Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/A4sFQqRFCKCwm3rOcDm1brgLh20.roa
File: A4sFQqRFCKCwm3rOcDm1brgLh20.roa (raw, json)
Hash identifier: zpTrJTrbgAHaC1jzfyC84uX2bsnYBgkUeCbD1/ANlNA=
Subject key identifier: 03:8B:05:42:A4:45:08:A0:B0:9B:7A:CE:70:39:B5:6E:B8:0B:87:6D
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 019422FB0C3D12D41D2EB9D38EBD11BB4EA0
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/A4sFQqRFCKCwm3rOcDm1brgLh20.roa
Signing time: Wed 01 Jan 2025 17:47:45 +0000
ROA not before: Wed 01 Jan 2025 17:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 45.112.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 13:12:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:0c:3d:12:d4:1d:2e:b9:d3:8e:bd:11:bb:4e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Jan 1 17:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=038b0542a44508a0b09b7ace7039b56eb80b876d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:82:64:e2:95:e5:60:0b:c5:b6:e8:94:91:56:
60:63:53:09:cc:9d:b4:f3:9e:05:50:0a:45:03:27:
27:14:f4:53:39:c4:72:83:6c:6d:1b:14:6a:20:12:
fa:44:9f:6d:7a:b1:93:ae:c6:28:ae:71:dd:97:73:
cb:3f:9f:14:de:b2:79:0f:a8:21:05:da:8a:4b:ec:
e1:86:a6:8b:db:36:c4:4d:c6:08:0c:3b:d5:bd:09:
5f:70:61:44:28:d7:05:37:d2:85:e7:5e:97:4d:c5:
e9:e5:8c:a0:d2:ec:c6:d2:39:f5:51:b4:de:75:39:
c5:18:aa:20:9d:82:be:b5:20:fe:19:72:f8:bb:56:
f4:de:a5:3d:3b:fe:c5:63:5d:f5:d2:2f:c8:05:34:
5d:f4:46:6e:90:c7:b1:60:1e:fa:cc:bc:0a:81:fc:
94:51:c1:96:03:31:aa:1d:67:cf:6a:7f:7b:2a:bb:
5d:bc:b8:7f:5a:3e:6a:a1:5a:3d:42:a1:6a:d7:ea:
04:24:53:1e:99:e7:73:68:09:b5:a8:63:0d:27:8c:
7c:a2:3f:fe:ea:da:ff:f2:6c:34:5b:94:48:42:09:
6c:95:23:4f:cf:c2:d1:a8:d3:39:50:04:3b:db:55:
a6:c9:5d:af:a4:85:19:70:1c:52:69:ce:eb:0e:93:
cd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:05:42:A4:45:08:A0:B0:9B:7A:CE:70:39:B5:6E:B8:0B:87:6D
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/A4sFQqRFCKCwm3rOcDm1brgLh20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.192.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4f:96:cb:19:0d:f6:46:f1:f3:ff:90:68:de:e0:c4:14:1f:
d4:b3:35:62:66:30:61:3a:b9:5e:01:2e:0d:14:87:52:99:c0:
ae:ac:c9:ea:1a:cb:11:69:26:62:e9:90:3d:b8:bd:bb:da:4b:
8e:75:d6:20:6f:e9:b2:49:3f:03:b2:d3:94:59:8b:a7:fd:28:
d4:85:f3:b9:d3:32:b0:2a:0f:0b:e9:57:24:3d:a6:87:c8:1d:
95:d3:15:4e:ca:d5:d5:ed:8d:98:34:d6:68:40:d3:da:75:5c:
80:f3:ed:b9:a9:f7:e0:c3:f9:f0:9f:a9:80:35:39:76:82:84:
b1:c7:bd:96:b9:01:9c:bf:3b:e2:e2:ba:04:07:60:c6:c9:2d:
6a:ba:bd:a9:31:15:cf:df:9b:65:a4:c4:9c:fe:4b:54:1c:e9:
84:22:80:6b:a2:c6:df:85:29:fe:e6:1a:60:80:ff:c9:1a:81:
f0:c9:ec:84:e4:8f:fe:1f:9c:1b:58:d6:d8:93:1d:25:c0:f6:
ce:bb:72:be:66:8f:be:40:d5:6c:df:c9:b3:f0:4d:f0:e3:19:
86:e5:4d:fd:ff:93:d7:04:37:a7:40:9c:a4:9c:75:76:28:16:
6b:47:6a:14:a3:3a:84:25:bc:db:49:47:9b:5f:c4:db:f1:d8:
2f:33:13:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+ww9EtQdLrnTjr0Ru06gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1MjJhYjY3OTIyY2UwMjc1ZThjNjFhYmZhODJkMmE3NTRh
ZjZkYzQwHhcNMjUwMTAxMTc0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzhiMDU0MmE0NDUwOGEwYjA5YjdhY2U3MDM5YjU2ZWI4MGI4NzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IJk4pXlYAvFtuiUkVZgY1MJzJ20
854FUApFAycnFPRTOcRyg2xtGxRqIBL6RJ9terGTrsYornHdl3PLP58U3rJ5D6gh
BdqKS+zhhqaL2zbETcYIDDvVvQlfcGFEKNcFN9KF516XTcXp5Yyg0uzG0jn1UbTe
dTnFGKognYK+tSD+GXL4u1b03qU9O/7FY1310i/IBTRd9EZukMexYB76zLwKgfyU
UcGWAzGqHWfPan97KrtdvLh/Wj5qoVo9QqFq1+oEJFMemedzaAm1qGMNJ4x8oj/+
6tr/8mw0W5RIQglslSNPz8LRqNM5UAQ721WmyV2vpIUZcBxSac7rDpPNnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAOLBUKkRQigsJt6znA5tW64C4dtMB8GA1UdIwQY
MBaAFJUiq2eSLOAnXoxhq/qC0qdUr23EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEt
ZTUyNmE5NDA5ZmI4LzEvQTRzRlFxUkZDS0N3bTNyT2NEbTFicmdMaDIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82ODkxOGUtZTlkYS00MDZiLTk5MzEtZTUyNmE5NDA5ZmI4
LzEvbFNLclo1SXM0Q2RlakdHci1vTFNwMVN2YmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXDAMA0G
CSqGSIb3DQEBCwUAA4IBAQCDT5bLGQ32RvHz/5Bo3uDEFB/UszViZjBhOrleAS4N
FIdSmcCurMnqGssRaSZi6ZA9uL272kuOddYgb+myST8DstOUWYun/SjUhfO50zKw
Kg8L6VckPaaHyB2V0xVOytXV7Y2YNNZoQNPadVyA8+25qffgw/nwn6mANTl2goSx
x72WuQGcvzvi4roEB2DGyS1qur2pMRXP35tlpMSc/ktUHOmEIoBrosbfhSn+5hpg
gP/JGoHwyeyE5I/+H5wbWNbYkx0lwPbOu3K+Zo++QNVs38mz8E3w4xmG5U39/5PX
BDenQJyknHV2KBZrR2oUozqEJbzbSUebX8Tb8dgvMxPU
-----END CERTIFICATE-----
Generated at Mon Apr 14 17:12:16 2025 by rpki-client