Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1ZpmcjGBmoftDG4lacRgkbariwI.roa
File: 1ZpmcjGBmoftDG4lacRgkbariwI.roa (raw, json)
Hash identifier: 0+oqZZueycAQCZfkE8XHVl7jQ+CaYYz4yFLPWI1owqk=
Subject key identifier: D5:9A:66:72:31:81:9A:87:ED:0C:6E:25:69:C4:60:91:B6:AB:8B:02
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019612194C02F342A4402BAE4F834E4FFAC5
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1ZpmcjGBmoftDG4lacRgkbariwI.roa
Signing time: Mon 07 Apr 2025 21:12:49 +0000
ROA not before: Mon 07 Apr 2025 21:12:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213186
IP address blocks: 45.155.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:19:4c:02:f3:42:a4:40:2b:ae:4f:83:4e:4f:fa:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 7 21:12:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d59a667231819a87ed0c6e2569c46091b6ab8b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:ce:a6:de:fc:5e:8e:1e:70:70:c7:12:70:
f3:70:96:8c:3b:04:89:53:84:8a:f6:23:ba:0e:22:
5c:a1:5f:f7:0b:ca:12:c4:7a:1f:25:9b:c3:08:73:
d8:d9:01:8d:7b:39:11:1e:e7:7f:3f:6f:b6:a3:fb:
47:d2:a4:af:f9:82:41:40:b4:de:23:14:d8:eb:d2:
34:50:ce:da:67:66:d9:16:20:16:ec:6d:1e:35:4f:
a2:8a:d9:4b:b1:01:fa:1c:01:aa:6d:86:cc:aa:dd:
97:2a:f5:75:6b:2d:0b:cf:54:24:7e:72:33:e8:2d:
dd:62:29:ed:d0:ed:c0:94:7e:4a:ac:86:38:91:6c:
95:75:6d:74:6a:15:4a:8f:b1:cf:51:69:6e:7d:03:
43:5b:23:7f:ae:98:09:54:e1:28:6b:c8:44:48:36:
51:72:0b:7f:62:65:3f:12:5c:70:25:c5:85:cd:5a:
4f:77:d9:b2:ea:a7:d2:f9:66:43:ed:c2:c6:87:e4:
be:dc:08:97:09:ce:3f:09:1a:7d:f8:04:39:2f:a4:
35:4c:bf:f4:d1:53:3c:92:6d:96:81:50:05:8e:63:
ca:53:d4:12:17:2d:af:0b:ba:4a:b5:ac:19:20:bc:
82:8c:24:36:25:34:b2:42:90:e2:e6:1c:90:9c:b3:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9A:66:72:31:81:9A:87:ED:0C:6E:25:69:C4:60:91:B6:AB:8B:02
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1ZpmcjGBmoftDG4lacRgkbariwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:a1:04:13:aa:f7:34:a8:7a:92:58:d6:2c:04:76:01:0b:0e:
72:15:6f:bd:60:65:6a:96:03:85:e1:d4:4c:ba:a3:99:8b:1f:
b8:e1:95:a1:ac:d7:f3:dc:35:ec:07:90:04:d7:84:9a:c9:61:
73:bf:80:f8:4b:a8:7b:a1:7b:f6:3b:62:bf:74:00:56:48:61:
90:8b:0a:39:95:7c:d3:9d:de:60:01:69:6d:b1:55:5a:11:2e:
80:e9:9a:8c:fb:31:a1:5e:44:57:c2:c3:5b:9f:f8:90:a0:08:
b2:76:0e:d7:c7:8f:f8:53:f2:33:1f:86:45:d9:a1:f6:99:e3:
c6:6f:46:cc:f4:3c:b2:21:26:56:47:fe:23:c5:5e:f4:c8:cf:
39:bf:04:05:13:74:ab:62:bd:8d:fb:2a:f9:da:1b:a6:7f:59:
9b:a8:c4:46:f7:3d:ea:15:ab:47:a4:38:18:f7:ea:fa:b7:50:
53:9f:f5:e9:d5:64:21:36:c5:5c:ba:8d:1e:91:27:4a:11:f4:
94:56:d1:1f:23:b4:e4:ab:21:ff:1b:6d:ef:cd:88:bc:29:77:
4a:1c:27:9f:92:af:fa:02:71:5a:85:a6:06:c2:c8:6c:03:ce:
4f:13:3a:53:fe:6b:7a:36:81:4b:f9:b4:3a:1f:d7:e1:29:91:
8f:f9:d6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:25:26 2025 by rpki-client