Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/H2kmwp7spfqcIMI0clIF2k1Rvg0.roa
File: H2kmwp7spfqcIMI0clIF2k1Rvg0.roa (raw, json)
Hash identifier: zHi445ArIHvkJpCdV0dHlskzjilRLemFqJLsU1rnf8M=
Subject key identifier: 1F:69:26:C2:9E:EC:A5:FA:9C:20:C2:34:72:52:05:DA:4D:51:BE:0D
Certificate issuer: /CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Certificate serial: 0194258F06333FC751E4D917EAFA7744C29E
Authority key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/H2kmwp7spfqcIMI0clIF2k1Rvg0.roa
Signing time: Thu 02 Jan 2025 05:48:37 +0000
ROA not before: Thu 02 Jan 2025 05:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213281
IP address blocks: 45.133.188.0/22 maxlen: 24
2a0e:77c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:06:33:3f:c7:51:e4:d9:17:ea:fa:77:44:c2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f6926c29eeca5fa9c20c234725205da4d51be0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:7c:68:97:6d:a2:9b:1a:87:7e:34:d5:6c:
7b:a5:1f:98:6b:04:c6:e1:89:0d:1c:1a:76:15:b4:
f1:d7:57:0b:43:30:b4:38:a6:32:47:35:42:b9:0c:
37:04:45:85:ac:d0:ef:ea:f2:9c:90:98:ee:c6:74:
2b:69:9a:de:36:04:69:5b:b4:68:03:73:1a:6c:ee:
bd:99:fc:0e:e4:1d:6a:a4:2e:8b:1e:7f:48:b1:fb:
9d:fd:7b:64:eb:f0:43:79:66:5d:a5:9c:ee:c7:fe:
47:a2:11:d6:cf:71:92:45:3d:d2:64:2e:8a:9e:fd:
b7:b3:2c:c1:e2:c3:54:d4:96:49:c5:f6:28:3a:71:
c9:a0:22:c7:88:0e:54:dd:40:5f:d3:7a:b3:7e:8b:
67:d9:14:c4:0f:c9:f4:dc:fc:c7:15:83:8a:ad:e8:
f7:ac:84:c8:5b:61:f8:29:e5:49:e9:8a:e6:1b:9f:
3b:d6:c5:06:96:48:cd:32:0f:0a:a3:1a:ec:bd:a6:
7e:da:af:3e:ed:11:75:47:d7:4d:49:68:16:71:ef:
6a:be:33:29:57:ea:86:30:a0:3e:24:15:9e:0b:d0:
9a:52:95:29:d7:77:6e:4a:7c:42:1b:68:f0:d1:8e:
ab:8e:25:53:79:75:01:1e:84:b9:0e:3a:8b:95:4a:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:69:26:C2:9E:EC:A5:FA:9C:20:C2:34:72:52:05:DA:4D:51:BE:0D
X509v3 Authority Key Identifier:
keyid:0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/H2kmwp7spfqcIMI0clIF2k1Rvg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.188.0/22
IPv6:
2a0e:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
12:1d:53:81:ce:0a:b5:67:94:7f:87:1e:76:f2:d8:01:d9:8a:
f2:eb:86:7b:41:cf:f0:f2:ec:1b:77:09:63:3e:f0:18:ef:73:
c8:2f:72:df:72:1d:28:f5:57:f8:46:ea:bd:9d:be:86:40:d8:
87:56:35:64:ce:34:c6:db:2a:7b:b1:f5:16:e1:a9:be:d8:0a:
79:d3:dc:18:d6:23:58:3f:f5:2b:ca:3a:7a:dc:bd:3b:f3:92:
9e:db:49:a0:89:ae:66:a5:99:4e:67:1c:cd:8b:0f:6f:2d:b0:
84:c3:03:46:ce:f1:f7:4f:4f:bf:01:bc:54:53:61:e0:12:8c:
0c:1a:32:0f:74:29:1f:ea:e4:1d:ce:1c:bb:14:a3:64:c6:63:
3c:8b:d1:4e:a3:ff:a7:ef:38:ca:7c:8f:1d:0c:dd:9b:e8:32:
c3:e9:a5:cc:6a:a5:d3:b3:55:df:3e:f5:74:52:a7:d7:9c:e4:
0c:0e:76:d7:c6:6f:48:8c:68:c3:a5:11:fa:0b:79:05:06:e2:
56:0c:fd:78:51:45:ef:a8:46:d6:33:56:73:44:8f:fb:f7:e5:
72:ab:8a:a2:cb:1c:11:00:95:ab:ba:14:48:84:ac:34:8f:13:
2a:e3:41:03:c5:89:78:fa:e9:5a:f4:8f:be:c0:38:32:95:be:
0d:03:dd:53
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQljwYzP8dR5NkX6vp3RMKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmODMyYzEwMTQ0ZTRkN2Y2YTY0MmM2MGRjZWFlMTQzNmZj
OTljYTEwHhcNMjUwMTAyMDU0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjY5MjZjMjllZWNhNWZhOWMyMGMyMzQ3MjUyMDVkYTRkNTFiZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZd8aJdtopsah3401Wx7pR+YawTG
4YkNHBp2FbTx11cLQzC0OKYyRzVCuQw3BEWFrNDv6vKckJjuxnQraZreNgRpW7Ro
A3MabO69mfwO5B1qpC6LHn9Isfud/Xtk6/BDeWZdpZzux/5HohHWz3GSRT3SZC6K
nv23syzB4sNU1JZJxfYoOnHJoCLHiA5U3UBf03qzfotn2RTED8n03PzHFYOKrej3
rITIW2H4KeVJ6YrmG5871sUGlkjNMg8KoxrsvaZ+2q8+7RF1R9dNSWgWce9qvjMp
V+qGMKA+JBWeC9CaUpUp13duSnxCG2jw0Y6rjiVTeXUBHoS5DjqLlUpajQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB9pJsKe7KX6nCDCNHJSBdpNUb4NMB8GA1UdIwQY
MBaAFA+DLBAUTk1/amQsYNzq4UNvyZyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzkt
Y2M2OGUzN2QyNDVmLzEvSDJrbXdwN3NwZnFjSU1JMGNsSUYyazFSdmcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81YzUxY2UtNzYwZC00NGEwLWEzMzktY2M2OGUzN2QyNDVm
LzEvRDRNc0VCUk9UWDlxWkN4ZzNPcmhRMl9KbktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYW8MA0E
AgACMAcDBQMqDnfAMA0GCSqGSIb3DQEBCwUAA4IBAQASHVOBzgq1Z5R/hx528tgB
2Yry64Z7Qc/w8uwbdwljPvAY73PIL3Lfch0o9Vf4Ruq9nb6GQNiHVjVkzjTG2yp7
sfUW4am+2Ap509wY1iNYP/Uryjp63L0785Ke20mgia5mpZlOZxzNiw9vLbCEwwNG
zvH3T0+/AbxUU2HgEowMGjIPdCkf6uQdzhy7FKNkxmM8i9FOo/+n7zjKfI8dDN2b
6DLD6aXMaqXTs1XfPvV0UqfXnOQMDnbXxm9IjGjDpRH6C3kFBuJWDP14UUXvqEbW
M1ZzRI/79+Vyq4qiyxwRAJWruhRIhKw0jxMq40EDxYl4+ula9I++wDgylb4NA91T
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:36:28 2025 by rpki-client