Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/rotm5S1yeVh_byhtZ0TuP8nb1lI.roa
File: rotm5S1yeVh_byhtZ0TuP8nb1lI.roa (raw, json)
Hash identifier: bGH5+ZfT48IjV7Cmls3wXMYIr6+sn0IXhXcbuXsyl58=
Subject key identifier: AE:8B:66:E5:2D:72:79:58:7F:6F:28:6D:67:44:EE:3F:C9:DB:D6:52
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0194266C2C6732E423FD2CA23A3C457809B1
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/rotm5S1yeVh_byhtZ0TuP8nb1lI.roa
Signing time: Thu 02 Jan 2025 09:50:11 +0000
ROA not before: Thu 02 Jan 2025 09:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 45.140.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2c:67:32:e4:23:fd:2c:a2:3a:3c:45:78:09:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Jan 2 09:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae8b66e52d7279587f6f286d6744ee3fc9dbd652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:7e:c6:5e:d3:09:c7:d6:e5:7e:a7:b0:75:
28:87:d2:f0:fc:31:18:c2:ed:a9:c6:bd:f4:40:4f:
36:99:0b:34:7d:b2:13:b4:2d:21:6d:a3:be:6c:4c:
05:ca:58:8f:d7:b6:ba:c1:22:31:3a:ef:09:40:11:
32:ab:9b:60:8f:c7:bf:0d:ce:25:c9:4f:0a:8e:9b:
ed:82:63:0b:70:15:8d:e1:a4:7a:7d:26:49:6e:2a:
1c:c2:81:bc:3a:e7:4e:07:92:59:1c:fe:7e:7c:a3:
25:89:1c:3a:dc:a9:ac:00:a0:3f:d3:e5:35:55:e7:
96:af:37:47:c1:5a:3d:03:9e:e9:a2:6d:dc:36:b2:
dd:71:c9:c1:08:cf:0e:d2:55:c0:3a:64:54:42:82:
23:8c:29:03:c2:a5:85:99:e2:83:40:8f:03:b9:c1:
87:9e:7f:6e:ad:ca:39:f9:05:c9:4c:6c:9f:4d:f2:
58:9a:63:f9:e6:96:9d:6c:b2:d3:a0:1e:57:64:79:
06:14:20:13:86:63:4f:7b:da:4b:1e:16:39:79:fe:
20:75:02:06:7a:56:12:7e:80:0b:63:fe:5c:de:6e:
1d:79:df:9c:25:82:a7:3f:bd:2d:31:42:dd:71:f0:
23:bf:2c:36:29:13:7d:9c:7b:11:6e:ef:2b:5f:56:
f7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:66:E5:2D:72:79:58:7F:6F:28:6D:67:44:EE:3F:C9:DB:D6:52
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/rotm5S1yeVh_byhtZ0TuP8nb1lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/24
Signature Algorithm: sha256WithRSAEncryption
55:17:6f:24:42:c7:72:b5:3b:1d:94:48:98:bd:85:a7:e1:30:
3e:e0:44:ec:a3:a8:ee:fc:44:bc:22:d2:93:67:a3:ac:4c:df:
8d:ce:95:ef:ee:52:d6:bd:8f:1e:de:1a:e5:85:b7:ba:c7:9c:
2f:54:2e:94:44:db:ff:bf:78:02:36:a2:7c:2a:e9:9e:b1:2d:
27:e3:d3:3c:d9:a4:66:05:13:e4:c5:49:cc:54:7f:5f:af:1f:
e5:72:7f:c2:d2:c6:d2:c2:96:99:1c:ff:c7:14:8a:f0:76:2f:
66:08:68:ac:3e:e9:4b:c8:e5:e8:9a:05:5b:b7:47:b1:bb:bb:
df:34:0e:99:49:40:44:4e:ad:06:7d:7c:1a:24:f2:e7:00:af:
5c:bd:82:3a:61:61:58:a2:8f:38:c1:83:fb:6a:a3:65:d8:23:
08:1e:f5:0f:3f:14:8c:73:71:ec:fd:75:c6:38:48:7a:e6:3f:
cb:9d:b7:39:43:8b:f8:41:cf:82:ca:8f:7c:17:72:d8:5d:bf:
8b:df:0e:6b:84:a8:bd:c9:1f:fa:23:91:d7:f5:d8:ad:fe:e0:
2a:71:a7:2b:5b:ba:98:a5:5a:43:5a:ac:71:f8:93:10:83:6d:
23:ee:e6:dc:28:a8:b3:44:12:9e:5b:eb:e7:c0:6a:94:31:06:
18:ca:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:40:51 2025 by rpki-client