Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa
File: 8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa (raw, json)
Hash identifier: g6jDxz/UxGzzizwSc5CDzUUAAjalGAWQr2yYfR64f7Y=
Subject key identifier: F3:0F:41:11:0C:D1:3C:FC:BD:A2:5C:05:6B:0F:99:9F:A5:5A:E9:85
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 0194258F4CF149FA61B6FCDDE921C100FAE3
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212832
IP address blocks: 45.152.69.0/24 maxlen: 24
45.152.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4c:f1:49:fa:61:b6:fc:dd:e9:21:c1:00:fa:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f30f41110cd13cfcbda25c056b0f999fa55ae985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:0d:d9:30:24:56:75:8a:f5:48:1c:c4:53:
ee:4d:ee:ae:c0:17:8d:6f:39:03:fe:8f:7b:90:34:
b2:1b:b1:be:0e:e5:96:1c:be:99:af:fd:4c:59:ce:
95:8a:25:0b:20:66:6e:63:b1:27:15:e5:80:ac:02:
f2:1c:b2:de:cc:c2:9d:ca:bc:00:3f:e6:70:f4:74:
e7:66:35:43:05:e5:b7:7c:ed:f4:53:ff:14:9b:98:
78:7b:de:a0:67:85:66:5b:30:61:42:54:25:e1:49:
5e:81:56:b8:dc:7d:c2:da:4d:65:08:6d:b0:34:a9:
56:df:c2:c5:59:e6:21:a9:bc:09:16:a6:ab:23:58:
ce:60:d8:53:43:a6:45:ec:e6:95:01:50:48:37:c7:
1c:af:76:5e:7c:7e:36:54:0e:a2:72:4e:2b:7e:16:
4f:5d:df:f7:61:20:62:73:e6:8e:5b:c1:7e:15:27:
15:55:28:79:52:64:ca:8d:e0:65:24:5a:30:51:5f:
b4:c6:31:bb:08:d0:5c:81:3c:0b:67:18:33:9e:6c:
12:bd:7b:ef:d0:f1:4b:83:d6:48:fb:88:8c:5a:2a:
4c:fd:7f:e9:68:06:45:4b:35:74:56:02:5b:60:8f:
94:22:25:cc:1b:64:dd:6b:be:a1:a5:85:86:b1:56:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0F:41:11:0C:D1:3C:FC:BD:A2:5C:05:6B:0F:99:9F:A5:5A:E9:85
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.69.0/24
45.152.71.0/24
Signature Algorithm: sha256WithRSAEncryption
72:65:10:34:25:42:94:6f:c3:09:da:16:9a:e8:60:2a:3c:28:
97:f8:25:b8:69:00:67:fd:bd:39:33:05:10:a0:02:66:f1:c6:
b0:e5:ff:b6:80:50:07:32:2c:b4:26:17:3d:6d:20:7d:2d:a7:
a2:ae:60:69:80:62:da:0e:13:c3:75:ff:3e:2c:cd:3b:6e:30:
ff:7b:8c:7f:06:85:0b:e0:0d:c8:ce:79:77:bf:47:43:c3:f1:
a9:82:54:78:3c:f0:46:19:14:b5:f0:a7:4d:a3:df:26:12:6d:
c0:17:61:8e:f0:56:55:5a:f2:c1:08:3f:47:ad:13:35:48:2d:
6d:8d:10:af:4a:9d:9c:ef:73:75:ba:3f:23:ab:fd:09:d4:d5:
f2:79:14:95:a5:c6:2a:13:42:06:fc:be:98:7c:73:7d:38:01:
06:6e:98:7a:a7:fc:df:e4:80:c6:8d:0b:da:e6:0f:1d:c3:8e:
af:b2:77:2a:5a:26:5d:fe:90:1d:a1:ab:5c:76:13:ff:4f:c2:
95:fa:d9:29:34:76:1a:dc:d8:82:11:5a:16:e1:f7:f1:da:bf:
55:dc:22:dd:19:6d:b0:ec:b8:2f:0a:f7:35:c6:5b:46:81:16:
a8:eb:4f:b4:fc:a6:f8:b3:ab:9b:65:49:1e:6d:12:dc:6d:73:
71:5e:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:20:26 2025 by rpki-client