Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/XmxwkZr2Ua5UDkEHGjDtz-Zyw08.roa
File: XmxwkZr2Ua5UDkEHGjDtz-Zyw08.roa (raw, json)
Hash identifier: P/OmeGABxQo0KdahW/abtL2rzvBKjRzNV4nj+svt9Ok=
Subject key identifier: 5E:6C:70:91:9A:F6:51:AE:54:0E:41:07:1A:30:ED:CF:E6:72:C3:4F
Certificate issuer: /CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Certificate serial: 0194221F632EAF2774DDF428F41E73C49C39
Authority key identifier: E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/XmxwkZr2Ua5UDkEHGjDtz-Zyw08.roa
Signing time: Wed 01 Jan 2025 13:47:49 +0000
ROA not before: Wed 01 Jan 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208770
IP address blocks: 45.145.76.0/22 maxlen: 22
45.145.76.0/23 maxlen: 23
45.145.76.0/24 maxlen: 24
45.145.77.0/24 maxlen: 24
45.145.78.0/23 maxlen: 23
45.145.78.0/24 maxlen: 24
45.145.79.0/24 maxlen: 24
45.151.24.0/22 maxlen: 22
45.151.24.0/23 maxlen: 23
45.151.24.0/24 maxlen: 24
45.151.25.0/24 maxlen: 24
45.151.26.0/23 maxlen: 23
45.151.26.0/24 maxlen: 24
45.151.27.0/24 maxlen: 24
195.80.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:63:2e:af:27:74:dd:f4:28:f4:1e:73:c4:9c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8bd0d9aa8c743cda182f00668583a46e600c32d
Validity
Not Before: Jan 1 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e6c70919af651ae540e41071a30edcfe672c34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:45:0f:63:d5:33:2f:49:a8:7a:03:5c:45:c4:
a8:c2:43:c8:74:83:6b:e6:6a:42:2f:f9:7d:12:64:
12:2c:81:32:1d:86:dc:46:1c:29:16:34:6c:37:66:
59:73:e3:be:1d:8d:a5:15:3f:5a:37:00:21:f2:fa:
4c:40:a0:25:45:20:f4:35:f9:db:47:46:94:56:4e:
13:78:cb:f0:04:49:2f:2a:bf:94:99:82:f7:2b:cd:
c5:cb:f0:3e:a5:4f:80:fd:d9:b7:62:61:69:ea:4d:
4b:f8:41:33:a5:ff:c7:f2:19:8b:8b:71:93:e1:ed:
8f:f3:a3:4e:1f:bc:78:91:ef:e5:fa:5d:55:34:99:
6b:cc:66:a8:8a:2d:fa:e4:a0:e1:9f:98:7b:c0:15:
bf:72:6d:2f:27:9e:a7:85:81:c4:6b:40:92:e8:18:
68:15:00:3c:4d:7e:98:0a:9c:ea:df:35:0a:1c:86:
f7:94:b7:0f:83:f9:78:61:cd:d9:b4:3f:22:c9:63:
5d:16:2f:20:38:af:bc:75:1f:eb:cf:d9:c5:6a:c0:
e5:3c:bd:a3:0e:a3:04:c6:06:50:5c:4d:e1:e4:52:
fe:ee:64:3a:34:c8:a7:6f:3b:7f:25:28:1f:22:97:
4d:f3:35:73:04:3a:4b:90:6f:54:12:bf:16:93:6d:
8e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:70:91:9A:F6:51:AE:54:0E:41:07:1A:30:ED:CF:E6:72:C3:4F
X509v3 Authority Key Identifier:
keyid:E8:BD:0D:9A:A8:C7:43:CD:A1:82:F0:06:68:58:3A:46:E6:00:C3:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6L0NmqjHQ82hgvAGaFg6RuYAwy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/XmxwkZr2Ua5UDkEHGjDtz-Zyw08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c824d1-8cfe-440e-9b5c-889243869679/1/6L0NmqjHQ82hgvAGaFg6RuYAwy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.76.0/22
45.151.24.0/22
195.80.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:8f:2b:ef:cb:84:cf:58:42:7e:23:49:43:6e:f4:41:70:0f:
e3:39:c0:96:cd:7a:d3:e2:1b:64:92:b9:89:73:c3:5e:f6:a1:
de:55:a2:0c:a7:a6:64:e0:ba:84:5d:d9:53:56:66:e4:8b:8c:
09:91:b2:ba:4f:cb:4c:31:93:6e:f9:69:8b:ad:68:99:d1:45:
51:24:cb:ea:7a:c8:0e:6b:a4:64:b8:34:70:b3:35:c7:61:d0:
4c:6c:57:55:e2:94:b3:8a:be:36:95:d9:68:d3:52:19:8e:0e:
79:86:63:9a:d5:b5:e9:6f:75:dc:ef:b5:67:d4:14:85:73:a3:
e4:00:2d:5d:ea:df:d0:0a:eb:36:5d:ab:db:a4:cc:d6:e1:f4:
d6:54:45:46:8f:08:58:d9:9d:65:75:7c:d9:ae:02:fc:4b:fb:
44:99:7c:1f:76:4b:3f:c7:b0:ca:c3:aa:2d:c2:81:c5:b8:09:
fd:b3:5c:8b:0f:ea:43:dc:c6:45:94:c0:ef:70:5e:90:6e:f2:
65:c3:62:70:24:58:86:38:25:7a:b6:bd:9e:2c:51:9a:cc:5c:
60:7a:ca:08:37:41:f6:3e:c3:a9:f1:3c:23:28:31:1c:26:1a:
e5:e5:ea:c1:d4:0f:c0:96:38:20:df:d6:ea:a1:59:00:75:4b:
15:28:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:17:11 2025 by rpki-client