Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YeOA21sCBvBsghpwF7q0OeQ_68c.roa
File: YeOA21sCBvBsghpwF7q0OeQ_68c.roa (raw, json)
Hash identifier: ezR2VYa/OcgwcZwFSin2r8qyIw7ZKjYayGsLefB/veA=
Subject key identifier: 61:E3:80:DB:5B:02:06:F0:6C:82:1A:70:17:BA:B4:39:E4:3F:EB:C7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196077EC3569999DED40943D7ED566A8257
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YeOA21sCBvBsghpwF7q0OeQ_68c.roa
Signing time: Sat 05 Apr 2025 19:47:50 +0000
ROA not before: Sat 05 Apr 2025 19:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44547
IP address blocks: 45.90.88.0/24 maxlen: 24
45.128.96.0/24 maxlen: 24
45.149.242.0/24 maxlen: 24
87.121.103.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:7e:c3:56:99:99:de:d4:09:43:d7:ed:56:6a:82:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 5 19:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61e380db5b0206f06c821a7017bab439e43febc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:35:3f:10:2e:5b:2b:a6:4d:8c:02:17:84:40:
0b:90:39:45:85:e3:99:81:3c:2a:19:50:9d:14:14:
23:c5:5e:bd:0b:75:35:21:9a:01:a3:bb:34:14:30:
a7:3c:42:2c:b3:a4:bc:b8:c2:11:26:49:38:e6:53:
51:e7:da:1c:4e:35:2b:b5:60:0b:3b:5b:9a:cd:36:
2f:d3:35:c8:c6:35:ce:11:2c:88:52:98:26:17:b5:
9e:be:d4:19:72:bf:fe:a9:e9:b0:0e:0d:50:02:0f:
71:39:c0:7a:5b:17:c0:a4:c4:cf:f2:9f:f5:a4:c5:
7f:47:58:c7:7a:bf:64:e8:5c:0e:ca:5e:17:f3:be:
5a:76:3e:e6:37:1f:f1:81:86:be:6c:a7:d7:77:d8:
d2:f2:cc:60:a5:e8:f1:67:69:74:f8:d1:2d:bd:77:
22:06:c0:1d:a4:29:bc:f4:6c:d1:56:4b:4e:fc:56:
22:67:13:0d:45:11:e6:b6:d3:ff:6e:b0:38:1f:63:
55:f9:f7:ee:71:cd:ba:fb:00:0d:81:4a:74:3e:67:
a5:a6:00:56:8c:87:b3:7a:cd:f7:11:61:f2:98:be:
9e:1c:96:a1:8e:37:88:a5:e9:2b:6c:97:fc:b7:65:
d7:0a:a9:af:b1:c5:12:0f:b3:81:c5:0f:0a:94:0a:
08:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E3:80:DB:5B:02:06:F0:6C:82:1A:70:17:BA:B4:39:E4:3F:EB:C7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YeOA21sCBvBsghpwF7q0OeQ_68c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.88.0/24
45.128.96.0/24
45.149.242.0/24
87.121.103.0-87.121.104.255
91.92.16.0/24
94.156.113.0/24
Signature Algorithm: sha256WithRSAEncryption
26:d8:19:e4:a5:b4:df:9c:62:75:b4:8a:9c:6b:77:43:69:ab:
6a:31:f3:c6:9b:bc:00:45:b2:30:83:9f:bf:67:ac:17:ba:af:
f3:e5:0e:a1:66:40:46:69:82:90:1f:ba:f6:e9:2d:9d:3e:66:
c1:c1:64:aa:1a:37:3d:96:21:27:cf:b4:49:14:9a:69:07:df:
47:d9:49:7e:11:89:00:33:7f:8b:e0:71:69:d9:d3:2a:24:80:
14:b6:09:da:d4:90:74:94:98:32:17:14:95:2d:f8:97:7a:de:
a1:e0:bb:e1:55:8e:dc:48:6a:03:fc:20:32:b6:37:cc:65:42:
de:81:24:8c:fd:df:9d:f9:59:8d:61:84:a9:11:47:d6:a4:9e:
31:e2:07:06:60:fb:44:b2:97:3e:1e:75:ca:57:01:e3:bc:52:
29:34:8f:d7:2c:9f:fd:38:81:02:3d:09:a7:20:20:91:be:94:
8e:23:9f:f6:bd:cf:d7:65:77:10:5a:a9:29:9f:21:06:3d:0d:
f5:6d:9b:58:17:5f:df:f4:c3:42:68:97:8e:ff:9d:ae:09:94:
ac:2d:a0:9a:da:10:32:ea:ce:65:63:26:a5:f8:bd:98:00:d8:
10:20:36:5b:3c:58:b6:18:e8:28:07:d3:76:a2:24:42:4b:bc:
48:ae:ae:f6
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZYHfsNWmZne1AlD1+1WaoJXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwNDA1MTk0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWUzODBkYjViMDIwNmYwNmM4MjFhNzAxN2JhYjQzOWU0M2ZlYmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzU/EC5bK6ZNjAIXhEALkDlFheOZ
gTwqGVCdFBQjxV69C3U1IZoBo7s0FDCnPEIss6S8uMIRJkk45lNR59ocTjUrtWAL
O1uazTYv0zXIxjXOESyIUpgmF7WevtQZcr/+qemwDg1QAg9xOcB6WxfApMTP8p/1
pMV/R1jHer9k6FwOyl4X875adj7mNx/xgYa+bKfXd9jS8sxgpejxZ2l0+NEtvXci
BsAdpCm89GzRVktO/FYiZxMNRRHmttP/brA4H2NV+ffucc26+wANgUp0PmelpgBW
jIezes33EWHymL6eHJahjjeIpekrbJf8t2XXCqmvscUSD7OBxQ8KlAoI3wIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFGHjgNtbAgbwbIIacBe6tDnkP+vHMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWWVPQTIxc0NCdkJzZ2hwd0Y3cTBPZVFfNjhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQALVpYAwQA
LYBgAwQALZXyMAwDBABXeWcDBABXeWgDBABbXBADBABenHEwDQYJKoZIhvcNAQEL
BQADggEBACbYGeSltN+cYnW0ipxrd0Npq2ox88abvABFsjCDn79nrBe6r/PlDqFm
QEZpgpAfuvbpLZ0+ZsHBZKoaNz2WISfPtEkUmmkH30fZSX4RiQAzf4vgcWnZ0yok
gBS2CdrUkHSUmDIXFJUt+Jd63qHgu+FVjtxIagP8IDK2N8xlQt6BJIz93535WY1h
hKkRR9aknjHiBwZg+0Sylz4edcpXAeO8Uik0j9csn/04gQI9CacgIJG+lI4jn/a9
z9dldxBaqSmfIQY9DfVtm1gXX9/0w0Jol47/na4JlKwtoJraEDLqzmVjJqX4vZgA
2BAgNls8WLYY6CgH03aiJEJLvEiurvY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:10:11 2025 by rpki-client