Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0hol4KQQNK8fioxmI1w3sUN9afE.roa
File: 0hol4KQQNK8fioxmI1w3sUN9afE.roa (raw, json)
Hash identifier: Mu4/+fU/Vk76+VhmcBGjy3It7/1O500tnd/IgdpfODE=
Subject key identifier: D2:1A:25:E0:A4:10:34:AF:1F:8A:8C:66:23:5C:37:B1:43:7D:69:F1
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019425214E094A66AB58808E81E6DA5DCB72
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0hol4KQQNK8fioxmI1w3sUN9afE.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33652
IP address blocks: 45.147.159.0/24 maxlen: 24
77.111.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4e:09:4a:66:ab:58:80:8e:81:e6:da:5d:cb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d21a25e0a41034af1f8a8c66235c37b1437d69f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:5f:ff:67:44:da:8a:6d:a4:ea:56:64:ba:
d9:34:26:5b:9d:6f:8c:98:5d:57:d0:e1:b5:45:51:
f3:07:01:45:0a:01:c4:c4:61:93:ad:30:18:d6:08:
c0:23:92:05:f5:a2:12:c3:4e:58:5a:f6:f9:3f:1c:
3f:d8:ee:23:d4:63:e4:4a:83:87:08:f4:c5:ac:9e:
11:09:a9:81:05:66:05:ab:49:e8:2f:4d:ad:13:b3:
28:f9:1f:11:bb:45:f1:15:82:24:0d:05:24:9e:d0:
a4:70:c8:4f:e5:32:b8:80:47:c0:9d:9a:01:fa:d6:
f6:21:d7:c2:a8:88:76:64:f5:1a:1a:f7:0e:94:82:
2a:56:9c:f0:e5:8f:93:64:d4:27:c5:35:64:06:18:
34:25:76:2b:d4:04:68:1e:02:3e:da:13:65:dc:18:
b5:6e:0c:cb:f2:31:3d:62:49:d5:1f:02:e0:5c:d6:
44:6d:36:5d:8c:88:07:9e:70:7c:f7:16:1e:ca:72:
a9:6d:e9:06:eb:e5:11:b2:e4:61:9f:bf:5a:25:d4:
98:ef:cd:44:24:aa:ca:dd:4e:2f:de:05:90:16:85:
bf:f7:78:c0:b1:51:20:ff:96:62:ee:13:fd:6e:36:
f4:89:6d:e0:02:75:e6:21:1a:ef:03:d4:a4:6e:8e:
13:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1A:25:E0:A4:10:34:AF:1F:8A:8C:66:23:5C:37:B1:43:7D:69:F1
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/0hol4KQQNK8fioxmI1w3sUN9afE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.159.0/24
77.111.118.0/24
Signature Algorithm: sha256WithRSAEncryption
30:38:5e:12:c5:83:24:66:cf:a3:b8:0e:0f:be:96:16:26:fb:
2d:6a:4e:75:b0:20:e3:9e:42:93:42:d3:33:c0:66:54:8a:c6:
cb:e5:ce:55:91:b4:84:4c:b8:01:68:b3:55:90:6a:6f:83:ce:
66:8c:90:38:e4:3d:db:41:84:1a:8c:96:ad:73:b5:08:b6:e5:
ff:de:e8:53:f6:4d:71:97:4f:93:f6:b5:1f:2f:a1:4c:d9:40:
2d:0c:85:0e:ce:0e:88:87:c2:51:68:dc:1a:d5:11:58:2b:44:
2a:d7:6a:ee:fc:95:a2:cc:f4:c7:da:8e:13:50:23:50:57:8e:
fb:b9:79:58:bf:46:c0:00:1f:38:2e:3b:90:e7:99:aa:f0:7a:
62:f3:88:b8:90:c8:29:58:92:a5:d4:f2:22:f0:0b:00:40:31:
d9:c5:1a:c6:4e:55:0e:01:6c:88:12:d2:67:7e:1e:d9:f0:d9:
b9:75:ec:72:98:8d:87:ca:c8:84:87:98:8c:ee:d1:0d:84:0d:
aa:be:ff:0d:41:bb:a8:c4:b2:9a:c9:4a:4f:ee:9b:d3:43:9e:
de:9a:85:18:0c:01:45:fe:ba:ac:eb:ab:75:5b:56:88:49:ba:
54:9e:78:99:6f:a6:93:8a:55:bd:cf:49:b3:8b:92:62:0c:b3:
77:c8:ad:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIU4JSmarWICOgebaXctyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0MTk3NTU4M2IyNTAzNjJjODE1MGY2M2FkYjMwYTBmNmEw
YzZmYzMwHhcNMjUwMTAyMDM0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjFhMjVlMGE0MTAzNGFmMWY4YThjNjYyMzVjMzdiMTQzN2Q2OWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN5f/2dE2optpOpWZLrZNCZbnW+M
mF1X0OG1RVHzBwFFCgHExGGTrTAY1gjAI5IF9aISw05YWvb5Pxw/2O4j1GPkSoOH
CPTFrJ4RCamBBWYFq0noL02tE7Mo+R8Ru0XxFYIkDQUkntCkcMhP5TK4gEfAnZoB
+tb2IdfCqIh2ZPUaGvcOlIIqVpzw5Y+TZNQnxTVkBhg0JXYr1ARoHgI+2hNl3Bi1
bgzL8jE9YknVHwLgXNZEbTZdjIgHnnB89xYeynKpbekG6+URsuRhn79aJdSY781E
JKrK3U4v3gWQFoW/93jAsVEg/5Zi7hP9bjb0iW3gAnXmIRrvA9Skbo4TEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNIaJeCkEDSvH4qMZiNcN7FDfWnxMB8GA1UdIwQY
MBaAFGQZdVg7JQNiyBUPY62zCg9qDG/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQt
ZjFjMzNhYTJmZDUwLzEvMGhvbDRLUVFOSzhmaW94bUkxdzNzVU45YWZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85OGE1ZWQtOTA1ZS00YmZhLTkxNTQtZjFjMzNhYTJmZDUw
LzEvWkJsMVdEc2xBMkxJRlE5anJiTUtEMm9NYjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZOfAwQA
TW92MA0GCSqGSIb3DQEBCwUAA4IBAQAwOF4SxYMkZs+juA4PvpYWJvstak51sCDj
nkKTQtMzwGZUisbL5c5VkbSETLgBaLNVkGpvg85mjJA45D3bQYQajJatc7UItuX/
3uhT9k1xl0+T9rUfL6FM2UAtDIUOzg6Ih8JRaNwa1RFYK0Qq12ru/JWizPTH2o4T
UCNQV477uXlYv0bAAB84LjuQ55mq8Hpi84i4kMgpWJKl1PIi8AsAQDHZxRrGTlUO
AWyIEtJnfh7Z8Nm5dexymI2HysiEh5iM7tENhA2qvv8NQbuoxLKayUpP7pvTQ57e
moUYDAFF/rqs66t1W1aISbpUnniZb6aTilW9z0mzi5JiDLN3yK3x
-----END CERTIFICATE-----
Generated at Mon Apr 7 03:36:35 2025 by rpki-client