Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/7abujg5YyGw-Dy5kOxbayEhXp8E.roa
File: 7abujg5YyGw-Dy5kOxbayEhXp8E.roa (raw, json)
Hash identifier: lOz5VIr6Vz6VAh0bdDShfDUIzKOutVJzrANsECMkN+c=
Subject key identifier: ED:A6:EE:8E:0E:58:C8:6C:3E:0F:2E:64:3B:16:DA:C8:48:57:A7:C1
Certificate issuer: /CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Certificate serial: 019653073E8182D6F077F372D0A3678ED005
Authority key identifier: AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/7abujg5YyGw-Dy5kOxbayEhXp8E.roa
Signing time: Sun 20 Apr 2025 11:48:25 +0000
ROA not before: Sun 20 Apr 2025 11:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 45.89.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:07:3e:81:82:d6:f0:77:f3:72:d0:a3:67:8e:d0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7be34f5d269da502aa68348bf07b92d92c0cc4
Validity
Not Before: Apr 20 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eda6ee8e0e58c86c3e0f2e643b16dac84857a7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:e4:95:b6:bd:00:c1:14:45:71:e0:6b:dd:
a5:d3:82:2c:af:30:78:40:be:f9:df:04:a2:be:86:
ed:2c:42:41:28:80:7e:59:cc:1d:fa:73:fd:92:5d:
a1:1f:76:fd:4a:86:12:f9:a0:cf:62:f0:ae:f6:bc:
6b:bf:05:d8:e6:49:18:bd:d4:a9:ac:5d:e2:99:16:
da:67:01:29:aa:a7:4c:11:82:9e:b9:e7:67:31:ab:
15:6b:8a:9a:38:56:e2:68:27:b5:54:c8:c6:31:e1:
ea:8b:d3:80:49:d3:30:de:09:3b:dc:3c:52:bb:50:
4b:ca:9d:59:52:a1:41:ef:1a:2c:b1:80:3b:b0:47:
8d:57:f9:b4:bc:dc:fb:b1:ba:5c:0d:ee:03:16:c6:
a6:43:9b:43:48:5e:66:f7:67:2c:dd:75:2b:db:3d:
30:a6:48:7f:e5:03:94:66:46:55:ad:a8:0b:30:7f:
f6:0c:eb:d5:eb:e8:99:48:a7:cd:e7:a9:0c:8a:0a:
5d:61:db:94:a8:6e:6a:da:e7:e0:87:38:2f:ec:0f:
6e:e8:e4:4e:8f:96:79:cf:6e:34:ad:a5:54:1d:78:
c3:ac:d5:22:ef:34:38:75:9b:2e:8a:58:cc:0c:6f:
a0:75:01:97:1b:d0:b9:30:68:5e:4a:af:b2:34:41:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A6:EE:8E:0E:58:C8:6C:3E:0F:2E:64:3B:16:DA:C8:48:57:A7:C1
X509v3 Authority Key Identifier:
keyid:AB:7B:E3:4F:5D:26:9D:A5:02:AA:68:34:8B:F0:7B:92:D9:2C:0C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3vjT10mnaUCqmg0i_B7ktksDMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/7abujg5YyGw-Dy5kOxbayEhXp8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0af68-dc6e-41cc-a6de-5583e61adb38/1/q3vjT10mnaUCqmg0i_B7ktksDMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:44:e1:41:25:ec:1a:ce:41:80:ad:ae:e9:5f:2e:5e:55:d4:
05:d3:6d:c2:ca:2d:e8:94:10:81:00:08:5f:d8:fc:52:84:bd:
90:65:2c:87:b2:9f:7f:5d:d4:47:e3:4a:12:23:e5:bf:6d:1e:
19:ac:46:59:4a:22:48:85:7e:68:e0:43:62:48:c6:b9:fa:46:
9e:47:5a:ae:fa:e3:91:c7:e1:f9:53:9c:62:41:fa:0e:7c:78:
65:67:12:f5:0f:fa:03:13:1a:fe:39:7b:03:18:a0:15:70:f4:
46:20:88:40:ec:7a:03:d2:91:fd:24:cb:15:2f:aa:5f:53:61:
2d:55:54:29:05:88:a1:37:cd:71:d3:7d:d6:af:b5:2a:62:f1:
af:8d:25:b5:a0:5c:31:32:9b:a2:1a:7d:fa:99:d1:91:74:ea:
ed:b6:19:ec:33:80:16:1d:01:a6:d7:7d:7e:27:5e:54:0b:b4:
9d:67:ee:33:8f:78:f5:5f:69:eb:6b:f3:fc:93:cc:da:3d:47:
2e:27:ea:29:2b:8c:91:ad:b8:1a:cb:8f:79:b8:f7:00:f8:a6:
35:c7:37:6c:f9:f4:e2:a3:15:1a:c1:87:46:b3:1b:28:68:83:
2d:de:15:06:b0:3e:80:ea:bb:2e:ba:94:90:04:2d:a2:7c:0e:
e6:f1:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:22:28 2025 by rpki-client