Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa
File: 2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa (raw, json)
Hash identifier: ejnRPYJcqos1VPRlPS0gL7ngl0unaEAz9tOL/KDHo48=
Subject key identifier: DA:4E:58:6C:00:89:E1:0E:F3:94:72:5C:77:35:D7:41:D5:90:C8:BA
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 0194258FAFD8291EAF427AF6D22DDB24FB45
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206499
IP address blocks: 45.154.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:af:d8:29:1e:af:42:7a:f6:d2:2d:db:24:fb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da4e586c0089e10ef394725c7735d741d590c8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:e5:df:c9:df:9b:3d:2f:f8:98:3e:fd:a4:
cc:a0:8a:1b:28:66:e8:cc:8d:d2:74:af:8a:32:b0:
c8:d5:f0:f5:bc:b0:01:5c:96:9f:54:dc:98:b3:ba:
90:d3:97:fc:f8:58:1a:b8:94:ec:8d:f3:e3:18:06:
cf:5c:9c:9d:cd:43:e3:b9:6a:7f:0a:e8:cd:5b:68:
79:6a:97:cc:3f:f5:45:da:9c:39:e6:15:37:2d:c4:
37:5b:75:73:2a:e8:a4:cb:a9:64:b2:4e:77:02:aa:
a1:b2:be:5c:dd:db:83:15:e1:07:e2:f0:21:b2:c6:
df:5c:55:f7:1a:c9:7c:a6:15:e0:b0:c3:6a:b7:d5:
97:ec:ab:6e:9b:b4:26:84:bc:d6:b3:97:e8:93:4c:
22:c1:7c:ef:34:f3:d4:11:47:39:42:ca:ea:2a:6c:
42:70:c8:8e:8b:4a:8f:cb:44:f1:b5:06:9c:da:f1:
05:db:16:3e:90:d0:72:c4:a5:e5:b4:a5:89:c5:6f:
4c:20:ce:40:4d:11:f1:38:13:56:47:eb:80:dc:ff:
2b:63:a0:20:e8:41:94:03:78:51:44:68:6e:48:c4:
9b:61:06:b6:54:54:c3:46:4f:68:56:ad:22:ea:cd:
f0:2a:20:48:2e:a3:d2:a1:24:cc:95:d0:a2:12:c7:
97:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4E:58:6C:00:89:E1:0E:F3:94:72:5C:77:35:D7:41:D5:90:C8:BA
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2k5YbACJ4Q7zlHJcdzXXQdWQyLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:58:3e:9d:cc:5b:17:36:9a:38:70:84:02:58:ab:92:c6:7b:
42:d7:ae:94:97:c1:f2:ab:43:f5:5f:ca:df:b7:0b:26:fc:d2:
ea:10:53:21:80:9c:68:ec:01:65:ad:aa:4c:31:b8:e3:74:48:
dd:69:78:79:47:73:39:70:eb:db:3e:3b:01:fa:60:60:36:d3:
14:c2:a2:0b:37:46:44:b5:13:68:36:61:6a:37:ea:6e:76:7e:
21:dd:29:d5:2e:9f:1f:ef:c7:aa:42:ca:5a:c0:7a:b9:c8:1a:
cd:a6:45:5b:a7:41:2f:66:b9:2a:85:2d:42:92:4c:0f:f6:28:
17:95:93:29:5f:c9:16:e7:03:50:ca:9a:50:64:8c:24:c8:97:
8b:3f:17:d1:45:72:de:82:14:2f:a0:4c:49:c1:97:08:96:c9:
93:a7:51:b1:5c:a9:d9:ab:d3:dd:ef:f3:35:13:86:e4:68:ae:
76:ec:6f:b6:5e:37:a2:c2:5f:99:0a:0e:c2:08:3d:45:dc:a0:
4c:b0:a7:df:32:f9:7e:64:c8:5b:7c:28:ea:ce:de:e0:85:27:
4e:ea:51:09:4d:7e:96:90:b9:6d:80:f0:1d:16:2b:dd:72:57:
00:25:e1:fd:8f:d4:33:04:2c:1d:fd:b2:fc:4f:ff:09:bd:16:
68:6f:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:29:25 2025 by rpki-client