Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/9SVfluOBZwBfs-bjwE_rTE8NN74.roa
File: 9SVfluOBZwBfs-bjwE_rTE8NN74.roa (raw, json)
Hash identifier: vH7rlpjAcAk1sy3DNBgkpNoFX/t68ex1sv/VxyfNsUo=
Subject key identifier: F5:25:5F:96:E3:81:67:00:5F:B3:E6:E3:C0:4F:EB:4C:4F:0D:37:BE
Certificate issuer: /CN=e8564a4b5fef4444477df0da5b19924d52d10094
Certificate serial: 0194221FE5BD0D32950F560A4C94C6FB9066
Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/9SVfluOBZwBfs-bjwE_rTE8NN74.roa
Signing time: Wed 01 Jan 2025 13:48:23 +0000
ROA not before: Wed 01 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47373
IP address blocks: 45.134.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e5:bd:0d:32:95:0f:56:0a:4c:94:c6:fb:90:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5255f96e38167005fb3e6e3c04feb4c4f0d37be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:a7:71:b0:2c:7f:c1:3c:c0:db:31:a8:27:
86:cd:39:4c:91:14:2d:9b:51:ef:51:cb:96:f5:31:
03:35:3d:68:90:e0:a6:26:93:a4:c3:22:43:05:61:
a6:e3:22:aa:ca:f4:7b:7c:85:1b:6b:c6:6e:15:9e:
b8:3a:c7:90:20:c4:a8:23:dd:91:a8:44:b8:34:ec:
02:87:ea:45:18:91:c5:19:8c:57:b5:39:3c:02:53:
eb:46:7c:fb:57:dc:95:ac:cd:2e:08:12:ea:d7:d4:
83:cb:81:f0:b4:95:35:97:04:97:2d:32:a1:cf:e8:
bb:19:62:d3:fb:0e:6a:12:c8:c5:85:bd:9f:1b:ed:
a2:ec:c4:e3:0a:dc:b2:e6:01:8f:ac:cd:6a:e1:a1:
f9:42:6c:e0:64:e3:91:7a:5d:53:45:eb:da:6c:85:
ca:81:0f:41:fd:a6:c0:04:81:a9:18:dd:53:a1:1a:
14:de:c6:18:ee:e9:82:ae:83:62:34:be:19:d2:1d:
23:7d:e9:6a:ef:0c:28:4f:62:05:f2:05:d0:c4:0a:
57:54:01:5c:02:13:d4:86:e7:b3:1b:7e:91:c3:f1:
08:fa:2e:02:e0:7f:eb:3d:84:dd:d4:7c:d6:76:f4:
09:da:e5:2b:fa:b4:48:ce:79:c1:89:c4:55:6c:a4:
17:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:25:5F:96:E3:81:67:00:5F:B3:E6:E3:C0:4F:EB:4C:4F:0D:37:BE
X509v3 Authority Key Identifier:
keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/9SVfluOBZwBfs-bjwE_rTE8NN74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.244.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:95:2e:19:c2:f8:af:86:4c:2f:7d:0e:b4:00:da:95:9f:00:
4f:1d:18:3e:4d:48:68:12:ca:9d:2b:4b:66:e5:5d:bc:bd:de:
bf:61:a9:69:51:36:99:60:c1:b1:0e:e1:d0:7e:98:53:a1:05:
cc:a0:14:69:72:dc:45:bb:23:90:f8:0a:82:b8:50:a6:37:e5:
96:73:4b:ca:d3:05:cd:3f:45:a8:c6:04:8d:bb:c9:e8:39:9d:
c5:a5:b2:1c:4a:54:bf:08:ff:8e:19:03:68:16:ac:65:16:d3:
7c:f9:47:ea:b5:a1:00:c0:13:0d:79:22:20:10:c8:b1:26:b4:
5b:92:e8:4f:01:0e:92:dd:34:81:7a:f3:81:13:ee:12:e0:2a:
43:ac:8c:a4:77:bc:7a:71:36:d8:d6:cc:a5:0d:a4:3f:ee:55:
f5:27:8e:98:ad:fd:67:6b:9a:5b:fe:d0:73:93:20:c8:4b:26:
2e:03:fc:73:5e:fd:c6:94:25:6c:18:f1:ce:2c:64:d6:fd:ba:
c0:5b:94:73:01:5e:7c:6e:ae:e1:a5:b5:d5:a2:55:15:44:79:
d8:7c:76:c4:0b:ac:3c:b4:5e:d1:35:7b:38:f6:bc:66:e3:43:
8b:91:ed:d0:58:97:5a:ad:3c:20:a2:c8:33:7e:05:dc:8f:e5:
d8:58:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:30 2025 by rpki-client