Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/7F80jFSbPxmTTmjOi6-hGfFW9n4.roa
File: 7F80jFSbPxmTTmjOi6-hGfFW9n4.roa (raw, json)
Hash identifier: lyxsHymrKrQFQN+O0COTPx++o5VdqW80Bft0/kvFeDo=
Subject key identifier: EC:5F:34:8C:54:9B:3F:19:93:4E:68:CE:8B:AF:A1:19:F1:56:F6:7E
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 01968033F330618B3A66C332B61197D5F883
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/7F80jFSbPxmTTmjOi6-hGfFW9n4.roa
Signing time: Tue 29 Apr 2025 06:20:10 +0000
ROA not before: Tue 29 Apr 2025 06:20:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.11.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:33:f3:30:61:8b:3a:66:c3:32:b6:11:97:d5:f8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Apr 29 06:20:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec5f348c549b3f19934e68ce8bafa119f156f67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:b6:8a:0a:b3:a0:61:09:7c:23:5a:e6:19:
5a:55:d3:05:29:bb:3a:3a:39:78:6e:f0:dd:28:2a:
b3:5b:4b:75:42:f1:ed:6e:43:be:b4:73:4f:94:e5:
1d:32:b8:84:8a:0c:73:45:09:0a:97:9c:06:b0:2f:
e9:76:dc:4f:6c:28:4f:5e:bf:e6:8c:35:b1:f6:ee:
e0:42:b2:b4:99:ae:d5:2b:2c:e5:db:4b:f8:35:7a:
67:55:10:80:a2:a0:37:a9:89:dc:fb:af:47:5c:90:
16:23:ff:cf:03:8f:bc:3a:f4:27:4d:54:5a:dc:e4:
bc:f9:d3:d4:d9:43:a0:56:74:d7:27:b7:a1:d3:c3:
db:7b:4a:20:8e:a6:28:6d:38:7b:90:a1:ac:4f:8a:
83:eb:c7:34:e4:57:81:bf:e1:e2:72:77:da:a2:ec:
a7:9b:98:1b:6a:77:73:f6:30:ae:63:0c:4a:ad:73:
68:a3:00:e9:7f:f9:3c:18:39:61:50:d7:81:2e:65:
08:8a:58:60:ab:40:77:a3:e1:df:e4:4e:dd:29:78:
72:78:4b:7c:8c:f6:4c:2a:fd:2d:72:d2:10:99:d9:
3d:13:a3:02:ff:27:47:36:f1:9f:18:71:ba:9c:da:
7d:f1:07:f8:63:7a:71:a2:65:77:7a:66:2e:3b:76:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5F:34:8C:54:9B:3F:19:93:4E:68:CE:8B:AF:A1:19:F1:56:F6:7E
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/7F80jFSbPxmTTmjOi6-hGfFW9n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.173.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ab:d3:14:0a:3b:be:36:be:3c:52:a2:f0:de:12:85:28:a6:
fe:0f:21:af:00:81:ad:b4:6e:b5:2c:f5:89:95:57:cd:88:e2:
bf:bb:76:47:0c:76:9e:12:03:ab:dc:c6:d0:ea:33:b4:08:56:
6b:78:bc:d2:41:66:9a:ac:60:4b:c3:a2:ac:c4:c9:24:68:89:
62:db:4a:18:cb:a0:db:64:2b:38:37:df:9c:00:fe:67:24:6a:
48:f0:28:97:a6:f4:36:0b:c6:8e:98:49:14:20:e4:42:50:41:
61:cb:9b:c2:6e:dd:c1:fe:45:4a:d4:58:0d:5d:f6:e2:be:46:
5f:1a:d4:d0:a9:03:3e:b4:04:bd:f2:64:7e:18:50:98:cc:2f:
8f:c7:1c:72:a0:87:8b:8e:d6:7f:f1:99:65:f9:ef:a7:a8:7c:
f1:25:f9:5e:e8:f8:59:ee:f2:bb:aa:63:26:23:ef:1b:31:a5:
d3:ac:78:5f:2c:2c:0f:d1:02:79:00:f9:10:3e:e6:c4:d0:6e:
6d:0e:ce:c3:65:7c:0b:1c:65:a9:33:13:fc:27:3c:bf:a3:93:
7f:4b:08:b2:70:d0:86:2d:a3:57:24:0a:fd:b5:64:d3:9f:e1:
31:a0:90:3c:5b:d4:3c:e4:76:5d:23:80:a3:90:53:06:64:56:
1b:eb:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:04 2025 by rpki-client