Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/F3xqvw__Ry6FbR1QISJmpPzSw80.roa
File: F3xqvw__Ry6FbR1QISJmpPzSw80.roa (raw, json)
Hash identifier: lZUN0lo02iToEWBcU9heTh5ikClvs/fsdLuL0ZtWzgs=
Subject key identifier: 17:7C:6A:BF:0F:FF:47:2E:85:6D:1D:50:21:22:66:A4:FC:D2:C3:CD
Certificate issuer: /CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Certificate serial: 01941F8CA70CC4C39F4985512ECE772C9E71
Authority key identifier: 49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/F3xqvw__Ry6FbR1QISJmpPzSw80.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34177
IP address blocks: 45.85.55.0/24 maxlen: 24
2a0e:b886::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a7:0c:c4:c3:9f:49:85:51:2e:ce:77:2c:9e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f39d6c8b23fcdc20e53174e92fb3f56caa8b61
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=177c6abf0fff472e856d1d50212266a4fcd2c3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:ff:b0:b0:42:79:c2:57:d5:d0:8d:4e:00:
27:4f:dc:09:f2:56:2b:48:40:df:d3:88:9b:3b:d1:
3a:19:0c:6d:ef:20:5c:e3:c5:0c:39:02:b3:78:38:
d3:ad:73:65:a5:36:7a:c9:97:30:5e:01:1d:5b:f2:
94:91:d6:80:2b:2b:c4:28:53:fd:8d:38:a7:0e:e3:
f6:b3:af:77:fa:ed:6d:18:7d:c0:cc:d0:bf:a3:94:
bb:cb:ce:e4:ea:41:91:ce:3b:e3:6c:8b:b8:bf:1f:
f4:a1:a7:8f:3e:0d:48:7b:83:27:3b:49:bf:15:01:
1a:e5:93:7b:cf:7b:e0:57:ab:b4:06:bd:99:2c:75:
ba:41:3c:48:1b:6a:90:33:3e:93:2b:7c:50:5a:fb:
2e:cb:d5:3a:c1:4e:82:bb:9d:ff:85:a1:30:48:51:
67:63:b6:fb:a1:62:56:b9:e4:44:9e:8b:a9:f6:50:
96:ee:73:4b:b7:ec:cb:da:8b:e0:fb:06:3c:90:b5:
e6:9c:19:c6:30:b4:05:ec:0c:99:89:67:89:0e:60:
f2:09:a9:d6:2a:5d:88:66:b3:a7:80:62:f8:dd:1e:
55:fb:1c:fc:24:0e:d5:6f:d7:ce:1e:9e:29:7a:00:
af:5c:a7:bc:86:6b:48:18:63:13:6a:63:1b:a0:b6:
54:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7C:6A:BF:0F:FF:47:2E:85:6D:1D:50:21:22:66:A4:FC:D2:C3:CD
X509v3 Authority Key Identifier:
keyid:49:F3:9D:6C:8B:23:FC:DC:20:E5:31:74:E9:2F:B3:F5:6C:AA:8B:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/F3xqvw__Ry6FbR1QISJmpPzSw80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/16460f-e498-4f7b-9b90-7a5043c918f9/1/SfOdbIsj_Nwg5TF06S-z9Wyqi2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.55.0/24
IPv6:
2a0e:b886::/31
Signature Algorithm: sha256WithRSAEncryption
3f:2c:3b:ad:2e:b0:e3:bc:0d:d7:c6:14:57:42:20:aa:74:45:
