Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/thETdmyhsrSxA59VxLlSHQ0J73Q.roa
File: thETdmyhsrSxA59VxLlSHQ0J73Q.roa (raw, json)
Hash identifier: KY6/Rka8NKx7O/9lJJyGOxFVIRAxMy7b72Qvukxyq9Y=
Subject key identifier: B6:11:13:76:6C:A1:B2:B4:B1:03:9F:55:C4:B9:52:1D:0D:09:EF:74
Certificate issuer: /CN=e075339dac16535d457ae8862b535bce51e1220f
Certificate serial: 019421447012129B2EE51544135D12CB770F
Authority key identifier: E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/thETdmyhsrSxA59VxLlSHQ0J73Q.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208792
IP address blocks: 45.85.28.0/24 maxlen: 24
45.85.29.0/24 maxlen: 24
45.85.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:70:12:12:9b:2e:e5:15:44:13:5d:12:cb:77:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e075339dac16535d457ae8862b535bce51e1220f
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b61113766ca1b2b4b1039f55c4b9521d0d09ef74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7d:f9:78:cd:8b:0f:be:e8:c2:7e:53:c5:5b:
a9:8c:fb:f2:16:4e:47:9f:be:a7:57:0c:33:6a:7d:
03:3f:58:65:4e:68:d6:8b:f4:d9:fc:1e:e4:86:75:
1c:5f:8a:9b:78:94:a8:b3:ea:f0:0a:9e:34:d3:35:
56:11:28:0a:21:df:74:b3:58:0e:5a:fb:c6:e1:78:
b3:53:c7:4a:aa:26:22:63:d9:15:ba:52:4c:54:8a:
12:69:d4:88:da:10:52:91:1c:d4:44:50:29:c9:a2:
69:bf:de:de:7b:c3:a1:49:e9:0f:97:b5:17:36:3d:
04:04:0f:ee:17:a8:a7:0a:03:41:f9:7d:59:d5:aa:
50:8e:83:46:db:ac:46:05:20:b2:71:47:c3:9e:c1:
22:79:36:f4:b8:0a:c5:85:af:9f:76:9a:c8:6a:4c:
55:90:a6:ee:db:37:ab:e3:87:0d:7d:d9:2d:ef:08:
25:bc:02:fc:1b:23:0f:75:b8:6d:63:c9:57:ea:9b:
29:a3:bf:80:64:bb:6d:ba:41:51:91:7c:91:ed:b5:
e3:5d:c5:7d:9a:13:06:7a:77:d8:70:03:40:b3:b4:
1b:2f:94:d6:39:3b:38:0c:e1:9b:d5:cc:18:c3:10:
5e:37:87:b9:cc:80:6a:25:a1:73:39:72:02:c2:7d:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:11:13:76:6C:A1:B2:B4:B1:03:9F:55:C4:B9:52:1D:0D:09:EF:74
X509v3 Authority Key Identifier:
keyid:E0:75:33:9D:AC:16:53:5D:45:7A:E8:86:2B:53:5B:CE:51:E1:22:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HUznawWU11FeuiGK1NbzlHhIg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/thETdmyhsrSxA59VxLlSHQ0J73Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/33d639-49c2-4301-b6c3-bb6c6c457817/1/4HUznawWU11FeuiGK1NbzlHhIg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.28.0/23
45.85.31.0/24
Signature Algorithm: sha256WithRSAEncryption
54:4c:bc:ae:b2:8a:b3:30:5b:0a:ea:53:0d:f3:6d:c0:f7:d7:
f1:bf:66:44:62:1d:df:ee:0a:f9:08:15:9a:f8:58:e7:27:5a:
bc:3a:29:1c:1f:40:24:09:27:30:0a:35:7e:5c:a7:76:1d:22:
b9:26:17:c1:2c:03:f3:9d:28:f6:e2:dd:69:61:a1:a6:6f:e5:
8e:3d:45:60:6f:c8:48:ae:41:99:8c:b4:b6:79:e1:fa:e5:d2:
4c:c1:1c:5e:a4:e6:5b:2a:95:23:d7:d5:66:1d:34:dc:d5:f5:
88:e5:2d:43:f8:fd:1e:ca:b3:39:41:94:cc:66:46:e5:8c:6d:
1f:05:e6:78:18:e5:7b:b9:12:70:68:77:b8:7c:18:76:88:37:
d9:ed:c6:a0:20:2f:4f:9a:78:f1:ed:5d:42:84:e1:1e:63:44:
67:e0:d1:e7:1b:88:4e:a4:69:f5:a9:76:c8:f4:1b:de:6f:5e:
89:2c:5d:94:a5:93:1c:21:a4:94:7a:bf:4d:a3:6d:13:56:07:
78:77:a8:c0:b4:d2:2c:b9:91:07:d4:b4:74:de:46:7f:d9:8b:
dd:45:74:b5:0d:e8:2a:65:b9:c6:8e:dc:66:b6:00:fb:0a:a5:
45:31:96:45:ff:b1:9f:bd:db:85:fb:46:1f:ad:84:7f:b8:ea:
5f:3f:16:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:28:37 2025 by rpki-client