Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/sUY5J2N8PCLs__awrXNAzoRAVL0.roa
File: sUY5J2N8PCLs__awrXNAzoRAVL0.roa (raw, json)
Hash identifier: ey1paCcg6V8UnGfsgdc6JpJWrVKzneosnYZFoSG6890=
Subject key identifier: B1:46:39:27:63:7C:3C:22:EC:FF:F6:B0:AD:73:40:CE:84:40:54:BD
Certificate issuer: /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial: 0194F044608D2903180916B1655600221777
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/sUY5J2N8PCLs__awrXNAzoRAVL0.roa
Signing time: Mon 10 Feb 2025 14:30:00 +0000
ROA not before: Mon 10 Feb 2025 14:30:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207108
IP address blocks: 45.154.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f0:44:60:8d:29:03:18:09:16:b1:65:56:00:22:17:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Validity
Not Before: Feb 10 14:30:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1463927637c3c22ecfff6b0ad7340ce844054bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:9c:cc:f3:c7:63:16:e7:9b:38:bc:5e:00:
ac:44:39:f1:fa:21:1b:69:63:95:b7:4d:32:6f:01:
0c:23:4c:d6:0b:80:60:e6:6c:1a:e4:27:2c:23:40:
b2:62:6a:08:b4:5f:2e:0a:a3:17:7e:1d:35:ea:13:
ae:10:f0:22:50:47:2f:7d:32:03:21:a6:55:bc:5d:
92:37:f6:c0:09:22:5b:91:de:1d:10:80:f1:7c:ce:
47:c6:a9:1b:09:bd:fc:da:4e:54:7b:1c:c4:a7:7d:
43:68:89:98:2f:63:e0:5a:08:27:6a:44:07:a3:49:
03:f9:98:5b:9a:1a:4a:5f:d2:be:a0:14:6b:12:5a:
56:ad:8f:c1:ae:de:f2:30:57:de:66:ab:00:27:90:
03:cd:29:38:8b:03:30:50:83:1d:85:31:93:c2:bc:
03:5d:a9:7f:6b:3e:f7:77:6e:1e:2d:68:3d:43:4e:
ab:d4:ca:c8:db:3e:38:c8:99:66:05:82:c3:2f:f3:
f6:c7:fc:59:a1:9f:e9:bb:14:35:e4:43:75:9c:ab:
20:d3:91:23:42:8e:71:f2:71:84:8b:18:9c:99:19:
1d:d5:d5:e8:f0:5a:e1:16:3f:48:2e:60:14:8e:e2:
47:77:11:a8:8a:82:86:5f:c0:4c:4a:05:2f:37:a2:
90:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:46:39:27:63:7C:3C:22:EC:FF:F6:B0:AD:73:40:CE:84:40:54:BD
X509v3 Authority Key Identifier:
keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/sUY5J2N8PCLs__awrXNAzoRAVL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.197.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:19:3e:7d:56:bd:66:98:43:24:88:e1:56:fb:56:3a:2f:14:
0f:43:08:bc:11:7f:49:78:c6:f0:ee:e9:41:9c:cb:c0:16:ba:
3c:bf:04:0d:4c:ae:bd:22:92:b0:6f:41:3f:89:49:09:db:cb:
b8:c9:38:91:ea:ea:bc:04:4c:0c:e1:01:0f:84:cb:c5:9d:fd:
63:59:32:3c:48:4e:ac:f4:a6:ee:fb:f4:ed:53:ff:9c:be:18:
44:77:57:bd:79:c4:bb:72:5e:c6:39:66:15:97:2b:70:b1:ed:
9b:78:16:a1:f6:45:75:e5:e2:ab:99:1d:a4:5e:94:fe:48:66:
b0:80:05:7c:f9:f8:d7:e7:fb:c0:c0:55:01:d3:bc:8c:be:bf:
c9:0a:40:0d:81:d4:77:fa:86:1a:94:df:b3:4d:a7:c0:2d:97:
73:9d:7e:45:01:c6:ac:f6:87:56:98:d4:f2:0f:de:b9:f8:9d:
4d:94:94:8e:96:dc:84:9d:bc:f3:a4:92:42:2e:a6:02:99:f2:
d3:da:c9:6c:cd:16:73:3c:4f:af:63:ac:85:fb:a6:f0:ea:04:
75:68:16:2a:70:a0:19:82:9d:a4:89:fd:c0:24:9f:a0:5c:8e:
26:1b:1c:86:83:19:32:56:f8:ce:66:25:87:42:36:b6:c5:9d:
cf:cf:71:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZTwRGCNKQMYCRaxZVYAIhd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NzdhMzExNmVjYzlkN2E0MjlmMTM2NTE2MTNlOGFkMTQ5
ZmYzMjQwHhcNMjUwMjEwMTQzMDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTQ2MzkyNzYzN2MzYzIyZWNmZmY2YjBhZDczNDBjZTg0NDA1NGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJeczPPHYxbnmzi8XgCsRDnx+iEb
aWOVt00ybwEMI0zWC4Bg5mwa5CcsI0CyYmoItF8uCqMXfh016hOuEPAiUEcvfTID
IaZVvF2SN/bACSJbkd4dEIDxfM5HxqkbCb382k5UexzEp31DaImYL2PgWggnakQH
o0kD+ZhbmhpKX9K+oBRrElpWrY/Brt7yMFfeZqsAJ5ADzSk4iwMwUIMdhTGTwrwD
Xal/az73d24eLWg9Q06r1MrI2z44yJlmBYLDL/P2x/xZoZ/puxQ15EN1nKsg05Ej
Qo5x8nGEixicmRkd1dXo8FrhFj9ILmAUjuJHdxGoioKGX8BMSgUvN6KQ4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLFGOSdjfDwi7P/2sK1zQM6EQFS9MB8GA1UdIwQY
MBaAFGl3oxFuzJ16Qp8TZRYT6K0Un/MkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTkt
ZjRiN2IzOThjNjM0LzEvc1VZNUoyTjhQQ0xzX19hd3JYTkF6b1JBVkwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85YzY2OTEtYWRhYy00MWU1LThjZTktZjRiN2IzOThjNjM0
LzEvYVhlakVXN01uWHBDbnhObEZoUG9yUlNmOHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZrFMA0G
CSqGSIb3DQEBCwUAA4IBAQAMGT59Vr1mmEMkiOFW+1Y6LxQPQwi8EX9JeMbw7ulB
nMvAFro8vwQNTK69IpKwb0E/iUkJ28u4yTiR6uq8BEwM4QEPhMvFnf1jWTI8SE6s
9Kbu+/TtU/+cvhhEd1e9ecS7cl7GOWYVlytwse2beBah9kV15eKrmR2kXpT+SGaw
gAV8+fjX5/vAwFUB07yMvr/JCkANgdR3+oYalN+zTafALZdznX5FAcas9odWmNTy
D965+J1NlJSOltyEnbzzpJJCLqYCmfLT2slszRZzPE+vY6yF+6bw6gR1aBYqcKAZ
gp2kif3AJJ+gXI4mGxyGgxkyVvjOZiWHQja2xZ3Pz3F3
-----END CERTIFICATE-----
Generated at Tue Apr 15 11:37:22 2025 by rpki-client