Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rxVm1BUHBkaau-7W_r_kxy-XrHo.roa
File: rxVm1BUHBkaau-7W_r_kxy-XrHo.roa (raw, json)
Hash identifier: rLOdOXbVl3h3am2CiNQtp6HBEUOsXCq9yn33g8ZOc4Y=
Subject key identifier: AF:15:66:D4:15:07:06:46:9A:BB:EE:D6:FE:BF:E4:C7:2F:97:AC:7A
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019424B398BA969A26065776F5BD0366D095
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rxVm1BUHBkaau-7W_r_kxy-XrHo.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.135.238.0/24 maxlen: 24
185.235.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:98:ba:96:9a:26:06:57:76:f5:bd:03:66:d0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af1566d4150706469abbeed6febfe4c72f97ac7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:4f:0e:b7:bd:9b:46:1b:8f:8b:10:5f:62:
2d:80:c0:1c:08:cc:a9:ff:a9:0f:f2:a2:38:e1:2e:
f4:50:46:69:73:7e:c9:9f:18:1e:df:7e:bc:5e:48:
7a:64:d5:43:23:71:49:08:b1:c0:af:d6:f3:73:b4:
ff:5b:13:ba:ef:a5:2e:a4:5a:46:73:98:0a:d7:08:
4b:40:a1:3b:06:aa:ea:8f:0b:df:c6:43:2f:d3:06:
a1:37:71:c3:36:5f:21:ee:b7:08:da:26:5b:a8:99:
48:39:9b:33:28:50:1f:1a:a1:0c:7a:cc:eb:7f:b3:
df:59:ff:59:59:70:95:41:f9:b5:12:39:21:aa:51:
dc:d8:c6:33:ff:65:fe:3c:9f:6e:8f:e9:5f:ed:27:
0a:f7:35:d3:b9:b5:fb:61:aa:5a:68:41:23:b2:5d:
86:67:ed:82:01:b4:f7:b4:92:2d:9c:8b:8b:1d:7c:
da:94:75:f4:35:ad:bf:15:20:ef:47:18:b3:48:0a:
4b:5f:3d:09:00:0c:02:f3:bf:61:d8:50:d2:fb:9a:
59:be:10:6b:61:5d:ed:99:ca:8f:75:c2:5b:38:3b:
08:bd:08:97:ff:dd:31:34:77:00:5d:b7:eb:fb:e0:
74:93:c0:1d:38:f3:a0:a2:e3:c6:f5:92:6a:f1:b8:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:15:66:D4:15:07:06:46:9A:BB:EE:D6:FE:BF:E4:C7:2F:97:AC:7A
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rxVm1BUHBkaau-7W_r_kxy-XrHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.238.0/24
185.235.164.0/24
Signature Algorithm: sha256WithRSAEncryption
59:5e:22:b2:b3:e8:9b:ef:09:ca:ac:bd:cd:72:a1:b2:7b:3b:
02:cf:45:c9:71:60:13:be:a2:53:2b:f1:85:d1:ee:46:52:9f:
42:7c:f7:30:37:07:a1:17:89:d8:b0:58:80:90:8c:19:7b:03:
d5:48:cf:31:8d:30:94:5b:e7:c0:4a:33:56:76:b6:00:14:9a:
c0:1f:76:d8:2c:20:a9:78:13:8b:d3:11:1c:2b:b3:c7:d2:61:
87:e0:f5:56:07:3c:ea:02:fe:f2:e9:23:19:36:83:1c:92:b3:
65:f5:82:f6:78:c9:0c:cc:5a:f5:6b:a4:21:07:38:7e:85:2e:
26:f8:db:92:8b:a6:13:da:a9:e6:05:3a:de:90:0d:bd:43:87:
47:6d:12:e8:be:b7:19:af:1a:9d:92:fc:be:79:23:a6:bc:70:
17:f0:d2:36:a5:28:e9:4b:11:0d:59:3d:98:50:58:35:a1:6b:
34:2d:a1:e1:c9:e4:d4:b7:f9:15:64:0d:bf:f5:96:ed:01:8a:
c2:72:dd:dc:5e:7f:32:2e:5b:57:53:f9:5c:4f:b9:bc:84:fa:
d0:16:eb:54:05:80:8e:03:1f:e7:9f:65:15:53:4f:44:50:a6:
2a:87:15:bd:9b:d6:14:fb:9d:af:e3:53:6d:09:ec:4b:bb:38:
25:d1:52:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:34 2025 by rpki-client