Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/toMHEB280KETNfSWfwGdAQlBHIo.roa
File: toMHEB280KETNfSWfwGdAQlBHIo.roa (raw, json)
Hash identifier: /78AEGOua5BdiHCzMqoUcFzXGSUc4tOmrRCkCS8IUTo=
Subject key identifier: B6:83:07:10:1D:BC:D0:A1:13:35:F4:96:7F:01:9D:01:09:41:1C:8A
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0196423E715FB39395415FF56A5F50526463
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/toMHEB280KETNfSWfwGdAQlBHIo.roa
Signing time: Thu 17 Apr 2025 05:35:10 +0000
ROA not before: Thu 17 Apr 2025 05:35:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211056
IP address blocks: 45.11.186.0/24 maxlen: 24
45.81.16.0/23 maxlen: 24
45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:3e:71:5f:b3:93:95:41:5f:f5:6a:5f:50:52:64:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 17 05:35:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b68307101dbcd0a11335f4967f019d0109411c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:8c:c6:d1:d1:d1:7e:94:63:f7:b5:f0:56:
39:6e:1a:ab:1c:dc:c1:c1:23:d8:c9:02:62:68:53:
85:52:4d:98:d5:80:6f:00:14:ec:d3:d3:03:4c:28:
94:3b:86:5b:24:54:2f:b3:a9:55:6e:fc:79:04:41:
b5:8e:b3:8c:0e:d6:21:2c:c1:bd:55:84:f9:8c:99:
02:a0:4c:c8:0a:c4:50:52:05:67:66:89:31:f7:95:
3a:09:64:15:75:fe:67:45:a7:04:e8:1a:5b:bc:fa:
79:66:c8:25:c3:75:4d:d5:2e:66:bf:ef:85:0b:c2:
1a:30:3f:d9:c0:95:9a:01:c0:5f:6f:79:55:0e:3a:
14:60:86:e3:4a:23:ea:a1:aa:d0:90:5e:c3:2d:50:
32:b0:4b:d2:c1:96:86:dc:1b:cd:d4:b8:fc:22:23:
8d:7a:48:d3:a5:87:c9:97:8d:4f:a4:02:ef:90:03:
d6:bd:c2:bb:ac:e8:80:16:78:aa:f5:b1:2f:8b:27:
38:34:c8:45:4a:0c:78:c2:98:f6:85:c0:8f:1e:b8:
2d:bc:8b:5e:b8:bd:68:59:91:0c:1d:21:a9:a6:9b:
1b:fd:a1:75:40:5a:95:ec:3e:b8:75:6e:c9:97:a8:
ac:ef:38:a2:95:2e:a9:6b:6f:21:98:c9:3c:7c:cc:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:83:07:10:1D:BC:D0:A1:13:35:F4:96:7F:01:9D:01:09:41:1C:8A
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/toMHEB280KETNfSWfwGdAQlBHIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
45.81.16.0/22
185.201.49.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:19:46:9c:75:39:be:5b:10:88:c5:b3:34:fb:38:f0:58:db:
38:46:38:a7:36:93:45:fc:0f:b8:5d:fd:64:27:16:0f:08:e3:
22:3c:16:f1:bf:12:57:fe:74:3b:3f:b9:1e:95:45:06:2e:37:
be:23:c7:c2:05:57:45:b5:57:d9:1b:f4:ec:3a:94:d7:df:6f:
7a:73:04:cb:2e:67:9b:cf:f8:c2:12:53:4f:b8:f2:e3:b0:c5:
45:04:ad:95:59:dd:40:c5:90:0d:c1:4b:11:64:08:38:82:20:
d2:25:f8:a5:a5:5b:02:35:39:c9:98:4c:68:28:bc:7a:35:2a:
f2:dc:2b:d2:97:a9:d8:e2:b7:40:67:45:46:57:16:cb:38:d4:
2a:1e:57:e6:3f:e7:db:c1:91:60:98:04:64:0b:3b:20:15:a7:
f4:fd:fa:ca:49:56:58:6c:0f:78:60:c0:11:7b:53:8a:37:a3:
79:3d:c9:ad:9c:2d:ef:65:86:b5:7b:82:6d:ed:1f:cb:dd:fa:
0d:0a:0d:29:1b:2f:c4:d7:0b:17:4d:78:df:4c:f3:54:b5:3d:
d6:67:43:26:eb:a4:97:25:10:f8:0f:b8:3b:8a:45:20:e0:c0:
42:ab:25:07:3a:69:cf:3a:17:1f:7f:bd:ae:d7:7c:95:8e:b2:
42:7c:61:df
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZZCPnFfs5OVQV/1al9QUmRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjUwNDE3MDUzNTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjgzMDcxMDFkYmNkMGExMTMzNWY0OTY3ZjAxOWQwMTA5NDExYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHuMxtHR0X6UY/e18FY5bhqrHNzB
wSPYyQJiaFOFUk2Y1YBvABTs09MDTCiUO4ZbJFQvs6lVbvx5BEG1jrOMDtYhLMG9
VYT5jJkCoEzICsRQUgVnZokx95U6CWQVdf5nRacE6BpbvPp5Zsglw3VN1S5mv++F
C8IaMD/ZwJWaAcBfb3lVDjoUYIbjSiPqoarQkF7DLVAysEvSwZaG3BvN1Lj8IiON
ekjTpYfJl41PpALvkAPWvcK7rOiAFniq9bEviyc4NMhFSgx4wpj2hcCPHrgtvIte
uL1oWZEMHSGpppsb/aF1QFqV7D64dW7Jl6is7ziilS6pa28hmMk8fMxgRwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLaDBxAdvNChEzX0ln8BnQEJQRyKMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvdG9NSEVCMjgwS0VUTmZTV2Z3R2RBUWxCSElvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQu6AwQC
LVEQAwQAuckxMA0GCSqGSIb3DQEBCwUAA4IBAQA8GUacdTm+WxCIxbM0+zjwWNs4
RjinNpNF/A+4Xf1kJxYPCOMiPBbxvxJX/nQ7P7kelUUGLje+I8fCBVdFtVfZG/Ts
OpTX3296cwTLLmebz/jCElNPuPLjsMVFBK2VWd1AxZANwUsRZAg4giDSJfilpVsC
NTnJmExoKLx6NSry3CvSl6nY4rdAZ0VGVxbLONQqHlfmP+fbwZFgmARkCzsgFaf0
/frKSVZYbA94YMARe1OKN6N5PcmtnC3vZYa1e4Jt7R/L3foNCg0pGy/E1wsXTXjf
TPNUtT3WZ0Mm66SXJRD4D7g7ikUg4MBCqyUHOmnPOhcff72u13yVjrJCfGHf
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:54:23 2025 by rpki-client