Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/lQBaepPxUTQndrJtXUT4fAXM3dQ.roa
File: lQBaepPxUTQndrJtXUT4fAXM3dQ.roa (raw, json)
Hash identifier: GNjGYOD9FpKkiBDma5mL88iC58tqUffFR4KSPc0aU8Q=
Subject key identifier: 95:00:5A:7A:93:F1:51:34:27:76:B2:6D:5D:44:F8:7C:05:CC:DD:D4
Certificate issuer: /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial: 0194274769549DAE8C6F01B4273B4395AADE
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/lQBaepPxUTQndrJtXUT4fAXM3dQ.roa
Signing time: Thu 02 Jan 2025 13:49:38 +0000
ROA not before: Thu 02 Jan 2025 13:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208575
IP address blocks: 45.128.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:69:54:9d:ae:8c:6f:01:b4:27:3b:43:95:aa:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
Validity
Not Before: Jan 2 13:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95005a7a93f151342776b26d5d44f87c05ccddd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:71:bf:63:cb:13:c6:d6:59:1c:32:01:e5:
75:ab:68:e7:4a:fd:7f:87:69:29:82:3f:a8:d4:f5:
0a:76:6d:f4:4e:6e:9b:b0:5f:91:de:67:dc:11:a9:
4e:9b:df:74:61:9a:8e:2a:b4:e7:19:e2:76:3b:aa:
df:c1:71:79:29:fe:08:c6:7e:97:06:43:24:3c:56:
06:9c:0f:f2:34:5b:0a:53:e3:bf:0c:fc:6c:4c:51:
f7:7e:0b:ac:4e:ed:37:d3:f3:a9:ba:b4:b3:85:cf:
43:c8:25:9e:80:44:dc:bb:4a:9d:3b:40:4a:c4:1b:
68:b4:27:e4:ff:3f:c5:14:9c:f2:3e:b5:37:5c:65:
53:77:b0:8e:cc:60:01:5e:c1:8b:5c:0d:f3:a5:16:
6f:39:c1:c3:ed:0e:2c:c6:45:40:0e:b2:97:90:c0:
90:8f:2c:95:0f:ba:35:62:4f:bb:01:bd:b5:61:f7:
dc:da:14:d1:82:a2:f1:1d:c4:cb:c6:ca:bf:8e:b6:
d0:6c:cb:5b:90:fa:90:58:a2:9c:56:af:a3:62:4d:
f3:91:0b:d9:21:c8:eb:23:64:27:44:1b:12:6e:4e:
c6:94:e0:54:93:e4:84:6a:10:58:3c:3a:8e:ad:70:
b6:58:64:db:fc:79:62:5e:d8:90:63:14:ec:b6:7b:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:5A:7A:93:F1:51:34:27:76:B2:6D:5D:44:F8:7C:05:CC:DD:D4
X509v3 Authority Key Identifier:
keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/lQBaepPxUTQndrJtXUT4fAXM3dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:04:d5:bd:9f:e3:6e:0a:74:2a:45:cc:14:4c:64:4c:6d:34:
df:b5:c2:31:7b:a6:a2:15:93:6e:f5:06:2f:1b:ac:e8:ac:87:
e5:cc:f3:f7:27:46:73:a9:5b:b0:c4:13:5c:f0:a2:fb:11:8e:
46:ce:26:c9:de:3d:57:a7:e3:b9:38:40:6c:8f:e2:11:67:c3:
75:60:6d:63:28:4c:dc:67:c5:bf:ea:14:25:3f:b2:a4:0a:55:
7a:40:1b:3c:62:72:b6:f3:67:c9:5d:d2:59:cf:7d:0a:31:71:
bc:2d:5f:21:db:cf:5c:b7:c8:90:d5:90:64:05:7f:84:e1:73:
02:ba:fd:19:f4:04:e9:eb:36:3e:58:76:9a:d0:ee:eb:b8:2a:
23:69:b0:89:e6:69:f6:e4:df:31:97:8d:86:1b:ea:ec:69:3f:
cf:63:53:12:89:0b:89:80:bc:ad:27:b0:96:cd:8a:1a:04:20:
75:dc:63:7d:b0:00:c1:a2:52:00:d6:d0:d1:ba:7a:a6:b0:c3:
50:f1:84:c4:80:be:dd:8d:81:76:2b:44:8e:62:89:d0:ad:b4:
e9:03:76:36:b7:9f:de:86:4b:b3:95:08:3f:f4:73:0c:98:12:
9f:d1:b3:92:7d:47:f3:dd:9b:5f:3f:a8:dd:3f:cb:bb:92:4b:
73:d0:75:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR2lUna6MbwG0JztDlareMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NjZkODMzNzc3NmM5ODc0NmJkMjMxZTY5ZTE4NWRiMmE5
YTViZTIwHhcNMjUwMTAyMTM0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTAwNWE3YTkzZjE1MTM0Mjc3NmIyNmQ1ZDQ0Zjg3YzA1Y2NkZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx5xv2PLE8bWWRwyAeV1q2jnSv1/
h2kpgj+o1PUKdm30Tm6bsF+R3mfcEalOm990YZqOKrTnGeJ2O6rfwXF5Kf4Ixn6X
BkMkPFYGnA/yNFsKU+O/DPxsTFH3fgusTu030/OpurSzhc9DyCWegETcu0qdO0BK
xBtotCfk/z/FFJzyPrU3XGVTd7COzGABXsGLXA3zpRZvOcHD7Q4sxkVADrKXkMCQ
jyyVD7o1Yk+7Ab21Yffc2hTRgqLxHcTLxsq/jrbQbMtbkPqQWKKcVq+jYk3zkQvZ
IcjrI2QnRBsSbk7GlOBUk+SEahBYPDqOrXC2WGTb/HliXtiQYxTstnux/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJUAWnqT8VE0J3aybV1E+HwFzN3UMB8GA1UdIwQY
MBaAFKVm2DN3dsmHRr0jHmnhhdsqmlviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgt
MWI3NTg2N2U4ZGZmLzEvbFFCYWVwUHhVVFFuZHJKdFhVVDRmQVhNM2RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wMTY4YWMtMzQyYy00ZGQwLTkxYTgtMWI3NTg2N2U4ZGZm
LzEvcFdiWU0zZDJ5WWRHdlNNZWFlR0YyeXFhVy1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYARMA0G
CSqGSIb3DQEBCwUAA4IBAQC0BNW9n+NuCnQqRcwUTGRMbTTftcIxe6aiFZNu9QYv
G6zorIflzPP3J0ZzqVuwxBNc8KL7EY5GzibJ3j1Xp+O5OEBsj+IRZ8N1YG1jKEzc
Z8W/6hQlP7KkClV6QBs8YnK282fJXdJZz30KMXG8LV8h289ct8iQ1ZBkBX+E4XMC
uv0Z9ATp6zY+WHaa0O7ruCojabCJ5mn25N8xl42GG+rsaT/PY1MSiQuJgLytJ7CW
zYoaBCB13GN9sADBolIA1tDRunqmsMNQ8YTEgL7djYF2K0SOYonQrbTpA3Y2t5/e
hkuzlQg/9HMMmBKf0bOSfUfz3ZtfP6jdP8u7kktz0HV4
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:31:10 2025 by rpki-client