Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b8xz25Lz2f3lJ9GOFZmpN0ERtg0.roa
File: b8xz25Lz2f3lJ9GOFZmpN0ERtg0.roa (raw, json)
Hash identifier: sCIHkY/QPn9o+f5U33PRWxqggAgsCtjuw2M2SArIw44=
Subject key identifier: 6F:CC:73:DB:92:F3:D9:FD:E5:27:D1:8E:15:99:A9:37:41:11:B6:0D
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0195AFF565B67F63589F386CDEE3112407BC
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b8xz25Lz2f3lJ9GOFZmpN0ERtg0.roa
Signing time: Wed 19 Mar 2025 19:50:49 +0000
ROA not before: Wed 19 Mar 2025 19:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199760
IP address blocks: 45.155.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:f5:65:b6:7f:63:58:9f:38:6c:de:e3:11:24:07:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Mar 19 19:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fcc73db92f3d9fde527d18e1599a9374111b60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:01:0e:93:1d:ac:c4:57:18:66:12:b7:3e:
1e:81:d0:f4:bc:4c:2e:75:e6:5c:42:d2:5c:bb:c9:
f7:e5:63:06:af:1d:f3:fa:9b:49:d6:84:f2:6f:53:
26:4c:b8:42:09:36:b3:40:f7:dc:50:31:f8:1a:e5:
52:35:e3:ca:b3:18:82:44:47:1e:51:e4:49:9f:34:
0a:33:45:2b:89:cc:93:c8:44:3b:ca:d4:2e:0d:47:
8b:0e:b6:0b:05:96:cd:08:ad:2e:d8:c9:dc:3c:77:
8a:b9:55:c5:17:84:bf:e9:ee:33:2f:65:e9:5d:13:
41:77:94:20:5a:a8:6f:41:3e:c3:ad:f1:6e:44:ed:
ba:38:d6:6f:01:65:cc:d0:30:a6:59:e6:c9:99:15:
6f:eb:30:44:65:b6:94:ae:fa:df:7b:db:86:24:48:
d4:ac:49:24:c3:91:6f:72:e2:ff:1b:e7:90:f7:6d:
b5:0e:73:18:71:db:e8:fd:dc:4c:8a:ed:f8:b3:b3:
b4:cc:17:72:ba:d4:a6:06:05:ab:db:3a:b7:e3:54:
30:55:82:13:dd:81:7a:bc:60:30:72:79:fd:ec:91:
00:a6:e8:90:b5:3e:6c:de:0d:36:50:e5:c1:31:6d:
21:6c:2a:05:95:91:a3:ee:c6:92:c6:36:87:29:c4:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CC:73:DB:92:F3:D9:FD:E5:27:D1:8E:15:99:A9:37:41:11:B6:0D
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/b8xz25Lz2f3lJ9GOFZmpN0ERtg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:1f:a8:b0:df:17:bb:49:f4:f0:2b:76:2a:bd:0c:1a:ee:59:
a5:d9:56:37:ca:51:c4:28:b2:61:f2:61:c6:f2:0e:e6:b0:ff:
55:4a:4b:6d:db:ca:38:20:4f:cf:8b:cc:ab:53:91:bb:eb:2e:
1c:31:ee:aa:ce:76:e2:97:8a:e2:d8:c4:50:23:90:75:02:1e:
5f:8c:0d:3a:e8:18:b4:bc:f3:bb:b1:cb:20:1a:18:2d:ee:50:
27:d5:cf:7b:62:90:4b:9a:7b:32:12:86:49:00:07:13:90:f0:
a4:42:6f:62:f3:28:e4:01:fd:d2:d1:f2:3d:c4:bc:4c:e3:35:
d8:c8:40:81:e0:39:f0:99:b7:d0:8c:d5:8c:69:f4:95:b9:6a:
76:00:d5:10:d0:10:c0:f1:ea:04:3e:eb:a3:f6:21:a6:c9:fe:
70:e5:9f:f6:0f:a4:9a:31:2f:2a:44:80:c0:36:e7:e9:4f:4d:
4b:52:3d:a2:a2:b7:bf:c0:ec:f6:43:78:d6:15:37:c0:19:9d:
a4:1e:27:41:d8:f2:75:a0:10:f5:cb:68:bd:e7:7d:cf:fa:37:
e8:fa:17:9b:d4:5e:7f:42:5c:42:3c:79:da:16:3c:16:96:f5:
7b:a6:90:86:ed:c8:03:10:cc:5c:1a:56:79:15:53:e8:e8:00:
c0:b2:6b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:34:43 2025 by rpki-client