Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/D6Ep6I0xh6FFalDn2P-usYZsiWk.roa
File: D6Ep6I0xh6FFalDn2P-usYZsiWk.roa (raw, json)
Hash identifier: u4M+5ODEDsGeN9x5oGpB057DEAmBr6/zAYl6s5UQPYI=
Subject key identifier: 0F:A1:29:E8:8D:31:87:A1:45:6A:50:E7:D8:FF:AE:B1:86:6C:89:69
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942144121E84A4705B6160E748BA804022
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/D6Ep6I0xh6FFalDn2P-usYZsiWk.roa
Signing time: Wed 01 Jan 2025 09:48:16 +0000
ROA not before: Wed 01 Jan 2025 09:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201138
IP address blocks: 185.145.54.0/24 maxlen: 24
185.145.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:12:1e:84:a4:70:5b:61:60:e7:48:ba:80:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fa129e88d3187a1456a50e7d8ffaeb1866c8969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:38:b3:01:31:5a:b6:86:f6:8f:38:a7:a3:
5b:70:1a:f7:93:78:39:38:f1:7d:ba:1b:fd:70:62:
f2:44:f9:f7:fe:3c:95:17:24:09:0d:af:42:6a:61:
f5:76:ad:aa:c8:1e:ab:23:88:70:ff:7f:c5:04:60:
a7:1a:8b:6b:19:61:b3:ae:34:f8:14:59:1d:94:31:
16:d7:82:49:78:ae:76:56:de:d5:dd:ad:12:a2:3e:
1d:b1:b6:66:e3:0a:26:c3:04:7e:d2:a7:21:19:07:
98:76:ed:ba:30:17:70:65:6f:3f:c9:ee:19:fe:1e:
78:e0:39:8a:24:ac:13:0f:fe:19:de:3f:6e:51:43:
7d:04:79:e1:88:13:ca:28:7a:77:25:80:36:f7:06:
91:94:ee:93:d2:93:45:db:87:b9:49:ef:0b:65:27:
fc:a0:3b:c4:3f:72:e1:f1:aa:0b:63:ca:63:76:9e:
27:e5:af:e1:43:6e:60:eb:1a:38:e4:31:19:3e:4b:
f0:40:99:cb:18:cc:fc:94:57:3f:56:af:e9:98:6d:
ac:05:ad:a5:d6:5c:99:56:c1:6c:b9:9f:f5:9e:ff:
4d:17:a8:da:c2:d1:60:1e:38:03:fa:cc:62:7a:7a:
c4:af:e8:84:86:2b:ff:64:c8:43:99:fa:1a:3b:d7:
d3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A1:29:E8:8D:31:87:A1:45:6A:50:E7:D8:FF:AE:B1:86:6C:89:69
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/D6Ep6I0xh6FFalDn2P-usYZsiWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.54.0/23
Signature Algorithm: sha256WithRSAEncryption
28:b3:ac:c5:fb:1f:8f:df:2b:31:35:f0:da:c9:92:db:34:8a:
85:e9:a5:bf:8f:cc:40:31:54:fe:76:37:39:9b:eb:9e:61:ba:
e8:aa:54:6d:d3:b6:ce:79:72:ac:70:cd:f5:06:d0:d9:e2:fb:
7b:5c:9e:fc:c4:1f:d4:34:90:94:f3:2c:68:5a:2d:49:a9:b0:
b8:85:d5:d8:1e:df:a9:b0:74:01:23:82:58:34:82:a8:cd:d6:
89:d9:79:55:5d:9e:db:a6:8d:ba:1b:e9:e5:93:41:17:7a:6d:
75:4c:0a:a8:f6:28:7d:1a:68:7f:17:9f:8b:8a:49:3b:e6:71:
85:b5:43:6d:4d:f2:5d:8f:61:09:92:a1:81:1c:2a:f8:10:7f:
12:a3:f2:0b:76:05:74:13:30:1c:14:e0:48:88:5f:e4:2b:88:
01:10:c1:82:a5:4b:cb:5c:e1:50:29:cd:1d:c4:02:35:51:c7:
8f:38:04:46:36:b8:b2:87:aa:cc:32:87:68:ec:51:d8:ed:db:
a4:a4:13:73:22:d6:31:f8:9a:fd:ef:93:43:0c:4a:1b:4c:fc:
04:0f:1a:fa:6d:67:d4:8b:90:51:cf:f1:c8:37:af:62:dc:a8:
5d:be:ec:74:7b:7b:4c:45:bf:07:20:5e:33:b8:9d:0b:be:05:
b9:ef:77:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:06:59 2025 by rpki-client