVG0zR0o3NXJacWZSR0h4TndiMlN1MTNMQUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1
LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZt9AwQA
wiRVMA0GCSqGSIb3DQEBCwUAA4IBAQBsyZlM0FDhLTHBH7phNrU9zHoGCOA1YG5X
QE8xQKTNrtKps9MzQaKZ6e8gsnD7G/jSGBg0BnzWT0CiQsychaONu6jDNfDfuHOl
IxtIM5z3AGZ2r2F24wX12BYAkBhB/TeMA/J54CfwWdr5q1igeQf7Y6g43ooW6Ud2
NgbmfP1dF/UP/5ulpNxsD0XEPvYgjKA5IZr1lTHauOLPPi0IHK/Q8YLfjuxkkoH9
p3lwiNrlo4HoMe1JJulf5CRTUoRFsIKypb96So7LrsRhgUUaubbuSclBaDDo7VA4
gkxYWmnMLC456Wo5qfoHjAVcvKGwCi3aS+1gHfqveh2qGg8hS4Fh
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:58 2025 by rpki-client