Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/pm4iWvL8z96fIGtjxaGjSXeRJT4.roa
File: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (raw, json)
Hash identifier: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=
Subject key identifier: A6:6E:22:5A:F2:FC:CF:DE:9F:20:6B:63:C5:A1:A3:49:77:91:25:3E
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0194266C0BCDA4F13B3E777143D2B27A28D1
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/pm4iWvL8z96fIGtjxaGjSXeRJT4.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 45.83.132.0/22 maxlen: 24
45.83.152.0/22 maxlen: 24
45.139.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0b:cd:a4:f1:3b:3e:77:71:43:d2:b2:7a:28:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a66e225af2fccfde9f206b63c5a1a3497791253e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:bf:29:b6:68:06:0c:cd:f6:d2:94:7a:43:
7c:11:6a:53:d8:9c:46:d5:a2:ab:e1:36:8f:ee:bb:
f6:9d:9d:11:83:10:cd:ba:a7:23:c4:3d:4f:30:f3:
2c:de:e5:57:4a:a3:6d:fa:82:7e:bb:28:82:93:0a:
ea:2b:88:0d:80:85:cc:42:69:0f:79:55:f2:a0:77:
36:57:f9:19:d0:40:a3:29:39:f9:1e:f3:63:a3:5e:
3b:3a:9c:09:05:0e:50:11:d1:34:a7:57:aa:49:92:
0d:6d:ab:f0:a5:d8:56:af:76:08:81:78:57:e8:00:
67:07:13:50:38:20:b4:0d:8a:66:c0:03:23:77:09:
75:4d:de:a3:7f:c9:87:08:b3:87:8b:2c:05:d6:18:
7f:0c:7b:38:f0:78:a7:c9:0d:40:45:7c:2d:96:85:
6a:d7:1f:b9:55:b7:bc:8a:50:e9:42:9a:59:57:9c:
7f:61:a1:4c:6e:d1:90:7d:4f:2f:f1:cc:8c:27:9f:
0e:18:96:7c:1f:9c:e5:0a:f9:4a:53:cc:17:9a:da:
48:0d:76:30:53:ff:87:14:73:df:33:8b:c3:2f:73:
cb:b2:41:c0:94:cb:75:2d:d4:9c:49:18:51:66:d5:
8f:97:df:53:41:3c:25:fb:d5:51:2b:b1:aa:91:06:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6E:22:5A:F2:FC:CF:DE:9F:20:6B:63:C5:A1:A3:49:77:91:25:3E
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/pm4iWvL8z96fIGtjxaGjSXeRJT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.132.0/22
45.83.152.0/22
45.139.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ac:81:86:3c:45:91:c0:80:04:81:f0:31:a9:c2:94:c0:79:
94:95:55:dc:74:ab:c0:67:5b:70:58:52:9d:70:2e:35:bd:06:
44:d1:01:7a:9e:7d:62:0d:d1:c9:eb:28:75:4e:c8:32:01:74:
77:c5:9a:10:a8:fb:34:60:ac:fd:44:03:ca:5d:60:d1:c2:6e:
bd:25:0c:75:66:c1:ae:18:6c:ea:57:d6:46:ca:70:fa:c1:67:
20:62:ce:eb:2e:bd:da:dd:14:dd:3e:46:86:72:91:3b:13:19:
1a:5f:6d:78:d3:83:c8:33:51:14:2b:69:7c:97:4e:d0:6a:ef:
5b:cc:fc:62:2c:7c:b5:a1:57:dc:fe:fc:92:d6:7e:71:dd:be:
76:c7:5e:28:79:f9:40:75:7a:72:31:0f:4e:0a:4e:ec:07:7f:
c9:67:96:0b:53:d8:2c:d7:c0:03:ac:aa:80:17:3d:84:6e:05:
9f:f1:3f:38:94:e0:12:cb:5e:c2:95:92:2c:65:ee:c4:4c:a9:
45:c4:11:46:e4:c4:05:1d:3b:ec:81:3e:fd:86:9d:51:76:00:
75:9c:83:8e:c2:05:bc:15:b0:f0:e0:07:7e:8a:70:51:85:f5:
25:8a:06:97:ea:0f:68:af:7c:8f:76:0a:86:43:d1:47:87:f8:
4c:03:ca:73
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQmbAvNpPE7PndxQ9KyeijRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw
MGIwNTEwHhcNMjUwMTAyMDk1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjZlMjI1YWYyZmNjZmRlOWYyMDZiNjNjNWExYTM0OTc3OTEyNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWC/KbZoBgzN9tKUekN8EWpT2JxG
1aKr4TaP7rv2nZ0RgxDNuqcjxD1PMPMs3uVXSqNt+oJ+uyiCkwrqK4gNgIXMQmkP
eVXyoHc2V/kZ0ECjKTn5HvNjo147OpwJBQ5QEdE0p1eqSZINbavwpdhWr3YIgXhX
6ABnBxNQOCC0DYpmwAMjdwl1Td6jf8mHCLOHiywF1hh/DHs48HinyQ1ARXwtloVq
1x+5Vbe8ilDpQppZV5x/YaFMbtGQfU8v8cyMJ58OGJZ8H5zlCvlKU8wXmtpIDXYw
U/+HFHPfM4vDL3PLskHAlMt1LdScSRhRZtWPl99TQTwl+9VRK7GqkQak8QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKZuIlry/M/enyBrY8Who0l3kSU+MB8GA1UdIwQY
MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt
YWIxOWZjYjBjZTY0LzEvcG00aVd2TDh6OTZmSUd0anhhR2pTWGVSSlQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0
LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVOEAwQC
LVOYAwQCLYssMA0GCSqGSIb3DQEBCwUAA4IBAQAKrIGGPEWRwIAEgfAxqcKUwHmU
lVXcdKvAZ1twWFKdcC41vQZE0QF6nn1iDdHJ6yh1TsgyAXR3xZoQqPs0YKz9RAPK
XWDRwm69JQx1ZsGuGGzqV9ZGynD6wWcgYs7rLr3a3RTdPkaGcpE7ExkaX21404PI
M1EUK2l8l07Qau9bzPxiLHy1oVfc/vyS1n5x3b52x14oeflAdXpyMQ9OCk7sB3/J
Z5YLU9gs18ADrKqAFz2EbgWf8T84lOASy17ClZIsZe7ETKlFxBFG5MQFHTvsgT79
hp1RdgB1nIOOwgW8FbDw4Ad+inBRhfUligaX6g9or3yPdgqGQ9FHh/hMA8pz
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:17:40 2025 by rpki-client