Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/bBRmM9C9XmUSSJtHhjHUjRNm8UY.roa
File: bBRmM9C9XmUSSJtHhjHUjRNm8UY.roa (raw, json)
Hash identifier: fyEjl4MYjoY4DVmXCRYYRphdD98I9nv/Kzt95pfzDko=
Subject key identifier: 6C:14:66:33:D0:BD:5E:65:12:48:9B:47:86:31:D4:8D:13:66:F1:46
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 01965CDE89CEFB933539A73B2F1663E87F9A
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/bBRmM9C9XmUSSJtHhjHUjRNm8UY.roa
Signing time: Tue 22 Apr 2025 09:40:10 +0000
ROA not before: Tue 22 Apr 2025 09:40:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53667
IP address blocks: 45.3.32.0/19 maxlen: 19
65.111.0.0/19 maxlen: 19
104.207.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:de:89:ce:fb:93:35:39:a7:3b:2f:16:63:e8:7f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Apr 22 09:40:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c146633d0bd5e6512489b478631d48d1366f146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:10:26:05:47:cf:98:1d:36:d7:f2:bb:b5:
10:5d:40:24:e0:a9:d6:3c:b2:67:ab:26:56:ef:10:
bc:fe:14:6e:05:29:f6:ff:23:9e:fb:48:90:e5:8b:
c5:a1:0a:81:38:77:3d:bf:12:64:8d:df:9f:71:06:
94:92:e6:70:53:28:bb:a0:24:5b:2d:bc:7c:ad:f4:
db:ea:b3:4b:0c:30:32:7f:ce:84:1b:52:5f:eb:e7:
40:3b:27:5d:70:ac:1b:f6:4c:80:7e:8b:d2:f5:eb:
04:30:9f:55:b9:73:c5:b1:b3:3d:f4:9d:19:d0:41:
7a:49:0e:70:06:11:69:f0:6e:38:38:64:55:8e:15:
3f:ac:02:40:e6:74:ae:1c:90:e3:c7:09:19:ed:9c:
1a:c2:91:62:0b:23:23:f6:ab:83:7e:f4:fb:20:ad:
69:87:eb:77:3c:71:74:5d:aa:75:33:8e:1a:9e:56:
fa:a7:26:62:1d:70:c0:11:0e:56:00:48:35:ae:3f:
10:ce:48:16:e8:07:85:58:41:f1:8d:ee:a7:2d:d4:
b1:88:d7:09:9f:8a:f1:34:bc:5d:cf:5e:f0:ed:33:
7a:2b:c0:ba:14:3b:19:a9:cd:ba:6f:e3:bd:1e:26:
2c:2e:70:6c:2b:8b:21:e3:34:87:d8:85:7c:5c:e8:
e6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:14:66:33:D0:BD:5E:65:12:48:9B:47:86:31:D4:8D:13:66:F1:46
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/bBRmM9C9XmUSSJtHhjHUjRNm8UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
65.111.0.0/19
104.207.32.0/19
Signature Algorithm: sha256WithRSAEncryption
83:73:92:b3:9b:96:fc:f7:5c:4b:6e:40:b9:44:db:e2:bc:5d:
63:58:76:95:86:f3:d0:c3:66:82:1e:3c:b2:28:88:ab:b8:df:
df:ab:57:5e:ee:c1:7c:46:6a:7c:78:82:a3:b0:9f:4f:ff:c2:
10:a3:9a:d7:01:e7:65:bf:13:e1:7f:7f:d0:99:cc:8a:31:12:
0c:d0:a1:f8:4a:6d:65:7c:19:13:d0:32:99:89:5b:4b:8e:0c:
13:4f:49:b9:ac:21:11:fd:6c:ee:e4:40:d1:cd:c7:b5:ff:a2:
62:37:1a:3b:7b:6f:d4:91:f4:21:e6:80:55:04:fa:34:44:82:
98:c4:7e:85:9c:bb:31:1c:3f:a8:8a:c8:e7:6f:ae:8a:9c:6c:
9e:da:7c:c2:42:6f:85:18:19:96:57:75:52:fb:b0:0e:27:da:
00:7c:51:0d:25:04:e1:7c:49:90:76:32:15:6d:a0:f6:ed:82:
ba:e3:2c:ce:6b:b9:a7:5e:a1:9c:c0:af:6d:4b:61:70:cf:6f:
57:eb:e6:a6:39:61:9c:75:50:9e:3f:65:9c:0d:e3:90:c4:df:
07:2a:34:92:43:11:5f:02:59:1b:34:ed:d9:15:c2:e3:da:8c:
a2:d4:a5:80:33:f6:05:d3:b6:4b:ee:d7:3b:1b:97:a8:e9:f4:
d8:32:c9:92
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZZc3onO+5M1Oac7LxZj6H+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MDRjYzBlMDM4ZWIwZTY5N2VjNmU3YWU0OWQwMjg2MTQ2
ZTBjMWEwHhcNMjUwNDIyMDk0MDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzE0NjYzM2QwYmQ1ZTY1MTI0ODliNDc4NjMxZDQ4ZDEzNjZmMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfQQJgVHz5gdNtfyu7UQXUAk4KnW
PLJnqyZW7xC8/hRuBSn2/yOe+0iQ5YvFoQqBOHc9vxJkjd+fcQaUkuZwUyi7oCRb
Lbx8rfTb6rNLDDAyf86EG1Jf6+dAOyddcKwb9kyAfovS9esEMJ9VuXPFsbM99J0Z
0EF6SQ5wBhFp8G44OGRVjhU/rAJA5nSuHJDjxwkZ7ZwawpFiCyMj9quDfvT7IK1p
h+t3PHF0Xap1M44anlb6pyZiHXDAEQ5WAEg1rj8QzkgW6AeFWEHxje6nLdSxiNcJ
n4rxNLxdz17w7TN6K8C6FDsZqc26b+O9HiYsLnBsK4sh4zSH2IV8XOjmZwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGwUZjPQvV5lEkibR4Yx1I0TZvFGMB8GA1UdIwQY
MBaAFLQEzA4DjrDml+xueuSdAoYUbgwaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1Yjkt
ODZhMmYwNjdiNGU4LzEvYkJSbU05QzlYbVVTU0p0SGhqSFVqUk5tOFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hYmUxNmItOTJjYy00OGUzLWI1YjktODZhMmYwNjdiNGU4
LzEvdEFUTURnT09zT2FYN0c1NjVKMENoaFJ1REJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFLQMgAwQF
QW8AAwQFaM8gMA0GCSqGSIb3DQEBCwUAA4IBAQCDc5Kzm5b891xLbkC5RNvivF1j
WHaVhvPQw2aCHjyyKIiruN/fq1de7sF8Rmp8eIKjsJ9P/8IQo5rXAedlvxPhf3/Q
mcyKMRIM0KH4Sm1lfBkT0DKZiVtLjgwTT0m5rCER/Wzu5EDRzce1/6JiNxo7e2/U
kfQh5oBVBPo0RIKYxH6FnLsxHD+oisjnb66KnGye2nzCQm+FGBmWV3VS+7AOJ9oA
fFENJQThfEmQdjIVbaD27YK64yzOa7mnXqGcwK9tS2Fwz29X6+amOWGcdVCeP2Wc
DeOQxN8HKjSSQxFfAlkbNO3ZFcLj2oyi1KWAM/YF07ZL7tc7G5eo6fTYMsmS
-----END CERTIFICATE-----
Generated at Sat May 10 18:48:39 2025 by rpki-client