Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uA53l6TGftotVsgjyzB9HaecJYM.roa
File: uA53l6TGftotVsgjyzB9HaecJYM.roa (raw, json)
Hash identifier: QZ1IJx7C4qhm9Yek5AAGohcJ1drd58+zqGgI51Frkjg=
Subject key identifier: B8:0E:77:97:A4:C6:7E:DA:2D:56:C8:23:CB:30:7D:1D:A7:9C:25:83
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A3B26E68E595E31A5890F14F3596B
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uA53l6TGftotVsgjyzB9HaecJYM.roa
Signing time: Wed 01 Jan 2025 19:49:11 +0000
ROA not before: Wed 01 Jan 2025 19:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 45.12.161.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3b:26:e6:8e:59:5e:31:a5:89:0f:14:f3:59:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b80e7797a4c67eda2d56c823cb307d1da79c2583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:ca:8a:12:a0:9a:ce:f7:68:71:6b:e5:43:
5f:84:71:f4:81:e6:b1:5b:2b:7a:a6:3c:52:6c:c3:
a2:43:17:ce:d4:f1:44:e8:83:6e:9a:5e:47:69:3c:
9a:89:01:9b:20:eb:da:84:4a:be:dc:d7:29:b7:fe:
f2:96:1b:42:08:75:b8:2b:ca:1d:0b:fd:9e:24:60:
37:d6:a7:53:c6:17:2d:63:ca:75:13:9b:67:a0:ec:
c2:6a:56:20:31:db:42:69:99:77:bf:47:df:49:a4:
7d:ec:ba:09:fe:87:01:f3:98:0c:47:6c:7d:65:0c:
de:b7:11:c4:ad:6b:f4:31:48:d7:82:8a:47:62:13:
1b:01:8a:89:17:a9:e1:c4:ce:ad:58:7d:78:79:92:
cd:9b:21:14:61:cf:38:68:af:83:2d:83:01:36:02:
26:39:c0:de:59:dc:7b:05:cd:a4:6d:47:a0:dc:01:
2c:05:75:0f:e7:8c:77:51:16:e6:30:9c:55:df:ab:
c2:f5:27:b9:2f:69:66:b5:26:1f:4e:ab:12:6e:3a:
ce:2b:25:26:09:40:80:19:ea:fb:56:0b:d0:29:0b:
d7:d3:c1:c9:2e:02:bc:84:2a:12:05:0f:6a:a1:0c:
86:8a:de:e9:db:0a:0e:0c:67:f6:18:e9:02:61:38:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0E:77:97:A4:C6:7E:DA:2D:56:C8:23:CB:30:7D:1D:A7:9C:25:83
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/uA53l6TGftotVsgjyzB9HaecJYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.161.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:ba:bb:51:1f:44:df:1d:17:6e:98:6e:33:c5:82:02:3f:33:
3f:7a:c8:e4:0c:9c:cd:96:c3:bf:20:08:35:6e:4a:42:d8:6c:
b8:2b:60:5d:2a:d9:9a:ff:31:c4:08:8a:11:ca:69:29:0a:4a:
8c:35:b4:d0:73:c2:47:bf:19:e5:1c:6c:96:b1:87:d6:89:11:
d4:50:20:ad:93:f8:e7:d0:9b:bc:4c:47:96:5f:43:37:55:84:
9f:42:57:37:ec:0d:1c:e6:ab:d8:40:ca:ea:17:f1:72:d0:de:
53:1f:4b:36:2d:59:ad:16:d6:0b:a5:02:3f:f0:6d:05:da:2a:
ea:e9:8e:73:ef:30:73:a3:1d:b8:b2:3f:67:b3:e1:25:16:41:
38:33:5d:0c:62:fe:54:78:ec:85:b9:a0:68:39:24:78:f9:c1:
62:b0:1c:cb:9f:1a:68:d8:90:51:c6:6b:81:05:6e:92:be:3d:
4a:11:bb:ca:f9:fa:52:08:77:ea:6c:c2:c3:59:52:23:3f:8f:
3f:7a:97:88:6e:de:a0:bb:32:3a:3b:24:c8:f7:4d:fd:d0:8f:
00:49:c3:90:a2:b7:5b:f5:c8:42:b2:59:64:64:cf:07:d5:d0:
19:6a:35:a4:38:bf:ca:19:ee:a7:5d:e5:96:51:ca:c9:b6:38:
b8:5f:5f:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjajsm5o5ZXjGliQ8U81lrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjUwMTAxMTk0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODBlNzc5N2E0YzY3ZWRhMmQ1NmM4MjNjYjMwN2QxZGE3OWMyNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriTKihKgms73aHFr5UNfhHH0geax
Wyt6pjxSbMOiQxfO1PFE6INuml5HaTyaiQGbIOvahEq+3Ncpt/7ylhtCCHW4K8od
C/2eJGA31qdTxhctY8p1E5tnoOzCalYgMdtCaZl3v0ffSaR97LoJ/ocB85gMR2x9
ZQzetxHErWv0MUjXgopHYhMbAYqJF6nhxM6tWH14eZLNmyEUYc84aK+DLYMBNgIm
OcDeWdx7Bc2kbUeg3AEsBXUP54x3URbmMJxV36vC9Se5L2lmtSYfTqsSbjrOKyUm
CUCAGer7VgvQKQvX08HJLgK8hCoSBQ9qoQyGit7p2woODGf2GOkCYThmiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgOd5ekxn7aLVbII8swfR2nnCWDMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvdUE1M2w2VEdmdG90VnNnanl6QjlIYWVjSllNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQyhMA0G
CSqGSIb3DQEBCwUAA4IBAQDPurtRH0TfHRdumG4zxYICPzM/esjkDJzNlsO/IAg1
bkpC2Gy4K2BdKtma/zHECIoRymkpCkqMNbTQc8JHvxnlHGyWsYfWiRHUUCCtk/jn
0Ju8TEeWX0M3VYSfQlc37A0c5qvYQMrqF/Fy0N5TH0s2LVmtFtYLpQI/8G0F2irq
6Y5z7zBzox24sj9ns+ElFkE4M10MYv5UeOyFuaBoOSR4+cFisBzLnxpo2JBRxmuB
BW6Svj1KEbvK+fpSCHfqbMLDWVIjP48/epeIbt6guzI6OyTI90390I8AScOQordb
9chCsllkZM8H1dAZajWkOL/KGe6nXeWWUcrJtji4X19Y
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:42:27 2025 by rpki-client