Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OROcR9TFKFX0G1EKKyoyHcse-Dg.roa
File: OROcR9TFKFX0G1EKKyoyHcse-Dg.roa (raw, json)
Hash identifier: 8vxe5XGbu2dYP4tCzSFLAF7npuoOlh3i1CqUP+gKvoo=
Subject key identifier: 39:13:9C:47:D4:C5:28:55:F4:1B:51:0A:2B:2A:32:1D:CB:1E:F8:38
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019566C5D31793F314D55F573AC4307FD346
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OROcR9TFKFX0G1EKKyoyHcse-Dg.roa
Signing time: Wed 05 Mar 2025 14:46:35 +0000
ROA not before: Wed 05 Mar 2025 14:46:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48795
IP address blocks: 45.12.68.0/23 maxlen: 23
185.238.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:c5:d3:17:93:f3:14:d5:5f:57:3a:c4:30:7f:d3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 5 14:46:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39139c47d4c52855f41b510a2b2a321dcb1ef838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:0f:6f:07:27:71:5b:33:a1:c0:d7:7a:ba:
34:e3:5c:55:a0:08:e3:df:96:a4:ec:f9:69:cd:d6:
90:f0:0a:aa:ff:c1:d5:29:d3:50:e1:ed:f6:de:5a:
cd:6f:c0:3d:e7:12:c9:8a:56:a7:f3:c9:8b:49:6d:
e0:c1:94:77:8b:57:dd:29:80:4a:fa:6b:ab:37:ee:
1f:f1:48:27:ac:8e:ed:fe:e0:b1:e6:14:ae:a3:2a:
32:10:b1:c0:d5:21:54:25:07:a9:e6:96:01:0c:d3:
2b:d3:fa:fc:16:74:50:a3:c0:62:fa:9d:3a:2d:88:
4e:45:97:af:e9:2e:13:7e:28:ef:a9:6c:69:80:82:
be:df:f9:5b:e4:50:65:b1:e5:1b:78:a7:f9:03:4d:
19:ed:2a:9e:ec:e4:19:48:ff:ba:b0:a9:4f:35:e8:
f2:2b:7c:0b:5f:26:27:98:60:3d:03:f2:d6:ed:f9:
cf:51:f9:a4:15:34:55:4b:8b:a4:1c:b0:ef:56:ab:
d1:d7:8b:46:c8:f5:0f:35:01:65:2e:e3:62:7d:9e:
95:7a:5c:d4:07:fa:3d:dc:13:9a:8c:08:29:db:74:
4c:13:30:a4:d9:e0:9e:2e:6e:27:de:9f:bf:21:27:
80:09:e9:68:d6:a7:6b:98:c2:9d:75:9b:c7:a2:1a:
98:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:13:9C:47:D4:C5:28:55:F4:1B:51:0A:2B:2A:32:1D:CB:1E:F8:38
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OROcR9TFKFX0G1EKKyoyHcse-Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.68.0/23
185.238.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ae:67:0e:56:22:3f:01:29:62:e2:69:3e:11:42:67:f4:5e:
64:47:90:39:89:20:fd:22:f3:57:7d:15:10:13:ff:39:06:a4:
59:7b:24:ee:4b:70:e5:ad:dd:bb:34:1e:0a:aa:7f:d5:36:b4:
62:eb:a2:60:06:e0:e0:7b:1c:dc:37:aa:7d:2e:fc:b0:32:6b:
9a:43:73:2e:cf:4b:62:37:49:f7:9e:f9:72:3e:4f:f3:f5:9b:
bc:9c:13:9a:5b:82:e6:84:eb:3f:ff:a3:c6:73:4b:31:df:4a:
bd:b0:2b:af:ad:38:ad:ca:9a:70:a7:b7:e7:72:7b:a1:6a:1b:
8f:c6:f4:d0:c0:3e:51:62:c2:2b:f1:08:e8:88:7c:a0:d0:db:
3a:fa:4c:16:74:68:d4:8f:e0:c2:0b:2f:48:53:a4:3b:dc:8a:
26:bd:89:fa:a4:a5:a4:50:7b:f6:4e:16:80:c5:1b:6c:b1:35:
ad:66:c2:56:25:af:77:06:03:36:58:0b:2f:22:28:86:6c:76:
b4:71:ea:f7:44:f5:64:e0:f7:60:c0:46:db:ae:c1:31:c0:cf:
66:83:66:76:fa:8a:9e:90:f4:30:b4:13:f7:d3:74:cb:37:f9:
fa:39:10:b3:53:27:1c:93:a0:be:ab:47:58:f6:0a:ed:0c:d1:
7e:6e:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:23:48 2025 by rpki-client