Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/YKuzm8eZ5thjoG3YWlLmGyis6Hc.roa
File: YKuzm8eZ5thjoG3YWlLmGyis6Hc.roa (raw, json)
Hash identifier: lRlLqWarJKTArL8I3Oh3IGUAjFaJLYWsMsfvgIvdCEk=
Subject key identifier: 60:AB:B3:9B:C7:99:E6:D8:63:A0:6D:D8:5A:52:E6:1B:28:AC:E8:77
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019424B3E906724D813E1761233B9D471143
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/YKuzm8eZ5thjoG3YWlLmGyis6Hc.roa
Signing time: Thu 02 Jan 2025 01:49:17 +0000
ROA not before: Thu 02 Jan 2025 01:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202564
IP address blocks: 45.66.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 21:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e9:06:72:4d:81:3e:17:61:23:3b:9d:47:11:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60abb39bc799e6d863a06dd85a52e61b28ace877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:65:5c:42:9e:3f:4f:90:2f:cd:fc:07:db:39:
50:68:6c:cd:72:50:3b:6d:bc:17:20:55:a2:09:f0:
66:ce:b8:8f:dc:5d:1c:a9:1a:6e:bb:5e:bb:a3:24:
7d:d0:3a:96:ce:53:b1:49:dc:65:b0:ca:ee:0a:ce:
70:f9:35:3c:68:cc:ac:04:0d:db:a9:d4:f4:f6:37:
1d:df:ce:f7:12:df:71:4e:3e:99:74:4e:b0:02:83:
fc:f4:53:a2:ff:01:bf:2e:ab:3c:c8:1a:3d:25:8e:
dd:e5:e0:15:b1:7d:96:b6:f8:0e:cc:b0:7e:64:99:
58:4d:23:23:b5:bb:9e:fb:b5:31:0d:34:ca:84:58:
a2:03:4e:67:a2:e9:62:4c:da:b4:7a:7a:82:44:bf:
b0:fa:8d:16:12:31:3d:48:a6:c0:f5:5a:a4:07:2c:
6a:fd:b1:de:dc:b9:ef:44:ab:ee:39:78:57:ca:43:
96:73:bc:13:d1:b3:40:c8:9e:d1:81:de:0b:dd:75:
fa:68:5a:34:b8:4e:ae:36:b3:10:92:fd:b3:a3:de:
c8:2c:35:85:66:ea:3e:77:3a:93:df:8c:2b:26:4b:
2b:73:f3:ff:36:12:05:08:1f:30:4d:f4:33:f2:be:
6f:50:bf:6a:e2:3f:96:a9:50:0d:a1:4b:9a:5b:4f:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AB:B3:9B:C7:99:E6:D8:63:A0:6D:D8:5A:52:E6:1B:28:AC:E8:77
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/YKuzm8eZ5thjoG3YWlLmGyis6Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:7b:26:a9:cf:1e:e0:eb:13:47:a5:90:2e:c5:1f:8a:12:49:
fe:a1:4e:37:94:ca:c3:94:da:ba:92:eb:19:47:92:5f:61:49:
82:f3:f0:7d:df:98:54:6f:f6:d7:33:22:80:4a:16:1a:c9:de:
75:be:d2:a7:a9:64:75:6c:68:b1:74:11:c2:bc:8c:66:48:75:
38:62:c5:4c:4a:46:7c:53:bb:6f:93:b7:a6:24:45:0a:66:ce:
5f:db:67:66:ee:68:fe:57:c1:cb:a3:79:ea:d5:82:4d:6c:0b:
e4:12:fa:08:7e:d7:74:d2:88:c7:8e:bb:d6:cf:f2:76:59:b9:
b7:62:25:4b:b2:f4:6f:c1:8c:0f:a6:e1:53:d6:e4:28:ce:a8:
d1:99:d3:0a:32:c9:73:31:22:a6:c0:93:61:4c:69:f1:ec:32:
49:4b:a2:45:64:64:ce:88:95:fb:84:8c:13:5d:86:a4:57:5a:
9e:87:41:a4:d7:9d:a1:c6:ce:55:71:53:1a:39:60:48:b6:da:
d7:08:50:4a:68:7f:c3:3b:35:19:1c:f4:5b:21:00:0e:eb:25:
24:8d:e3:e5:e7:cb:ae:52:39:5d:2d:1d:0d:12:88:7a:60:e4:
ab:cc:c6:c3:9a:01:41:d1:db:09:06:d5:34:cf:2a:eb:5d:7d:
58:02:32:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:20:08 2025 by rpki-client