Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/z4wTK8Gu9ubn_Evpe2MCkaKxyUg.roa
File: z4wTK8Gu9ubn_Evpe2MCkaKxyUg.roa (raw, json)
Hash identifier: vrLlQFN8NNvcK1W609gayN7UdwguiumR51Bnubh9mU0=
Subject key identifier: CF:8C:13:2B:C1:AE:F6:E6:E7:FC:4B:E9:7B:63:02:91:A2:B1:C9:48
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBEAD07E864D45BB06958766DD4C06
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/z4wTK8Gu9ubn_Evpe2MCkaKxyUg.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213064
IP address blocks: 45.134.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ea:d0:7e:86:4d:45:bb:06:95:87:66:dd:4c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf8c132bc1aef6e6e7fc4be97b630291a2b1c948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:43:b0:b6:66:76:fa:6f:eb:5c:6b:5b:51:fd:
6f:75:47:89:f4:3f:04:d2:a9:ed:05:7a:42:a6:9c:
e7:86:ca:0f:c1:3d:4a:32:ec:89:2b:00:4e:6b:cd:
50:1a:b7:ee:a4:b3:e9:86:6c:6a:70:66:ae:a3:4b:
0a:30:d7:d4:52:86:b1:8a:32:46:7a:ea:c1:eb:84:
a7:95:c7:bc:0d:74:41:aa:eb:4e:c9:41:56:13:23:
91:ea:f3:36:08:9e:11:94:77:b9:9c:3d:67:ae:8a:
af:42:58:ea:96:75:ea:76:a9:23:0c:c0:52:8f:d1:
90:90:b1:88:41:d9:b3:59:ac:f0:99:11:a5:cc:c2:
d5:60:3b:43:f9:92:74:52:8f:f6:59:71:42:6f:9d:
8a:32:0c:f7:2d:d3:3a:6b:0b:48:61:26:6a:de:7d:
0b:36:41:3b:7a:fb:65:e7:02:38:ba:c4:c0:48:74:
55:3e:be:ef:4d:ab:f6:34:30:51:82:98:1a:47:70:
b2:f1:9c:32:b1:2d:fc:51:8d:2d:bd:5c:62:fc:09:
69:70:ff:33:10:8d:b1:9a:f2:41:00:5d:82:ed:03:
92:48:17:2c:65:5c:18:25:89:ff:8e:1b:6a:e1:80:
fc:17:29:db:d5:df:92:40:58:cc:5d:8f:c0:dc:f8:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8C:13:2B:C1:AE:F6:E6:E7:FC:4B:E9:7B:63:02:91:A2:B1:C9:48
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/z4wTK8Gu9ubn_Evpe2MCkaKxyUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:e6:d2:1a:da:5c:72:f2:49:bd:6e:fb:b3:5a:b9:5c:e7:91:
15:66:b6:a7:c8:19:36:ac:50:d1:c2:82:99:9a:42:27:3b:fe:
70:66:15:a6:d6:d8:19:e2:77:3b:d6:cd:10:79:4a:62:6a:58:
cb:26:7f:07:ec:e7:aa:89:b3:2b:7b:4b:62:3a:44:ca:92:0d:
15:ea:e6:be:3c:4c:4a:cb:47:3e:8d:bf:77:e7:1b:96:d9:cc:
f6:f1:47:04:9c:ce:9c:ec:09:49:67:38:2a:76:e5:6a:18:80:
4a:2f:33:6d:0e:7a:a9:34:b8:11:8c:db:a2:bd:10:07:0f:e9:
2c:8d:36:e4:85:c2:b5:a8:5c:ab:ab:80:f1:8f:bc:ea:50:82:
67:1f:ab:d8:3c:6c:53:76:01:65:b8:13:1b:55:9a:fc:83:9f:
31:df:41:fa:0e:fc:0f:73:3b:5d:6c:f8:56:ac:45:23:ed:80:
6a:a7:3b:01:c0:1a:7d:10:b5:f3:e0:23:6a:30:cb:24:3b:52:
c1:f5:17:3e:31:48:c5:f0:85:84:0f:2f:2a:c3:c5:b6:83:44:
c0:ec:59:1d:0c:73:b4:0f:5c:4a:4c:b3:f4:f8:cc:18:80:b2:
73:5f:03:c8:04:6b:cd:e1:d9:7c:ea:79:e5:bf:0c:67:42:f2:
a6:a0:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:40 2025 by rpki-client