Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_yzn5oDusX2X0X7GKZBcg6brbLE.roa
File: _yzn5oDusX2X0X7GKZBcg6brbLE.roa (raw, json)
Hash identifier: 3Zb9XtEnFpg2ZnedyDM6Fmzs7qviCkwqPZ3m1FKhSy0=
Subject key identifier: FF:2C:E7:E6:80:EE:B1:7D:97:D1:7E:C6:29:90:5C:83:A6:EB:6C:B1
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0196AC8E541B4B4E17644BC69E72F620D9FE
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_yzn5oDusX2X0X7GKZBcg6brbLE.roa
Signing time: Wed 07 May 2025 21:02:10 +0000
ROA not before: Wed 07 May 2025 21:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212521
IP address blocks: 45.131.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8e:54:1b:4b:4e:17:64:4b:c6:9e:72:f6:20:d9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: May 7 21:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff2ce7e680eeb17d97d17ec629905c83a6eb6cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:b8:0f:66:14:be:8c:d6:28:bb:ea:cc:0a:
d1:71:72:15:5b:cb:42:b3:c7:a7:de:5a:5b:c2:17:
ba:94:cb:2c:36:9b:af:bc:ff:87:c1:3f:b5:88:b8:
17:71:67:31:c6:22:27:56:0d:48:6c:ad:bf:87:bb:
0a:fb:95:95:de:63:61:56:6a:57:f7:f2:af:f6:86:
d3:1a:57:67:53:7c:48:fd:2f:88:f7:6e:b1:45:dd:
c7:43:20:43:32:2d:a3:8f:a1:18:a8:15:11:36:38:
de:17:da:4d:84:fb:49:c4:9a:a0:5c:67:fa:52:df:
06:64:bb:ab:d5:36:92:1b:25:4a:25:78:2b:7d:cb:
21:4c:e2:84:e7:cd:d4:df:02:16:ad:1f:a3:85:55:
5f:3f:90:da:9d:b1:5f:94:d7:23:14:7c:78:cc:26:
7f:7e:df:65:7a:ac:7c:f6:1a:80:30:fd:70:d5:e5:
61:84:ae:b1:df:58:f9:72:77:b5:ef:7b:49:42:8f:
95:c3:d0:15:40:96:db:f7:7a:de:7d:b2:e5:a2:95:
72:76:70:07:04:0d:c4:dc:0c:ab:23:5d:2d:df:4b:
15:71:0f:20:7b:15:49:c1:37:fd:8a:cc:a4:e0:a9:
03:5b:d0:de:be:c6:d9:33:9a:32:83:56:e7:bb:a2:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2C:E7:E6:80:EE:B1:7D:97:D1:7E:C6:29:90:5C:83:A6:EB:6C:B1
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/_yzn5oDusX2X0X7GKZBcg6brbLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.0.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:45:91:c0:f4:b6:5a:88:74:04:ce:ce:6e:6f:7b:2a:7d:bf:
91:06:b4:49:a5:f8:d8:8b:73:e4:86:98:d6:82:d7:fd:08:d8:
d9:66:a1:f7:2d:2b:cc:9b:cb:e4:22:d7:6b:5f:e3:ab:dd:d4:
f4:75:8a:11:24:da:28:d3:37:f2:4a:96:a7:c7:04:85:db:99:
96:05:20:ae:dd:bb:bd:43:95:98:53:3a:b2:02:91:4a:9b:c8:
70:8b:2a:aa:a5:9a:cb:a9:c2:d0:66:1d:88:43:53:8a:7f:d2:
d0:9b:04:ba:6a:58:16:ec:95:2e:26:b8:66:29:8c:d8:2e:81:
cc:61:b8:76:9d:35:0f:ce:51:3d:52:eb:fa:7b:6f:0a:28:c9:
3d:47:2a:52:a1:1b:1b:51:ad:10:93:cc:42:4f:a4:a4:f1:fb:
0d:1a:36:f8:07:43:c3:e6:78:ba:b0:4e:27:5d:99:e2:1d:1d:
65:17:54:f3:9e:6d:79:09:39:a7:99:09:48:80:ab:ce:19:2c:
65:e8:86:53:fa:79:8d:6f:14:46:14:bd:b9:e6:0d:8d:ec:f9:
41:bd:9e:a3:e8:91:3e:56:5c:0b:47:22:f8:35:d1:8a:bb:34:
80:25:8e:14:ba:00:bc:58:74:a5:86:d4:91:5b:5a:a3:81:5c:
15:a1:8d:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZasjlQbS04XZEvGnnL2INn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUwNTA3MjEwMjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjJjZTdlNjgwZWViMTdkOTdkMTdlYzYyOTkwNWM4M2E2ZWI2Y2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi424D2YUvozWKLvqzArRcXIVW8tC
s8en3lpbwhe6lMssNpuvvP+HwT+1iLgXcWcxxiInVg1IbK2/h7sK+5WV3mNhVmpX
9/Kv9obTGldnU3xI/S+I926xRd3HQyBDMi2jj6EYqBURNjjeF9pNhPtJxJqgXGf6
Ut8GZLur1TaSGyVKJXgrfcshTOKE583U3wIWrR+jhVVfP5DanbFflNcjFHx4zCZ/
ft9leqx89hqAMP1w1eVhhK6x31j5cne173tJQo+Vw9AVQJbb93refbLlopVydnAH
BA3E3AyrI10t30sVcQ8gexVJwTf9isyk4KkDW9DevsbZM5oyg1bnu6Ko9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8s5+aA7rF9l9F+ximQXIOm62yxMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvX3l6bjVvRHVzWDJYMFg3R0taQmNnNmJyYkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYMAMA0G
CSqGSIb3DQEBCwUAA4IBAQCrRZHA9LZaiHQEzs5ub3sqfb+RBrRJpfjYi3PkhpjW
gtf9CNjZZqH3LSvMm8vkItdrX+Or3dT0dYoRJNoo0zfySpanxwSF25mWBSCu3bu9
Q5WYUzqyApFKm8hwiyqqpZrLqcLQZh2IQ1OKf9LQmwS6algW7JUuJrhmKYzYLoHM
Ybh2nTUPzlE9Uuv6e28KKMk9RypSoRsbUa0Qk8xCT6Sk8fsNGjb4B0PD5ni6sE4n
XZniHR1lF1Tznm15CTmnmQlIgKvOGSxl6IZT+nmNbxRGFL255g2N7PlBvZ6j6JE+
VlwLRyL4NdGKuzSAJY4UugC8WHSlhtSRW1qjgVwVoY1+
-----END CERTIFICATE-----
Generated at Thu May 8 20:02:09 2025 by rpki-client