Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa
File: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (raw, json)
Hash identifier: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=
Subject key identifier: 94:A0:EE:C5:FA:6F:EA:0F:59:0E:15:5A:6B:7F:15:29:A6:19:28:A8
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 01942522189ACF61B8DF216C4AE7B9883CA3
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa
Signing time: Thu 02 Jan 2025 03:49:39 +0000
ROA not before: Thu 02 Jan 2025 03:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209733
IP address blocks: 45.82.61.0/24 maxlen: 24
45.82.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:18:9a:cf:61:b8:df:21:6c:4a:e7:b9:88:3c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Jan 2 03:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94a0eec5fa6fea0f590e155a6b7f1529a61928a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:53:1a:a8:03:64:f4:d3:af:47:8a:06:e4:
a2:1f:65:34:3d:7e:0f:0c:3e:5e:e0:02:74:c5:d3:
54:28:1f:1d:8d:18:d8:d9:76:74:2a:17:3d:a4:c6:
b1:eb:fd:df:b2:fc:14:2e:73:1e:fe:94:7f:d8:62:
07:9d:0a:9e:20:af:08:8f:33:a4:39:ed:be:fd:4b:
28:16:1d:c9:c8:f1:ae:b1:c8:2d:2b:24:b8:94:39:
67:c0:d3:2c:73:5d:8b:e2:b8:e4:c0:5b:32:89:6a:
2a:e0:04:7b:a6:52:4d:65:e4:1e:5e:da:ee:49:42:
96:13:cc:b2:21:92:45:1d:20:46:b4:67:55:ae:5b:
c6:6f:a4:2f:d5:1b:f4:f1:eb:3e:96:38:25:8a:a0:
e0:dd:38:a2:fd:ba:15:f9:6e:5a:b2:22:ab:4e:c3:
11:17:6d:2a:ce:28:ae:6e:ae:ec:44:2a:99:d5:1d:
e3:53:ba:ad:18:e7:ae:fa:3b:b9:63:83:bd:15:dc:
2a:ae:a6:20:70:8a:e3:03:e3:74:f5:06:8b:32:6d:
d3:1f:64:b9:4a:ce:ff:46:63:13:1b:cd:a9:aa:d5:
93:f1:0d:c4:c6:b9:22:d2:ed:85:89:c0:f9:7a:58:
78:f2:7a:4f:5b:02:77:19:86:09:7c:4d:68:ee:3b:
22:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A0:EE:C5:FA:6F:EA:0F:59:0E:15:5A:6B:7F:15:29:A6:19:28:A8
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.61.0-45.82.62.255
Signature Algorithm: sha256WithRSAEncryption
66:b0:85:7a:d7:2f:34:ef:07:ac:d1:28:70:29:39:fc:2b:f5:
45:ee:c0:09:c0:21:98:da:49:0a:ab:b7:9b:f2:da:98:cd:0e:
08:68:e4:e0:d5:f9:dd:bd:ec:d9:73:6f:59:60:fb:5a:52:ee:
d2:d9:91:18:c8:f8:c4:aa:d1:60:bf:80:29:4e:1e:db:ae:ee:
31:89:84:b3:18:f2:c7:1b:b2:8b:19:0e:0e:41:f6:30:d1:27:
e4:a4:f8:5c:2f:49:85:86:67:18:aa:5d:7b:75:de:5b:8a:a5:
4e:86:81:d6:de:96:03:17:c7:09:ab:66:1d:f3:ef:67:c1:49:
3c:4b:a2:de:9f:91:0b:69:6a:40:89:69:09:55:36:72:a3:10:
9a:0c:2f:22:cd:12:d3:d0:72:54:ee:a3:ee:a8:d8:0b:ea:30:
a7:f9:32:19:33:7b:ba:54:d0:0a:ea:b9:0e:de:5c:8e:ca:07:
7d:fd:12:c8:c3:0a:8c:a8:83:0e:43:75:5c:46:d5:ff:46:4b:
e8:a7:2a:c1:f6:5f:34:a4:97:e7:bd:da:6d:21:a3:fc:78:39:
19:f7:f0:91:cf:5b:2e:b3:2e:c4:8d:c7:5c:9a:52:a0:7a:3a:
6b:e8:d5:d5:42:52:38:77:4d:87:8f:9d:a2:be:00:f5:fb:b5:
cd:45:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:47:02 2025 by rpki-client