Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/zMv4vXM8dPStyIaP6YAH3FrSdFM.roa
File: zMv4vXM8dPStyIaP6YAH3FrSdFM.roa (raw, json)
Hash identifier: VWJ6HSGgCLyVghdMpKY1d9rx6m4eAxvybOUx+qVtZ3A=
Subject key identifier: CC:CB:F8:BD:73:3C:74:F4:AD:C8:86:8F:E9:80:07:DC:5A:D2:74:53
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 0194258F68F588C05CED25ABDCF8A28C3648
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/zMv4vXM8dPStyIaP6YAH3FrSdFM.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48629
IP address blocks: 45.159.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:68:f5:88:c0:5c:ed:25:ab:dc:f8:a2:8c:36:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cccbf8bd733c74f4adc8868fe98007dc5ad27453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:77:8f:98:03:c9:b2:73:b5:7b:c8:36:e9:
86:61:8b:32:04:9d:62:91:49:34:0c:69:73:ab:8c:
62:8f:ca:86:c2:44:18:ae:51:f3:7a:8c:92:26:66:
76:8a:f8:29:83:c9:15:91:84:24:5c:2e:e9:aa:3b:
be:df:ac:60:77:7e:bb:be:3a:01:6f:70:63:8b:65:
41:31:6e:d4:24:ff:0b:d8:d3:68:6c:f6:01:d1:14:
99:11:23:7f:32:79:7e:09:a4:a9:0c:64:cd:b3:34:
6c:19:db:8f:2d:ed:86:e5:03:15:51:58:8e:60:b3:
02:7f:97:02:71:b8:15:eb:3d:12:f6:75:ad:41:28:
11:1f:24:23:db:69:4e:03:3e:a7:83:54:ff:5d:8a:
04:3d:c9:11:67:8c:d2:f1:63:01:52:e1:c5:a8:2a:
95:91:75:48:6a:ae:a4:5f:77:c5:f5:81:bc:99:87:
8f:74:1a:e8:f7:f1:08:35:06:fc:9e:64:45:fd:da:
2f:c6:61:2a:b4:cd:0d:0b:7f:9a:16:10:3f:43:97:
4d:0b:28:9b:53:7d:1b:11:34:3b:f7:35:7a:60:7f:
6e:52:9e:30:99:77:b0:a5:a0:2c:41:bc:d9:c4:1d:
d8:7a:c9:30:14:40:cf:c9:25:9e:26:c5:9c:fb:1e:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CB:F8:BD:73:3C:74:F4:AD:C8:86:8F:E9:80:07:DC:5A:D2:74:53
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/zMv4vXM8dPStyIaP6YAH3FrSdFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:44:d6:43:f1:4d:45:6e:35:5f:13:f8:bb:a1:a3:d2:e2:73:
fe:48:f3:32:cc:af:11:2a:b7:6a:1b:d4:dd:f1:de:0c:4c:6c:
43:f7:8c:e3:eb:10:78:f1:39:2a:ea:85:4c:7f:24:97:f4:ba:
10:1b:85:d0:be:76:3e:89:38:4c:19:df:69:8b:e3:90:19:dd:
80:6e:15:f0:14:6e:4e:50:bd:8b:74:be:4c:75:35:8c:59:29:
16:25:0b:f2:61:49:55:34:5f:33:1d:74:1b:67:1e:ec:0d:36:
c4:f8:5c:df:31:89:39:c2:52:e2:c6:12:9a:44:d6:5d:58:a1:
18:2d:9a:06:a3:6b:97:1e:8e:e9:59:e4:c4:c7:01:ff:6d:6a:
af:93:06:5a:df:f1:1d:05:c9:82:26:43:f0:69:b3:a2:f3:07:
be:1a:a7:ad:74:56:12:d6:2b:ee:64:23:9e:68:8d:f0:d1:03:
44:d7:da:88:02:78:13:a1:8e:b0:6b:df:34:20:66:9b:09:50:
d1:8a:f2:e2:c6:81:be:a1:3d:11:2d:8a:0c:39:05:dc:bb:b5:
36:20:dd:cb:e0:a3:9f:54:68:94:93:0c:28:0d:c8:9e:9e:50:
ec:7c:f7:f2:a1:f2:8a:4b:b3:c5:3a:f0:8b:1a:51:c3:da:62:
17:31:0d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:52:48 2025 by rpki-client