Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Ry99V7wdnB63QA0YiggryZhHU-U.roa
File: Ry99V7wdnB63QA0YiggryZhHU-U.roa (raw, json)
Hash identifier: mMBh91Bzq2gPCtQkwNpkOUuuvLHWXUK22LlIXX1xS/g=
Subject key identifier: 47:2F:7D:57:BC:1D:9C:1E:B7:40:0D:18:8A:08:2B:C9:98:47:53:E5
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 0194274745C8CF2A6D3F664AB77CD622DE8F
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Ry99V7wdnB63QA0YiggryZhHU-U.roa
Signing time: Thu 02 Jan 2025 13:49:29 +0000
ROA not before: Thu 02 Jan 2025 13:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 45.84.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:45:c8:cf:2a:6d:3f:66:4a:b7:7c:d6:22:de:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 13:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=472f7d57bc1d9c1eb7400d188a082bc9984753e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:f1:43:46:c4:01:24:83:33:e1:bf:2b:96:
b1:9b:e8:9f:9a:a0:c1:e3:c7:58:ae:89:c5:3b:a7:
f8:c4:27:d5:cd:b8:19:41:3b:13:15:40:c9:15:71:
f6:37:cd:e4:14:99:f6:2d:7d:2e:cb:4d:8c:d5:31:
c4:88:25:7e:f1:86:3d:16:9c:37:6e:6b:9c:ba:ad:
cc:13:3b:2d:11:29:a8:3b:7a:7c:2f:c1:f3:9f:e6:
27:9b:91:b4:38:cd:36:81:52:65:ab:e4:ea:dc:fb:
f1:16:5b:98:cb:d8:22:90:72:a2:cd:bb:56:89:21:
01:e7:a5:8a:69:0d:33:99:e6:53:e5:d4:a4:b4:bc:
03:e5:96:dd:3c:b9:bc:29:f7:29:45:cb:66:54:f0:
24:1f:14:69:44:18:ca:07:7f:9a:39:1e:97:41:1a:
94:4e:4d:33:ba:69:98:84:36:20:12:80:01:aa:25:
27:72:c5:5b:4e:76:c7:e2:c0:77:c5:ff:2a:8a:f8:
09:0f:fe:4b:06:b8:60:c1:b4:0b:2e:47:0f:8f:ca:
a5:89:83:78:87:1f:03:16:a5:ac:7e:f7:7e:c0:c2:
15:2c:ef:a3:95:26:b6:7b:c2:29:b9:d1:4e:16:1b:
d0:d8:d3:8c:c2:32:4a:b5:0a:ff:db:6c:d7:07:d6:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2F:7D:57:BC:1D:9C:1E:B7:40:0D:18:8A:08:2B:C9:98:47:53:E5
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Ry99V7wdnB63QA0YiggryZhHU-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d7:cc:37:57:88:a4:89:73:ad:f9:5a:41:bf:d9:f0:1f:17:
f3:3f:18:84:e0:ac:55:bc:a3:8c:68:20:a4:3d:b2:e8:75:e9:
d5:8a:30:5b:10:7f:cf:42:ed:8b:d2:94:f4:7e:b2:84:56:d1:
f3:c4:03:89:68:03:83:f2:97:e8:77:69:9b:fc:2f:de:04:87:
26:be:26:5d:98:63:1f:c8:2f:84:1e:64:e0:19:6f:2c:15:8d:
2d:1c:b5:d7:19:e6:06:2d:3a:b3:cb:dd:f4:30:21:f8:2b:58:
16:69:dc:4c:1f:96:80:1c:9a:78:02:a8:81:94:99:25:00:45:
b5:6f:2e:bb:d7:85:83:ef:bd:92:d6:a1:94:6b:da:4b:69:a4:
32:e0:b3:b2:08:19:3a:2c:f9:13:fd:9b:0a:5d:5e:e3:ec:de:
3e:f5:57:bb:40:b4:cd:78:df:ed:e3:b8:7c:1b:c7:28:4d:c9:
05:36:c5:9a:92:6e:7f:86:d9:3a:70:74:59:77:d3:d8:1e:fb:
1b:3e:d6:61:0a:98:29:f4:68:ca:e8:a5:63:99:eb:d5:48:9d:
df:2a:97:e0:e2:a7:5e:8e:1d:d7:07:52:41:9d:8d:16:87:93:
10:a4:96:90:89:4d:18:b6:b6:3d:82:23:0c:f1:88:0a:14:6c:
ea:6d:02:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:21 2025 by rpki-client