Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa
File: A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa (raw, json)
Hash identifier: klrrdXVAOvLHpaQGMknKIRZ8jovgw0eH+IforAZMakg=
Subject key identifier: 03:92:6C:9F:54:12:9F:3F:A1:C6:75:07:70:7C:6D:A0:16:57:1F:2A
Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial: 019420D659626007693BDCB56372D129D642
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa
Signing time: Wed 01 Jan 2025 07:48:25 +0000
ROA not before: Wed 01 Jan 2025 07:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 45.66.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:59:62:60:07:69:3b:dc:b5:63:72:d1:29:d6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03926c9f54129f3fa1c67507707c6da016571f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:49:a9:d1:14:c5:70:cc:9d:a6:a0:49:41:
e7:9e:af:a4:62:c6:53:34:7c:96:38:60:61:07:31:
d0:f0:19:52:d1:62:36:34:e3:2b:d8:47:00:58:6a:
34:42:56:5f:60:a1:71:8d:2a:92:7c:6d:11:5f:e6:
b1:93:d0:00:e7:ef:d3:58:54:e3:22:00:f4:b2:a8:
e7:9d:14:f4:b1:eb:cd:42:79:72:8d:7d:82:0f:f2:
41:03:66:6e:8f:3b:d3:05:83:fe:21:32:56:c4:dd:
a8:53:b7:c2:8e:d7:15:d9:ec:4e:09:73:11:4e:af:
2f:6e:5a:52:f9:6d:29:ec:5e:df:46:6f:fb:df:96:
2d:46:62:d0:46:4d:2a:14:66:7d:23:fd:d9:ca:9e:
a5:d8:3d:a2:86:d2:d2:2b:1c:68:3a:85:16:5f:8f:
4a:6d:dc:5e:a4:68:e7:2b:82:5c:f8:d7:0f:25:d7:
63:ff:db:9b:ae:e3:09:34:19:77:a2:9e:91:e5:1a:
5c:12:39:ca:d9:e0:90:13:3a:65:a1:3d:38:d5:50:
18:f2:0b:ee:a6:71:36:ea:fa:20:fc:58:6f:7b:5c:
66:7e:c7:b4:2c:26:d3:ad:4f:1f:19:57:bc:fa:7e:
b8:cf:54:0d:4a:48:61:38:8e:b9:93:1c:4c:60:4a:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:6C:9F:54:12:9F:3F:A1:C6:75:07:70:7C:6D:A0:16:57:1F:2A
X509v3 Authority Key Identifier:
keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/A5Jsn1QSnz-hxnUHcHxtoBZXHyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.80.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:bc:71:31:a6:c1:df:fe:db:b7:48:09:d7:fb:35:cb:e6:41:
42:9b:94:ec:52:db:f4:77:1e:5f:4f:42:05:86:35:d5:97:f2:
db:75:8b:9d:e9:ba:c2:1c:53:ec:f8:d7:b4:f0:9a:53:b6:55:
ed:fb:a4:d2:47:b8:21:e8:e1:3e:bb:86:f4:91:e4:34:74:e6:
da:a9:26:f8:6f:d7:f4:5d:2b:6b:50:b5:7f:24:7c:97:6c:de:
8d:21:a0:ce:02:91:4b:ac:62:a1:1c:b5:32:e2:4b:9c:ca:cb:
2c:bb:cd:c8:6a:c2:8d:99:27:3a:ad:f8:31:9a:4f:b8:75:8b:
ac:81:27:77:9a:fa:e3:9c:a7:67:35:62:31:2b:e9:fd:eb:b2:
16:ad:61:26:34:fb:59:58:d3:bd:51:ed:22:32:6d:31:2d:15:
28:fa:a7:56:0b:16:59:56:06:f9:ec:1e:ed:d0:72:80:b8:5d:
f4:35:07:ac:11:9c:1d:eb:da:4f:8d:1e:e6:be:c7:07:91:e6:
ba:79:b7:f4:46:59:fe:c8:3c:06:e7:19:b0:7b:62:94:b7:e4:
48:d6:36:7e:8d:52:12:e8:5b:7f:25:7e:66:a1:78:b2:d6:b5:
9f:a4:97:52:84:5a:ae:6c:7b:d6:5c:8e:32:a6:8b:22:cd:28:
a1:df:63:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:46 2025 by rpki-client