Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/eAO9SMGOXJTy0KC68qvLydBHGGg.roa
File: eAO9SMGOXJTy0KC68qvLydBHGGg.roa (raw, json)
Hash identifier: ZDtAk7aLVybRZS26TFypN3xxPIz041mxKe2dCr1iPdw=
Subject key identifier: 78:03:BD:48:C1:8E:5C:94:F2:D0:A0:BA:F2:AB:CB:C9:D0:47:18:68
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01956CC7AC8E4BB215BC62AEDA0F835A2286
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/eAO9SMGOXJTy0KC68qvLydBHGGg.roa
Signing time: Thu 06 Mar 2025 18:46:19 +0000
ROA not before: Thu 06 Mar 2025 18:46:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 45.154.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:c7:ac:8e:4b:b2:15:bc:62:ae:da:0f:83:5a:22:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 6 18:46:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7803bd48c18e5c94f2d0a0baf2abcbc9d0471868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:8e:40:0f:87:cf:81:2c:ef:f5:af:0f:fa:
a1:4d:f6:45:59:fe:c4:54:9c:7c:dd:8f:d9:35:47:
65:0e:aa:b4:24:11:73:a3:bb:95:a5:39:08:59:b1:
fb:7c:d2:a9:b3:c4:a4:a1:6e:3a:63:c1:d9:63:42:
70:fd:5a:58:4f:a0:3c:6b:0e:c5:a7:c9:4b:6a:c0:
fe:0f:83:af:e1:72:1d:2a:91:e1:7f:86:c5:4b:48:
99:1a:de:c5:d8:6f:20:92:df:86:42:0c:76:47:b0:
5c:10:77:80:20:4c:7e:7e:c0:ca:10:e4:fb:f4:3f:
54:9a:05:7d:6f:26:8c:d4:5a:8f:9b:e7:c1:94:4f:
c8:b8:9e:e7:b3:25:d7:83:5c:10:eb:ae:fd:a6:e5:
83:5f:13:49:c8:61:95:27:65:13:73:11:63:aa:74:
26:b6:34:68:b1:5f:bc:55:99:ea:9b:86:8c:3b:6f:
ea:6c:4b:70:84:2d:69:b2:35:31:64:f9:f2:96:cd:
25:ac:5a:b0:62:3b:3f:d1:38:79:36:48:ba:83:8f:
fe:ea:55:0f:6b:bd:af:36:d7:a3:a8:b0:29:26:cc:
86:9f:6b:95:99:ab:10:79:6a:a4:3f:cc:7c:aa:99:
83:cf:e0:2c:c2:8e:3e:34:d2:33:4e:14:47:6d:c6:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:03:BD:48:C1:8E:5C:94:F2:D0:A0:BA:F2:AB:CB:C9:D0:47:18:68
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/eAO9SMGOXJTy0KC68qvLydBHGGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.158.0/24
Signature Algorithm: sha256WithRSAEncryption
23:29:40:2d:e6:89:a7:ea:0d:8c:6e:70:5a:9b:42:4c:5a:8d:
69:54:34:ac:ac:1d:7e:11:ca:6c:e2:80:c4:3f:3c:ac:e3:96:
0e:fc:0b:4b:1d:07:90:a5:1d:a7:f2:08:6f:f8:d2:c2:a0:1e:
89:da:44:53:4d:67:29:05:e9:76:31:3b:d8:22:a7:e8:59:5c:
f4:34:30:b0:53:7e:8e:c4:6c:3b:8c:73:f5:2a:3f:62:7c:51:
65:7b:9d:5e:8f:71:53:b8:c5:b2:48:72:93:19:d8:b2:ad:8b:
b8:7f:17:69:43:06:3e:48:e9:3f:b9:76:7c:95:51:5b:eb:af:
86:81:bf:0d:af:09:ae:1a:b6:9b:fc:c4:60:fb:29:bf:99:5a:
1b:bd:f1:2c:f9:ee:42:ec:43:fa:0f:63:d7:6f:3c:73:9d:2a:
6d:c4:99:85:ea:b8:e9:4f:12:01:f9:3c:44:41:c0:52:04:df:
14:a3:1d:2a:d2:39:4c:0d:3e:34:22:b6:b5:35:7c:f9:91:87:
8f:d2:4f:85:a2:6f:19:88:e0:27:9a:a3:85:65:b0:17:72:a7:
93:11:6c:ba:ef:47:b0:2b:21:53:cf:4c:d2:f1:83:fb:72:e6:
b2:0b:f2:43:56:51:5f:1f:04:1f:1f:4a:da:b5:ee:bb:2b:14:
94:e9:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:19 2025 by rpki-client