Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/xXN1JERl6SmTU8LGAK6YjCsE_8g.roa
File: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (raw, json)
Hash identifier: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=
Subject key identifier: C5:73:75:24:44:65:E9:29:93:53:C2:C6:00:AE:98:8C:2B:04:FF:C8
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 01942522184AE313675E33E5BAD92B421B41
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/xXN1JERl6SmTU8LGAK6YjCsE_8g.roa
Signing time: Thu 02 Jan 2025 03:49:38 +0000
ROA not before: Thu 02 Jan 2025 03:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208866
IP address blocks: 45.82.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:18:4a:e3:13:67:5e:33:e5:ba:d9:2b:42:1b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Jan 2 03:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c57375244465e9299353c2c600ae988c2b04ffc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:64:18:9f:88:f2:58:a9:f2:e6:14:fc:ef:
df:20:c8:73:3f:b6:e2:4c:4b:8f:39:63:b6:2d:f1:
ea:ca:d6:b9:4f:36:50:3a:6b:36:b0:b7:63:55:72:
89:4a:01:cd:e0:6a:1c:35:73:7b:c1:55:cf:9e:e0:
50:a6:92:60:96:8d:0c:df:62:3f:04:06:d2:74:bb:
49:a7:2e:69:04:b4:b4:ae:18:1a:a3:51:a6:5e:39:
c1:da:7c:8b:fe:64:6c:a9:37:0b:40:7c:dc:84:65:
11:b5:98:74:af:f1:c7:32:9b:8b:9b:8d:e5:31:ef:
37:b8:61:bb:14:d1:fc:ad:a0:9c:a7:fb:e8:7d:78:
52:8c:5d:cd:b5:53:30:ff:76:90:bd:8f:6d:6a:8b:
56:c2:1f:60:bd:f0:88:fb:4b:df:bb:ae:9a:3e:e5:
e5:33:81:7f:56:0a:10:08:cc:e7:5a:1f:d8:01:4a:
86:cf:dc:a3:e1:ff:6c:b9:3b:5c:36:4e:c2:49:24:
ff:ef:14:0a:3b:44:bb:46:ff:e6:19:94:c4:9e:f9:
7c:3b:d0:be:3a:f2:6f:d2:8e:bb:7e:67:f4:4f:b5:
9d:02:36:10:32:ed:fd:8c:8c:93:42:98:8f:b2:69:
75:d2:17:96:86:d9:16:90:b9:2f:6a:dc:a1:77:fb:
4e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:73:75:24:44:65:E9:29:93:53:C2:C6:00:AE:98:8C:2B:04:FF:C8
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/xXN1JERl6SmTU8LGAK6YjCsE_8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.63.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:4d:ce:77:bb:51:b7:c4:99:89:17:9a:da:9e:3f:c2:46:58:
17:23:4b:71:55:c3:5f:ce:a5:d5:3d:c4:74:7b:12:e9:b9:ac:
d5:cb:73:8f:75:8b:43:c6:99:37:cc:48:af:46:87:6d:45:7f:
18:fb:2f:41:54:08:3b:07:f7:a7:b9:b6:81:50:63:c7:36:23:
a8:92:93:46:8a:7d:6f:1e:a4:44:6d:d7:40:3f:13:2e:ae:1b:
a1:36:35:bf:62:f1:d5:31:ae:45:ec:1a:ec:2b:9f:ea:a9:51:
76:bc:74:f9:b4:e5:62:65:0b:5a:c8:66:05:4c:05:95:98:fc:
19:1e:02:a3:ab:ab:99:a3:c1:bb:a4:18:4b:f0:d6:10:31:0d:
02:a1:83:5d:4b:3b:e2:74:d2:6a:a8:80:d3:cd:a2:c1:30:8d:
d6:13:c9:e5:e5:a9:dc:4b:3f:62:f4:d3:d2:30:24:a2:14:50:
78:22:6b:29:93:a9:c5:ff:97:cb:c3:e8:dc:f6:a0:36:ab:37:
75:9f:66:db:6d:42:f0:29:57:b3:a4:4b:fe:90:a3:19:80:76:
7a:d5:03:52:1f:9e:15:34:7b:ab:53:3a:f3:80:af:a1:22:76:
84:2f:d3:c6:f4:f7:e9:0f:5b:dc:fb:d9:04:38:d1:2a:f7:b0:
49:bf:a0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:41:57 2025 by rpki-client