Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/x3vXcqd4rOe3aN_H50pQssbociA.roa
File: x3vXcqd4rOe3aN_H50pQssbociA.roa (raw, json)
Hash identifier: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=
Subject key identifier: C7:7B:D7:72:A7:78:AC:E7:B7:68:DF:C7:E7:4A:50:B2:C6:E8:72:20
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 019426D9CDEC4BCC5C5A814348B098E28B2E
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/x3vXcqd4rOe3aN_H50pQssbociA.roa
Signing time: Thu 02 Jan 2025 11:49:55 +0000
ROA not before: Thu 02 Jan 2025 11:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.56.224.0/21 maxlen: 21
45.56.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:cd:ec:4b:cc:5c:5a:81:43:48:b0:98:e2:8b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c77bd772a778ace7b768dfc7e74a50b2c6e87220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:1e:1f:96:a4:32:9e:e2:3d:d8:94:9d:8d:
b1:e2:01:6a:d8:59:af:dd:28:ba:3d:b8:10:25:b8:
48:76:b2:bd:c1:5c:a1:e5:a5:d2:38:b9:0b:ff:e9:
09:8a:ef:d1:ed:af:ae:07:91:8f:f7:36:95:4c:fd:
c4:8e:ae:6a:bb:cb:fc:61:02:84:fe:cd:9b:07:4f:
90:a4:78:7f:df:b5:cc:74:c2:66:85:0d:af:66:18:
d6:3a:c4:5a:db:53:99:7f:68:0a:04:2e:c1:ff:62:
27:89:77:18:f2:ab:0b:f2:e3:30:68:2d:0d:84:a7:
bd:a0:42:5d:c6:61:ca:e3:a6:99:d4:9b:c4:6b:3d:
be:1b:08:98:51:97:c3:9b:ed:fa:54:b9:b5:67:2a:
95:c6:0e:ed:35:56:ad:cd:4a:94:d9:2f:40:2a:d5:
e7:35:4f:62:82:8c:6b:8c:12:bb:58:f5:71:f1:98:
ae:94:04:d7:44:a0:ea:17:92:b2:77:24:cb:29:a9:
ea:c1:d7:ca:b1:37:c9:28:3d:9c:34:68:f4:d9:0b:
e0:92:8a:7f:27:d9:f4:a4:97:93:5d:3b:ca:d0:5f:
5c:97:ec:9b:20:94:cc:61:25:31:74:67:34:1c:22:
f1:9b:56:e3:61:1e:f1:78:11:f5:fe:50:d0:60:19:
bd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7B:D7:72:A7:78:AC:E7:B7:68:DF:C7:E7:4A:50:B2:C6:E8:72:20
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/x3vXcqd4rOe3aN_H50pQssbociA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.56.224.0/21
45.56.236.0/23
Signature Algorithm: sha256WithRSAEncryption
22:d6:e8:1e:37:d2:2c:c5:bd:7e:55:0b:da:49:9a:9f:7e:f9:
0a:80:f6:a2:ff:a4:6c:1c:50:29:dc:73:5b:bd:50:ae:5f:8b:
f1:6d:d2:72:8c:97:02:21:b9:9b:da:c7:1b:14:4d:89:22:1f:
b5:43:d8:ce:52:6e:4d:7b:ef:93:68:6e:30:a0:24:4d:06:96:
24:fa:78:c0:bc:33:8d:d4:c8:39:31:79:07:5c:75:8e:a7:bc:
12:ec:17:e8:16:ae:97:f4:31:ef:1c:bb:fa:63:b4:10:3e:e1:
02:20:3e:77:5a:40:61:d1:38:1a:2f:80:73:9f:a5:ff:32:8e:
34:5a:35:ad:16:8d:d3:8b:d0:ac:fb:86:a8:3b:56:af:b2:6a:
6e:d2:0b:7a:fe:29:de:3f:6e:f4:d8:70:a2:87:9e:3b:ae:00:
8c:3f:45:e0:d0:fe:40:eb:6c:74:9f:33:71:20:bb:49:c8:c1:
bf:fb:91:67:56:54:bd:d4:8e:29:b0:7e:af:9d:41:07:8f:c7:
09:86:c5:3b:3f:70:46:59:f4:c9:32:63:97:bf:2a:20:f9:96:
36:ac:f5:20:61:94:71:a6:74:46:b5:69:48:71:36:a4:6a:90:
b5:e7:15:64:54:2c:20:a0:9b:c9:ad:a8:3e:f0:f0:ae:a8:2a:
75:27:e5:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQm2c3sS8xcWoFDSLCY4osuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx
NjQwYjYwHhcNMjUwMTAyMTE0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzdiZDc3MmE3NzhhY2U3Yjc2OGRmYzdlNzRhNTBiMmM2ZTg3MjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCMeH5akMp7iPdiUnY2x4gFq2Fmv
3Si6PbgQJbhIdrK9wVyh5aXSOLkL/+kJiu/R7a+uB5GP9zaVTP3Ejq5qu8v8YQKE
/s2bB0+QpHh/37XMdMJmhQ2vZhjWOsRa21OZf2gKBC7B/2IniXcY8qsL8uMwaC0N
hKe9oEJdxmHK46aZ1JvEaz2+GwiYUZfDm+36VLm1ZyqVxg7tNVatzUqU2S9AKtXn
NU9igoxrjBK7WPVx8ZiulATXRKDqF5KydyTLKanqwdfKsTfJKD2cNGj02Qvgkop/
J9n0pJeTXTvK0F9cl+ybIJTMYSUxdGc0HCLxm1bjYR7xeBH1/lDQYBm9ewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMd713KneKznt2jfx+dKULLG6HIgMB8GA1UdIwQY
MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt
OGFiZjVlZTZjNGFkLzEveDN2WGNxZDRyT2UzYU5fSDUwcFFzc2JvY2lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk
LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLTjgAwQB
LTjsMA0GCSqGSIb3DQEBCwUAA4IBAQAi1ugeN9Isxb1+VQvaSZqffvkKgPai/6Rs
HFAp3HNbvVCuX4vxbdJyjJcCIbmb2scbFE2JIh+1Q9jOUm5Ne++TaG4woCRNBpYk
+njAvDON1Mg5MXkHXHWOp7wS7BfoFq6X9DHvHLv6Y7QQPuECID53WkBh0TgaL4Bz
n6X/Mo40WjWtFo3Ti9Cs+4aoO1avsmpu0gt6/ineP2702HCih547rgCMP0Xg0P5A
62x0nzNxILtJyMG/+5FnVlS91I4psH6vnUEHj8cJhsU7P3BGWfTJMmOXvyog+ZY2
rPUgYZRxpnRGtWlIcTakapC15xVkVCwgoJvJrag+8PCuqCp1J+V2
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:23 2025 by rpki-client