Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0bY-icxo49y4tVloTnSQkKkbZMU.roa
File: 0bY-icxo49y4tVloTnSQkKkbZMU.roa (raw, json)
Hash identifier: IIOxo/ZWDfch3L3o+J1lpJpWoZVYBeZkyqqd6Oouj+4=
Subject key identifier: D1:B6:3E:89:CC:68:E3:DC:B8:B5:59:68:4E:74:90:90:A9:1B:64:C5
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0197168E50D192ACC71C42F9FBB1196F87EF
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0bY-icxo49y4tVloTnSQkKkbZMU.roa
Signing time: Wed 28 May 2025 11:01:54 +0000
ROA not before: Wed 28 May 2025 11:01:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60397
IP address blocks: 45.149.116.0/22 maxlen: 24
79.170.148.0/22 maxlen: 24
151.237.56.0/23 maxlen: 24
151.237.58.0/23 maxlen: 24
151.237.130.0/24 maxlen: 24
151.237.132.0/23 maxlen: 24
151.237.134.0/23 maxlen: 24
185.158.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:8e:50:d1:92:ac:c7:1c:42:f9:fb:b1:19:6f:87:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: May 28 11:01:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1b63e89cc68e3dcb8b559684e749090a91b64c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:f7:31:c6:2e:20:d8:3c:32:b4:1a:13:61:
86:c7:11:b4:84:52:60:de:12:7e:3b:0a:83:85:ae:
7d:1c:31:69:f6:2a:28:28:e9:44:0d:c7:7c:cb:fe:
9a:4e:09:10:55:9f:84:00:5c:75:ab:21:4d:c9:87:
92:3f:4f:b3:6b:1f:a5:68:c7:9e:2f:e9:c6:1a:0f:
e5:9a:96:66:29:20:d3:d0:ef:37:cd:a6:1c:9a:20:
55:64:fc:0e:f7:d1:e7:dd:68:1b:be:c8:a8:9d:67:
76:a4:1b:5e:fb:a2:e8:47:d8:d8:84:a9:f4:8e:ed:
f3:3e:1b:4f:7b:d4:8e:80:8d:66:72:43:1f:2e:ad:
83:f2:31:d8:02:06:6e:87:a4:70:0c:12:bd:41:35:
33:56:6d:52:61:27:c8:26:ce:ab:b6:02:fe:05:cf:
84:fc:2b:9b:36:01:6a:c6:dd:53:fc:de:7f:ec:58:
f6:40:89:6a:3f:32:74:6b:22:a1:4c:f9:6f:c6:f1:
9d:89:ae:f0:20:02:ca:c1:7b:25:d8:f3:52:23:48:
3e:3c:ae:d5:e2:31:e9:76:da:da:2c:ca:0e:6a:5e:
78:88:10:99:ac:2a:b2:56:e5:49:18:7f:cd:33:ca:
38:2b:b9:87:ae:30:62:4f:43:91:56:c6:76:87:e4:
96:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B6:3E:89:CC:68:E3:DC:B8:B5:59:68:4E:74:90:90:A9:1B:64:C5
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/0bY-icxo49y4tVloTnSQkKkbZMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.116.0/22
79.170.148.0/22
151.237.56.0/22
151.237.130.0/24
151.237.132.0/22
185.158.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:82:58:69:d9:a5:f0:29:30:17:dc:76:33:92:d4:c7:5d:bf:
7f:c9:0e:42:66:92:48:6f:07:27:98:68:2e:7b:19:3a:ff:da:
90:46:b3:83:99:63:f3:d7:46:47:a8:d8:63:8c:c1:da:94:b1:
8a:9f:1c:7a:74:28:67:51:e0:35:02:cc:87:0d:ee:84:f5:c0:
b8:1b:22:b5:25:e9:4f:9b:8b:c9:52:68:1c:2e:f8:47:78:9d:
66:2a:e7:e5:e9:89:d7:2f:b4:3a:7b:43:96:56:e9:74:22:a1:
8e:f3:ec:20:64:13:9e:c8:f5:ea:48:42:0f:f2:f7:17:89:b8:
ca:c3:02:50:ae:80:44:16:29:20:4b:c2:7d:43:ab:11:90:1c:
a8:1e:a5:c8:d0:e4:8a:21:2d:f6:37:e6:79:2a:5b:58:2d:ea:
c9:0f:10:fa:c3:1f:19:95:a6:ab:31:c2:ca:ee:01:86:ea:88:
94:60:9a:e5:ea:10:c6:36:88:0a:0e:65:49:7b:1f:4f:2e:bf:
f9:04:10:67:8d:ba:17:6f:bb:33:88:81:64:cd:0b:13:e3:3e:
5c:65:ee:27:d0:21:a9:a4:7c:b0:fc:ac:43:7f:1e:e0:1c:1e:
59:e1:7e:c6:3b:6e:b8:54:96:25:b7:20:d0:7d:07:4b:f1:ae:
ee:5f:dd:64
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZcWjlDRkqzHHEL5+7EZb4fvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjUwNTI4MTEwMTU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWI2M2U4OWNjNjhlM2RjYjhiNTU5Njg0ZTc0OTA5MGE5MWI2NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1/3McYuINg8MrQaE2GGxxG0hFJg
3hJ+OwqDha59HDFp9iooKOlEDcd8y/6aTgkQVZ+EAFx1qyFNyYeSP0+zax+laMee
L+nGGg/lmpZmKSDT0O83zaYcmiBVZPwO99Hn3WgbvsionWd2pBte+6LoR9jYhKn0
ju3zPhtPe9SOgI1mckMfLq2D8jHYAgZuh6RwDBK9QTUzVm1SYSfIJs6rtgL+Bc+E
/CubNgFqxt1T/N5/7Fj2QIlqPzJ0ayKhTPlvxvGdia7wIALKwXsl2PNSI0g+PK7V
4jHpdtraLMoOal54iBCZrCqyVuVJGH/NM8o4K7mHrjBiT0ORVsZ2h+SWNwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFNG2PonMaOPcuLVZaE50kJCpG2TFMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvMGJZLWljeG80OXk0dFZsb1RuU1FrS2tiWk1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLZV0AwQC
T6qUAwQCl+04AwQAl+2CAwQCl+2EAwQCuZ4IMA0GCSqGSIb3DQEBCwUAA4IBAQBM
glhp2aXwKTAX3HYzktTHXb9/yQ5CZpJIbwcnmGguexk6/9qQRrODmWPz10ZHqNhj
jMHalLGKnxx6dChnUeA1AsyHDe6E9cC4GyK1JelPm4vJUmgcLvhHeJ1mKufl6YnX
L7Q6e0OWVul0IqGO8+wgZBOeyPXqSEIP8vcXibjKwwJQroBEFikgS8J9Q6sRkByo
HqXI0OSKIS32N+Z5KltYLerJDxD6wx8ZlaarMcLK7gGG6oiUYJrl6hDGNogKDmVJ
ex9PLr/5BBBnjboXb7sziIFkzQsT4z5cZe4n0CGppHyw/KxDfx7gHB5Z4X7GO264
VJYltyDQfQdL8a7uX91k
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:36:50 2025 by rpki-client