Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/U3hg_F1n66wHfUJa1B5AwM1jPe0.roa
File: U3hg_F1n66wHfUJa1B5AwM1jPe0.roa (raw, json)
Hash identifier: P69ebvhq55UOViQWYuaYwNEg2G9WcwEDt0JaOwktWKA=
Subject key identifier: 53:78:60:FC:5D:67:EB:AC:07:7D:42:5A:D4:1E:40:C0:CD:63:3D:ED
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 0194282653280595EECBF23736F83D68FFD9
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/U3hg_F1n66wHfUJa1B5AwM1jPe0.roa
Signing time: Thu 02 Jan 2025 17:53:07 +0000
ROA not before: Thu 02 Jan 2025 17:53:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 45.85.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:53:28:05:95:ee:cb:f2:37:36:f8:3d:68:ff:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: Jan 2 17:53:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=537860fc5d67ebac077d425ad41e40c0cd633ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:70:f1:ad:2e:39:48:75:7f:5c:5a:6d:d4:8e:
4b:a9:ef:6d:da:81:bf:31:92:08:35:cd:ca:5c:ee:
b7:2b:a9:dc:c5:8e:79:00:22:07:f8:b4:e5:9a:36:
fa:90:03:68:9e:66:8d:25:f6:11:4b:8e:56:c2:56:
77:27:67:42:36:a0:d8:bc:69:a1:e8:14:08:eb:f5:
66:40:9a:2e:34:e4:e2:78:a8:c2:a2:5e:dc:e6:80:
10:f6:f2:04:a5:35:71:07:90:07:06:5f:18:08:23:
a4:af:5f:76:f4:f4:56:76:a7:61:b6:16:c0:e4:c2:
39:2f:33:2e:ef:7b:cc:b5:00:a7:b7:a6:36:67:04:
19:57:7f:b8:eb:cc:aa:bb:04:b1:9f:31:21:83:63:
31:8e:24:25:66:e2:90:f1:e7:22:6d:67:89:c6:21:
68:c6:23:11:d4:35:1b:13:2b:80:e0:91:61:39:58:
4a:2d:2d:50:1d:d1:cb:41:a6:d3:00:eb:44:10:61:
6f:2c:f3:71:da:ab:06:dc:e3:0a:d1:37:52:14:07:
51:f8:fd:61:43:d8:fc:c4:40:36:97:e3:bf:01:a5:
85:48:40:52:83:e9:fa:3c:ea:b3:fe:b4:a7:f7:40:
45:9d:c3:63:e1:c3:37:1d:6b:ec:d9:86:af:82:1d:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:60:FC:5D:67:EB:AC:07:7D:42:5A:D4:1E:40:C0:CD:63:3D:ED
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/U3hg_F1n66wHfUJa1B5AwM1jPe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.99.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7a:b3:f4:da:51:51:a1:1f:ec:f1:a4:b8:1c:d9:e3:ad:88:
87:59:8d:d8:fc:53:d4:ae:cc:62:3b:4a:72:20:3e:bd:c7:83:
f1:7d:3f:be:4c:24:39:02:ea:f7:fa:76:ae:95:b9:ec:60:12:
87:c5:b0:4f:e1:ac:15:7b:c7:f8:e2:9d:7e:cc:ed:91:fa:28:
e5:c4:8d:77:3c:ad:d6:2b:11:db:eb:92:9b:f7:54:24:a4:c2:
79:c8:6f:f1:3e:a0:95:34:13:be:94:6f:5a:9f:66:78:bf:a0:
20:11:76:d2:55:a2:6c:aa:10:69:f1:06:d6:57:2c:a1:17:26:
3c:0f:77:cd:2e:1d:79:43:8d:a0:70:8f:2f:66:cb:71:11:26:
58:e7:de:0b:97:12:cd:79:2f:e6:6c:d5:e1:c6:ae:5d:ee:c9:
e3:86:9e:cc:a4:ec:cc:c4:ad:37:9b:e5:50:4d:57:3b:1f:cc:
34:a5:b4:a1:27:3d:fa:ce:94:ba:13:af:f7:bf:2b:b3:8c:08:
77:b2:ce:b3:9c:71:2c:5a:3b:ee:ab:91:c2:29:12:de:99:fb:
16:b6:6f:58:26:96:20:f2:f8:c3:86:4d:d1:07:c3:b1:9d:ac:
b8:ff:c5:7c:5e:ed:bd:c0:45:d4:f1:87:36:99:2f:28:39:54:
60:d4:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:03 2025 by rpki-client