Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1-8pDmMDEEfzKpgrhdzsNLY7lSWY.roa
File: 1-8pDmMDEEfzKpgrhdzsNLY7lSWY.roa (raw, json)
Hash identifier: OPxozI7mVi2nDc4IC7ZWtXvLS8c16Xv6I+p3sYV5clo=
Subject key identifier: FB:CA:43:98:C0:C4:11:FC:CA:A6:0A:E1:77:3B:0D:2D:8E:E5:49:66
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 019424B3C8C1621ABCAA1D1F4DCCC346E84E
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1-8pDmMDEEfzKpgrhdzsNLY7lSWY.roa
Signing time: Thu 02 Jan 2025 01:49:09 +0000
ROA not before: Thu 02 Jan 2025 01:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50250
IP address blocks: 45.159.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c8:c1:62:1a:bc:aa:1d:1f:4d:cc:c3:46:e8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 2 01:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbca4398c0c411fccaa60ae1773b0d2d8ee54966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:9d:36:f8:1a:03:c4:52:2b:61:39:7e:ca:
6c:2d:81:33:a2:e6:e8:d1:bf:c4:09:e6:f2:22:27:
1d:d4:dd:16:44:30:72:42:38:f3:57:61:8c:79:f3:
82:e9:65:88:ad:fe:c7:f2:b9:b3:29:5e:04:99:f6:
0b:1f:c2:55:25:d2:9b:e4:27:57:5d:f9:e0:63:be:
f3:77:a9:a6:07:74:a8:99:eb:dd:17:fc:1f:35:74:
ce:16:2b:12:28:f2:39:5c:f6:86:29:85:b3:b5:88:
07:54:76:6b:24:2f:58:8b:9e:15:37:57:d4:3a:c3:
8e:57:3f:6c:95:ea:0f:a8:17:c9:fe:c3:36:75:71:
71:56:10:1c:59:19:c2:df:fe:f8:29:59:cd:86:1f:
54:85:53:23:f2:eb:24:dc:ee:06:d1:ea:9a:cb:59:
3b:94:5b:c2:c7:cf:1f:0b:95:a9:f4:c4:2a:3d:05:
9b:22:03:05:1f:35:93:cf:4e:da:9e:6c:94:7b:49:
2b:54:ba:24:22:2b:03:76:af:32:f4:81:7f:b1:38:
4a:7a:d5:14:c8:ca:ad:02:60:7f:63:09:cc:c4:62:
4d:ab:bd:54:48:90:01:49:45:b5:4c:4e:ab:4f:f4:
18:ec:93:9c:99:dc:f7:fe:93:59:84:43:bf:29:61:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CA:43:98:C0:C4:11:FC:CA:A6:0A:E1:77:3B:0D:2D:8E:E5:49:66
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/1-8pDmMDEEfzKpgrhdzsNLY7lSWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.72.0/24
Signature Algorithm: sha256WithRSAEncryption
21:04:73:69:69:56:7b:e3:fd:0a:76:23:fb:a7:7a:99:08:8a:
63:4c:a6:6d:8b:5b:ff:f1:99:a1:cb:2c:7c:24:8e:e2:60:da:
32:c8:a1:ac:8d:08:d8:b1:ca:ba:85:d8:0e:70:d9:a5:60:be:
87:19:47:bb:17:cf:ae:67:8c:cb:b5:01:98:98:9b:7c:9a:0b:
47:da:16:0a:db:71:57:cd:d8:57:5f:3c:92:86:89:3a:ff:eb:
ef:d8:15:e0:7f:57:66:d9:f7:9c:6b:ee:79:53:d7:fc:c0:8c:
2c:f5:77:f0:6c:40:3e:42:bf:72:cf:41:a5:10:c7:14:64:28:
b4:e5:f2:45:40:0c:ba:77:05:4f:e6:32:fd:3a:4a:63:e0:ac:
df:1f:d5:3c:96:62:6c:c0:cf:0e:1d:15:ff:a0:a9:eb:7c:7a:
28:93:cd:52:80:8f:8e:cd:55:f5:ca:da:bb:81:4a:db:67:c4:
92:8e:36:e8:fd:6d:d0:1d:34:c9:e4:61:2e:a3:3a:f0:ab:70:
01:26:29:8a:8a:26:f6:db:17:1a:8b:23:de:aa:14:2b:59:6d:
ba:6f:18:ff:80:e3:c4:99:46:5a:d2:33:77:f7:c0:87:7f:91:
d3:1a:90:02:95:9c:e3:6b:92:b8:76:91:38:33:39:82:0e:fd:
24:4b:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:31:25 2025 by rpki-client