Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rRvhadgiQ6BH3g5sYzImDSs_PxM.roa
File: rRvhadgiQ6BH3g5sYzImDSs_PxM.roa (raw, json)
Hash identifier: mu9YYojJRX7V7CPyc1lLPFNKl+QHdYrF3QBZqh/OWSI=
Subject key identifier: AD:1B:E1:69:D8:22:43:A0:47:DE:0E:6C:63:32:26:0D:2B:3F:3F:13
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0196A19BE53BAB2849BF3EE7134ED0A99A24
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rRvhadgiQ6BH3g5sYzImDSs_PxM.roa
Signing time: Mon 05 May 2025 18:01:10 +0000
ROA not before: Mon 05 May 2025 18:01:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211114
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:9b:e5:3b:ab:28:49:bf:3e:e7:13:4e:d0:a9:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 5 18:01:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad1be169d82243a047de0e6c6332260d2b3f3f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:17:8c:5e:43:b7:a2:9d:4d:6f:03:da:eb:5d:
ed:15:6f:79:9c:91:b0:4d:63:1c:ed:cf:02:9f:47:
06:a3:e9:d6:b0:e1:e5:15:66:f2:0c:7b:90:66:06:
d2:98:39:9c:0e:6b:0c:50:e2:ce:8c:78:28:ff:43:
42:f2:7b:76:03:c6:f5:38:2c:27:12:7a:0a:50:2b:
aa:5a:1d:4c:56:2c:a7:86:79:6b:96:7c:8a:64:5e:
d0:84:52:ec:2d:3f:40:cb:1d:c6:26:36:a1:84:78:
7f:c9:5d:20:b3:b6:b3:07:86:cc:0c:3f:5c:01:68:
b8:68:b4:9a:7b:64:90:69:8c:b1:9e:db:38:41:00:
4d:20:1a:bc:10:6a:9d:46:b1:eb:2c:80:4f:2d:6c:
2c:76:18:d9:98:54:f8:ff:89:dd:22:d7:84:62:fd:
8a:19:53:d1:16:2b:8a:99:7c:70:97:b7:0e:71:9a:
46:9f:ed:65:59:45:ca:4e:ef:b2:98:a4:33:01:79:
10:8d:83:78:c7:df:8d:9d:03:08:35:8e:e3:9d:c2:
ae:5e:67:a8:fb:c5:03:6c:b4:ab:20:9a:d0:d5:36:
d7:71:d9:f0:05:88:6b:a2:eb:1a:9e:fb:8b:ae:ce:
b8:f7:14:29:2d:2f:7b:d9:50:09:84:d4:87:35:03:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1B:E1:69:D8:22:43:A0:47:DE:0E:6C:63:32:26:0D:2B:3F:3F:13
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rRvhadgiQ6BH3g5sYzImDSs_PxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
65:23:3d:1d:69:50:96:29:ea:0b:77:b1:83:92:06:0e:0e:c6:
d9:e8:e6:7b:48:a1:cc:58:9d:78:17:41:05:7f:e2:39:6e:a6:
b9:5e:9e:22:71:cd:b7:ad:f4:1c:e3:ba:65:33:36:55:f3:41:
9d:b4:2c:da:bd:94:64:b6:34:01:43:cc:34:69:b9:0d:2f:20:
0e:23:ba:d1:b4:ad:1d:35:34:60:80:08:ac:6b:33:d4:34:1b:
f1:50:87:01:f4:2a:68:31:15:91:42:a0:20:8a:de:7e:65:2f:
06:a9:bd:f1:07:b3:00:48:4a:6f:0b:55:3d:16:de:ae:d3:b9:
16:49:55:5a:b5:99:3d:10:54:0a:e4:cc:e7:c4:35:d5:b6:79:
e5:cf:cb:b4:c5:35:89:35:31:05:cc:7d:52:0a:3d:ac:a8:52:
61:b4:8f:da:c2:62:6f:ab:b6:22:62:94:03:a8:02:64:0c:5d:
4c:8b:98:d9:44:c7:93:71:a0:10:86:5b:3a:f0:db:8c:4e:2d:
56:ba:61:d2:9b:b0:b8:04:15:85:5d:69:a1:e2:de:b9:a6:86:
ac:ee:21:d4:67:68:52:4e:7c:14:5d:5b:ec:25:2d:8b:41:34:
3a:63:32:07:b4:d8:2d:9e:ac:33:2b:cb:fd:5d:22:ed:68:80:
7a:ca:b9:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZahm+U7qyhJvz7nE07QqZokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjUwNTA1MTgwMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDFiZTE2OWQ4MjI0M2EwNDdkZTBlNmM2MzMyMjYwZDJiM2YzZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmReMXkO3op1NbwPa613tFW95nJGw
TWMc7c8Cn0cGo+nWsOHlFWbyDHuQZgbSmDmcDmsMUOLOjHgo/0NC8nt2A8b1OCwn
EnoKUCuqWh1MViynhnlrlnyKZF7QhFLsLT9Ayx3GJjahhHh/yV0gs7azB4bMDD9c
AWi4aLSae2SQaYyxnts4QQBNIBq8EGqdRrHrLIBPLWwsdhjZmFT4/4ndIteEYv2K
GVPRFiuKmXxwl7cOcZpGn+1lWUXKTu+ymKQzAXkQjYN4x9+NnQMINY7jncKuXmeo
+8UDbLSrIJrQ1TbXcdnwBYhrousanvuLrs649xQpLS972VAJhNSHNQNDAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK0b4WnYIkOgR94ObGMyJg0rPz8TMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvclJ2aGFkZ2lRNkJIM2c1c1l6SW1EU3NfUHhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjEMA0G
CSqGSIb3DQEBCwUAA4IBAQBlIz0daVCWKeoLd7GDkgYODsbZ6OZ7SKHMWJ14F0EF
f+I5bqa5Xp4icc23rfQc47plMzZV80GdtCzavZRktjQBQ8w0abkNLyAOI7rRtK0d
NTRggAisazPUNBvxUIcB9CpoMRWRQqAgit5+ZS8Gqb3xB7MASEpvC1U9Ft6u07kW
SVVatZk9EFQK5MznxDXVtnnlz8u0xTWJNTEFzH1SCj2sqFJhtI/awmJvq7YiYpQD
qAJkDF1Mi5jZRMeTcaAQhls68NuMTi1WumHSm7C4BBWFXWmh4t65poas7iHUZ2hS
TnwUXVvsJS2LQTQ6YzIHtNgtnqwzK8v9XSLtaIB6yrnc
-----END CERTIFICATE-----
Generated at Fri May 16 02:45:38 2025 by rpki-client