Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/nm54pJcyiJhZ08OvPWqztIIqqiA.roa
File: nm54pJcyiJhZ08OvPWqztIIqqiA.roa (raw, json)
Hash identifier: GAhcZnW3/tBUgNpC5G3IIveLYfefXBdeTMVxe6lXXlU=
Subject key identifier: 9E:6E:78:A4:97:32:88:98:59:D3:C3:AF:3D:6A:B3:B4:82:2A:AA:20
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B3A76C7AB116722905B64CD2721C9B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/nm54pJcyiJhZ08OvPWqztIIqqiA.roa
Signing time: Thu 02 Jan 2025 01:49:01 +0000
ROA not before: Thu 02 Jan 2025 01:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213221
IP address blocks: 45.158.252.0/24 maxlen: 24
45.158.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a7:6c:7a:b1:16:72:29:05:b6:4c:d2:72:1c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e6e78a49732889859d3c3af3d6ab3b4822aaa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:56:d0:cb:f5:2b:33:ee:71:a7:22:8e:c7:
63:f3:cc:c1:88:59:2c:1a:e4:36:be:98:40:04:d0:
24:5e:b2:b3:b4:5e:1c:59:01:ab:78:1c:40:b8:8f:
f9:cf:7f:8d:2c:30:92:7b:b6:ed:a2:1f:8f:0a:60:
a2:21:26:53:fd:f7:64:bc:72:03:6c:1b:ea:41:c2:
10:f4:d9:78:68:af:ed:20:33:bd:94:d5:3e:2c:ca:
4c:11:c2:c2:99:11:b1:3f:f4:4f:8d:11:ab:c5:5b:
6a:55:26:9a:06:b8:b9:91:35:92:25:d3:55:24:77:
4c:8f:a1:34:55:b7:3d:05:45:c6:a7:a9:d2:76:30:
b2:06:ad:58:f9:14:1e:94:f4:6a:51:97:da:26:a5:
29:c4:06:e0:8a:5e:2f:f4:7b:77:8f:7e:55:11:b2:
7f:21:7d:d5:66:6d:de:b1:81:b5:93:c3:7c:95:fd:
4a:c6:c8:a5:87:03:31:55:1f:6b:80:59:e6:2f:d6:
e7:7b:d7:6f:d0:a7:01:b5:4f:fb:f3:b9:37:56:82:
38:1b:bf:9e:55:9b:0b:3e:ce:e6:b8:98:e2:eb:fe:
8a:3f:d4:1f:6e:7b:fd:9c:b5:aa:d8:b6:e4:63:7a:
f2:84:a0:9b:c7:5e:e9:d0:8d:d9:30:f9:c5:84:03:
c0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6E:78:A4:97:32:88:98:59:D3:C3:AF:3D:6A:B3:B4:82:2A:AA:20
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/nm54pJcyiJhZ08OvPWqztIIqqiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.252.0/24
45.158.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:4e:ab:7b:df:4a:bd:5e:6d:6a:32:53:96:72:49:c6:c2:cb:
9e:89:24:83:fb:cc:8f:c7:d7:eb:e5:55:ad:a5:84:c5:b1:48:
d9:1b:bd:93:b4:31:34:b6:d0:45:dd:cb:87:ff:aa:c8:3c:55:
05:c4:3b:76:83:d9:9e:e0:c9:90:d2:99:39:9b:cb:fa:f8:d7:
86:9a:e2:b9:76:13:f8:0e:6a:fd:fd:83:3e:83:3c:98:d2:db:
a8:86:5f:ae:69:11:5d:4d:0d:b9:96:77:93:d9:2d:ad:36:00:
c6:eb:a0:bf:87:c8:46:52:31:2a:d7:72:48:88:7a:82:2d:78:
e5:1f:2b:91:64:19:bf:a9:24:6e:8d:9c:f5:4c:1e:29:6a:01:
02:72:6a:e9:67:2c:73:e1:2f:5c:c8:26:8b:bc:f7:f8:51:67:
17:5b:f8:96:f6:7f:08:b0:31:4c:7b:06:08:4a:48:6d:43:66:
0a:a3:2d:02:df:8b:7f:e2:b3:9a:f2:bc:ea:25:14:e9:ba:bf:
13:bf:ee:c2:6e:c1:dc:26:d9:7e:35:54:b3:4d:7e:dc:b8:4a:
7b:0f:d6:ba:e1:97:47:65:89:6f:dc:1e:8a:05:4b:22:3f:6a:
e9:54:17:a8:a0:34:21:b9:2c:7c:cf:db:04:6f:2e:95:f2:98:
a1:62:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:59:54 2025 by rpki-client