07:d2:41:e0:13:6e:35:65:8a:dc:32:a5:94:ce:38:d8:5f:34:
3b:b1:e2:f2:b3:4c:d0:c5:0c:7c:1f:8b:11:90:be:ca:8d:b5:
62:bc:f8:fd:f7:e2:71:5a:d2:bb:68:71:50:2d:ed:65:10:48:
69:3f:ea:28:62:17:7e:4a:87:11:ea:bb:a2:77:43:a6:30:b9:
86:d5:f0:09:ac:76:0d:be:63:2b:bb:50:1e:e8:88:ba:d2:33:
af:dd:8c:21:ab:d7:30:d8:52:b6:0b:c6:49:c6:35:a7:60:81:
d1:fb:22:6a:ae:6d:16:bb:de:b1:9b:66:4f:a5:1c:ca:a9:23:
b0:e5:68:a8:ac:5f:55:63:23:a6:00:c1:3b:59:e3:16:15:a1:
13:1a:19:d3:f3:02:32:00:ad:4f:e6:6a:bb:13:d1:09:a6:07:
93:ec:f7:13:78:00:0d:55:e2:eb:8e:42:44:1d:f7:10:da:7d:
42:97:03:b2:19:93:dd:b1:56:ef:61:71:97:e5:09:01:c3:bd:
4c:4e:cf:9f:bb:27:bd:66:e2:a6:94:b3:63:37:80:62:96:86:
11:da:f9:28:ef:91:57:07:2d:b3:d6:a4:0f:3e:8a:2c:85:12:
c5:4f:d5:b6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQfjKcMxMOfSYVRLs53LJ5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZjM5ZDZjOGIyM2ZjZGMyMGU1MzE3NGU5MmZiM2Y1NmNh
YThiNjEwHhcNMjUwMTAxMDE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzdjNmFiZjBmZmY0NzJlODU2ZDFkNTAyMTIyNjZhNGZjZDJjM2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslf/sLBCecJX1dCNTgAnT9wJ8lYr
SEDf04ibO9E6GQxt7yBc48UMOQKzeDjTrXNlpTZ6yZcwXgEdW/KUkdaAKyvEKFP9
jTinDuP2s693+u1tGH3AzNC/o5S7y87k6kGRzjvjbIu4vx/0oaePPg1Ie4MnO0m/
FQEa5ZN7z3vgV6u0Br2ZLHW6QTxIG2qQMz6TK3xQWvsuy9U6wU6Cu53/haEwSFFn
Y7b7oWJWueREnoup9lCW7nNLt+zL2ovg+wY8kLXmnBnGMLQF7AyZiWeJDmDyCanW
Kl2IZrOngGL43R5V+xz8JA7Vb9fOHp4pegCvXKe8hmtIGGMTamMboLZUJwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBd8ar8P/0cuhW0dUCEiZqT80sPNMB8GA1UdIwQY
MBaAFEnznWyLI/zcIOUxdOkvs/VsqothMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAt
N2E1MDQzYzkxOGY5LzEvRjN4cXZ3X19SeTZGYlIxUUlTSm1wUHpTdzgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xNjQ2MGYtZTQ5OC00ZjdiLTliOTAtN2E1MDQzYzkxOGY5
LzEvU2ZPZGJJc2pfTndnNVRGMDZTLXo5V3lxaTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVU3MA0E
AgACMAcDBQEqDriGMA0GCSqGSIb3DQEBCwUAA4IBAQA/LDutLrDjvA3XxhRXQiCq
dEUH0kHgE241ZYrcMqWUzjjYXzQ7seLys0zQxQx8H4sRkL7KjbVivPj99+JxWtK7
aHFQLe1lEEhpP+ooYhd+SocR6ruid0OmMLmG1fAJrHYNvmMru1Ae6Ii60jOv3Ywh
q9cw2FK2C8ZJxjWnYIHR+yJqrm0Wu96xm2ZPpRzKqSOw5WiorF9VYyOmAME7WeMW
FaETGhnT8wIyAK1P5mq7E9EJpgeT7PcTeAANVeLrjkJEHfcQ2n1ClwOyGZPdsVbv
YXGX5QkBw71MTs+fuye9ZuKmlLNjN4BiloYR2vko75FXBy2z1qQPPooshRLFT9W2
-----END CERTIFICATE-----
Generated at Mon Apr 14 02:30:45 2025 by rpki-client