Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/eM5alpFd9FlCD3E8JB4HBxFpQAM.roa
File: eM5alpFd9FlCD3E8JB4HBxFpQAM.roa (raw, json)
Hash identifier: tGtdx4JuLesxtVc1CFVpEvoeAxYCq06KeJuOY4gZL6U=
Subject key identifier: 78:CE:5A:96:91:5D:F4:59:42:0F:71:3C:24:1E:07:07:11:69:40:03
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 0194258F731DE9FF4B501A5F74EEE76FFC30
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/eM5alpFd9FlCD3E8JB4HBxFpQAM.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210447
IP address blocks: 45.144.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:73:1d:e9:ff:4b:50:1a:5f:74:ee:e7:6f:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78ce5a96915df459420f713c241e070711694003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:04:e9:41:e0:1b:5c:09:a0:e1:bf:3f:27:
f3:a4:0f:c6:cc:89:7e:e8:2c:5c:a0:aa:4b:57:90:
79:34:e7:33:fb:67:8b:83:72:38:85:91:ba:32:02:
cc:a9:80:dc:a6:8b:75:c4:ec:f6:ea:0a:f1:c1:94:
fe:a7:11:9b:66:09:f8:fd:7d:db:7d:08:22:26:e3:
df:a7:bd:cd:a0:96:3b:2e:ec:b5:a7:d6:fc:ea:37:
7e:90:c1:2c:a2:c4:cc:ef:9c:df:19:31:f0:5f:61:
47:51:48:32:13:ca:15:96:d1:55:12:ca:f2:83:b0:
c4:21:0a:a1:c8:b9:a8:8d:c0:33:66:85:02:a3:93:
25:2c:40:ef:96:01:ae:7a:8e:d2:9f:d6:e3:78:86:
44:07:92:fe:8a:6a:40:1a:c9:1d:06:e9:a6:c6:56:
02:97:44:82:62:7c:2f:96:2f:bd:c0:52:96:df:51:
85:19:04:72:72:8d:3f:61:a4:ed:d6:a4:64:74:55:
34:f6:28:e3:83:20:a0:e4:cc:33:2d:78:91:d8:27:
63:e1:88:40:a4:82:c0:e8:fc:cd:2c:00:cc:c1:87:
88:fb:3b:48:79:91:16:86:d3:08:bb:c9:3f:e4:01:
d9:17:d1:e6:20:b8:1d:14:a4:ea:2b:06:55:81:5c:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CE:5A:96:91:5D:F4:59:42:0F:71:3C:24:1E:07:07:11:69:40:03
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/eM5alpFd9FlCD3E8JB4HBxFpQAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
e7:13:37:98:2d:2b:7c:8c:4b:cc:2f:d6:76:35:0d:14:af:98:
9a:ac:c7:03:dc:91:2f:d3:c9:d7:8c:a8:33:90:44:b4:c3:70:
c5:ec:5e:62:04:c4:cb:0c:c2:ad:b0:78:f2:50:dd:d0:d3:1d:
81:63:71:1c:ec:9b:b9:dd:d2:97:76:f6:60:d8:68:10:fb:e6:
26:70:a8:5a:24:17:17:79:da:ad:1e:ad:32:2b:5e:8a:58:cf:
25:e3:ba:31:69:65:ec:a4:67:07:46:d4:eb:f2:91:50:db:08:
b5:ac:ca:a2:56:b3:9f:12:4e:c2:51:e1:a2:62:c3:6e:eb:20:
78:b2:b3:1a:a8:c5:ea:f9:34:4f:a0:1e:55:78:91:a8:cb:88:
48:ad:dd:c8:00:c8:d1:1c:79:d8:d8:02:59:d9:19:6c:01:7c:
3f:77:da:0c:8e:79:66:fc:7a:57:61:fa:0d:81:40:dd:31:2c:
fb:5a:c3:77:66:b8:02:97:cc:3e:1e:66:46:39:38:2e:59:56:
ce:6c:85:6c:d1:9e:80:18:5f:1e:f0:53:97:9a:c6:6a:55:6a:
cf:20:98:c9:c4:ea:0a:12:d7:2a:58:ee:de:df:8f:7b:98:f1:
2d:6c:0c:8c:94:db:f1:e3:d3:da:81:d1:19:34:58:9c:98:ca:
20:64:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:52:34 2025 by rpki-client