Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa
File: XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa (raw, json)
Hash identifier: +R0Sy7oAn0ABCK0E7oKA/ofkAMnGgDdtdmPnmJOjdTs=
Subject key identifier: 5D:93:B3:58:D4:BD:B9:22:57:C5:DA:1F:12:06:EA:43:EE:0B:5F:C4
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 019425213D3ED7269B8B00AE781AF491C9EF
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa
Signing time: Thu 02 Jan 2025 03:48:42 +0000
ROA not before: Thu 02 Jan 2025 03:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 45.148.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:3d:3e:d7:26:9b:8b:00:ae:78:1a:f4:91:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jan 2 03:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d93b358d4bdb92257c5da1f1206ea43ee0b5fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:85:5e:07:11:b4:a4:c0:7f:c9:8e:28:2b:
e7:ad:64:8c:d1:06:b1:36:fd:2e:b3:45:4e:a2:a0:
5b:0c:07:86:8e:70:24:31:96:1f:8a:74:f3:35:e0:
1a:09:11:f5:8b:6a:9d:b2:c5:e4:e8:3f:63:6a:30:
bc:39:94:e5:2a:ea:8e:39:db:9b:81:06:6c:a4:7f:
2c:d0:86:91:6d:24:5b:c7:f1:00:44:02:41:80:be:
3e:92:e8:75:9a:7c:eb:fe:cf:1a:f5:17:10:af:a0:
07:e9:1f:8c:70:11:28:dd:f8:03:b4:dd:f6:a0:1b:
c9:cc:9d:2c:fa:26:e6:6a:f7:f5:64:c6:a0:77:25:
19:7c:1e:f9:66:09:70:7d:65:29:4a:18:81:ed:87:
83:e9:e7:7a:fb:42:8e:01:75:a5:e1:5c:f1:25:83:
36:99:fc:1e:1b:5e:b8:28:f8:9e:72:6f:84:52:66:
10:9d:39:f1:ce:fe:af:c6:4e:1e:26:17:68:25:68:
af:1d:c8:6d:b1:5d:c2:a9:ce:90:d1:5d:7d:a4:c6:
2d:4b:20:e7:9c:7b:52:67:c7:5a:04:3f:c1:53:f8:
5f:57:6a:14:ac:e7:66:d9:2e:bb:b8:68:10:ce:11:
4d:a2:34:9f:71:ea:f6:86:78:1b:c9:a0:34:b8:82:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:93:B3:58:D4:BD:B9:22:57:C5:DA:1F:12:06:EA:43:EE:0B:5F:C4
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:1c:f0:aa:6b:aa:fc:13:95:eb:7e:40:a8:a9:7a:49:d1:85:
0b:67:3f:fa:33:c3:c9:c4:56:d3:20:d8:2e:f7:a8:5f:f4:f0:
40:b7:5a:68:95:bd:05:a1:6b:94:63:80:9f:8d:06:a4:2e:a1:
e0:71:35:3b:d8:2f:89:49:2c:d9:0b:35:b6:77:ef:b6:ac:0c:
90:29:1b:36:40:5f:2b:ee:6d:5e:73:6c:3b:75:48:09:48:3c:
09:9a:09:ec:62:2c:35:7c:2f:21:49:69:e8:93:ae:8d:5a:f7:
ab:27:aa:7e:86:4b:11:d5:a2:d2:36:64:45:8b:b0:7f:62:16:
b7:5c:48:fe:14:16:b7:dd:fe:0f:55:20:99:99:ce:2f:32:9c:
77:6d:c4:9c:52:f1:8a:7b:29:4f:44:d6:30:a2:17:a9:2b:9e:
7f:d3:92:fa:7f:6c:ae:74:88:47:7a:a9:c7:ad:f4:59:a0:08:
ea:f6:5b:a0:f3:c7:3e:1f:41:2e:95:a2:33:0a:51:4a:20:41:
5a:e4:7f:da:30:02:da:1e:d4:7d:0c:6d:27:2e:57:03:1a:ed:
b5:11:2d:27:b4:5d:ae:0a:81:c4:70:5b:ba:f6:71:39:0b:ea:
ef:1a:96:ef:4a:5b:28:23:96:00:78:3c:7a:2b:ae:e4:34:d1:
95:47:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:57:05 2025 by rpki-client