Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xYdRbqbNjKrOLt435Yoprgs1bfQ.roa
File: xYdRbqbNjKrOLt435Yoprgs1bfQ.roa (raw, json)
Hash identifier: fNtEJdVkd/BcEOZZ3PGa+MGG+aiUTSg5+WOb+z5BkZE=
Subject key identifier: C5:87:51:6E:A6:CD:8C:AA:CE:2E:DE:37:E5:8A:29:AE:0B:35:6D:F4
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0196C12997A430843DA0E5C6C8FC08368D3E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xYdRbqbNjKrOLt435Yoprgs1bfQ.roa
Signing time: Sun 11 May 2025 21:04:10 +0000
ROA not before: Sun 11 May 2025 21:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214940
IP address blocks: 45.144.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:29:97:a4:30:84:3d:a0:e5:c6:c8:fc:08:36:8d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 11 21:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c587516ea6cd8caace2ede37e58a29ae0b356df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:62:e6:0e:56:5b:df:bf:67:f4:7f:8a:2d:
26:cf:16:3e:29:c1:e7:8b:03:c5:26:00:f2:00:db:
66:82:66:fe:c8:05:3c:d5:92:fc:b7:6a:22:9f:64:
54:09:b3:8a:42:1a:73:b6:ab:d8:76:04:e2:7d:6c:
50:ed:58:96:88:48:b6:de:67:50:1f:5a:a3:35:9d:
4b:a0:1e:86:50:45:f6:05:44:26:f8:8c:a8:1a:86:
4c:c7:db:f3:d2:16:6d:c3:86:a9:4f:35:bb:01:5d:
d5:a5:a9:0a:26:e1:01:73:60:91:e0:c8:3e:05:f4:
89:95:05:ec:36:7a:dc:32:1f:08:b6:85:59:6f:44:
92:04:4d:a3:da:88:46:50:7b:e4:eb:b7:63:27:c7:
b6:ef:c4:71:f1:bf:47:af:da:b9:62:b2:38:4b:27:
d5:e4:3c:6b:25:ab:b3:5a:4b:83:72:74:76:8b:cc:
cc:33:71:ee:1e:c6:82:52:d3:a0:14:2e:80:61:68:
da:8f:81:74:a2:ed:38:98:ec:92:58:5f:b7:81:61:
43:cd:90:11:ff:41:80:74:b1:d9:e6:b7:d4:52:0a:
81:eb:57:04:eb:7d:43:e4:c7:f7:38:f3:b6:00:f5:
a1:e5:91:a2:11:bc:16:93:c9:54:45:be:10:08:c6:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:87:51:6E:A6:CD:8C:AA:CE:2E:DE:37:E5:8A:29:AE:0B:35:6D:F4
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/xYdRbqbNjKrOLt435Yoprgs1bfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:82:a9:9b:99:65:c7:7d:80:0b:b2:34:5a:38:6b:89:43:e6:
c0:a6:90:5d:8c:87:54:9c:96:c7:1c:fd:a9:19:da:69:18:9a:
67:f3:e5:c9:d0:7b:e9:1a:c4:98:d8:cb:7e:59:f7:34:13:c7:
d2:71:0d:31:1b:36:be:3d:4b:3c:7c:3e:79:22:c6:fd:0e:a9:
90:32:88:95:92:04:7c:ed:c5:95:8f:77:78:e9:e9:90:ef:03:
89:4d:d7:04:f7:f4:46:3a:62:45:ed:e7:af:c6:3d:b7:b7:be:
49:b0:33:26:5a:05:d3:2c:43:82:33:c5:ed:00:23:0e:c8:70:
7a:82:24:49:95:5f:34:a2:c2:19:3c:15:6e:cf:44:2c:94:2d:
61:00:ba:33:d3:e6:40:5f:05:2f:6e:09:85:47:4d:2a:17:61:
fe:0f:fd:44:8d:ab:89:48:ea:7b:cb:a0:8c:1e:9f:74:ca:08:
28:bf:14:7a:4c:cb:e8:01:d1:6b:ec:e0:42:a9:01:39:c3:ae:
ad:60:4e:3f:48:5b:ba:8e:91:de:be:8f:aa:55:57:88:9b:16:
55:25:b5:e6:40:a1:d9:29:bb:2d:6d:22:ca:f5:3c:0d:d4:12:
95:fe:5c:eb:96:a3:21:62:fd:d0:fe:7c:a2:1b:52:2e:68:76:
9f:3e:24:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:17 2025 by rpki-client