Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa
File: YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa (raw, json)
Hash identifier: LHaKj7+QlvcSgq++8z+jJyS/oDBfxjscKlDfcPcqAh0=
Subject key identifier: 60:B8:94:42:9B:F7:B0:4E:85:D1:9A:BE:38:C0:77:82:F2:80:6B:BD
Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial: 019425FD38603A4428A65F0716A5ED18BE70
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa
Signing time: Thu 02 Jan 2025 07:48:59 +0000
ROA not before: Thu 02 Jan 2025 07:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24961
IP address blocks: 45.81.132.0/22 maxlen: 22
91.212.140.0/24 maxlen: 24
2a0e:4680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:38:60:3a:44:28:a6:5f:07:16:a5:ed:18:be:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
Validity
Not Before: Jan 2 07:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60b894429bf7b04e85d19abe38c07782f2806bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bb:ee:c3:01:d4:5c:07:4e:25:4a:2a:68:50:
c1:50:ff:0a:f7:5f:b9:f0:00:46:bc:dd:06:37:1e:
11:30:84:db:51:6b:d0:e6:09:83:fd:c0:cc:a4:81:
09:53:a2:2c:e9:ff:7d:56:a5:0d:dc:7e:a8:69:da:
fc:17:28:0c:db:14:9a:75:ff:1e:5f:0f:80:71:3e:
68:7f:f1:b1:4d:d8:66:70:cf:42:ff:91:f0:8e:9c:
c3:e3:de:ac:b3:28:fd:c7:62:c3:94:53:fa:a1:97:
eb:0c:f4:57:a5:16:43:0c:f8:2d:42:e0:29:1d:35:
ad:a1:ea:30:a7:bf:57:d1:3c:43:a1:14:59:37:e0:
c7:78:de:38:22:d3:81:b5:f8:52:8d:f1:0d:e9:3b:
1f:cb:2a:e2:cd:f3:ac:89:0a:da:78:d5:08:22:51:
c5:35:4b:4e:99:b4:05:df:ad:60:a9:48:56:c7:41:
26:a3:ac:f4:c5:4e:dc:7d:05:25:22:7c:0f:22:3d:
cd:eb:3a:be:51:2d:0c:dc:c0:6a:cb:c7:a0:87:f1:
0c:30:2c:3f:a7:b8:c5:37:2f:73:18:5e:b9:cb:c0:
d1:cd:e4:72:57:c9:2e:7c:91:9f:fc:f8:e4:1e:bb:
87:0d:da:57:96:d0:b1:90:e2:b3:ee:4c:92:78:bb:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B8:94:42:9B:F7:B0:4E:85:D1:9A:BE:38:C0:77:82:F2:80:6B:BD
X509v3 Authority Key Identifier:
keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/YLiUQpv3sE6F0Zq-OMB3gvKAa70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.132.0/22
91.212.140.0/24
IPv6:
2a0e:4680::/32
Signature Algorithm: sha256WithRSAEncryption
a4:3b:8f:a6:df:79:81:16:ee:15:50:c2:06:51:61:6a:01:c8:
15:25:3c:83:a1:31:8d:90:af:3f:bd:e2:b7:34:44:b5:52:fb:
0a:68:1b:6a:a0:da:d4:ce:71:d8:ef:c6:de:87:92:c8:9f:45:
59:47:60:e5:67:21:54:d3:38:85:3c:59:cd:8f:cf:0c:26:fd:
0e:95:50:93:fe:29:be:ef:81:17:a3:18:0c:0b:f1:44:61:86:
1c:2d:ee:a5:9d:ce:b3:83:0b:62:38:69:a7:43:86:69:47:a2:
e2:b1:bc:68:3c:fc:1f:b0:f6:bc:f6:e2:72:d1:51:2f:88:71:
2e:59:28:0a:f9:2f:c1:c0:f4:32:17:7c:08:5e:f0:eb:37:0f:
a3:a0:12:6a:7d:8d:41:9c:9a:8c:f3:76:ce:c7:4e:91:74:94:
0f:b1:d1:0b:72:01:ab:32:e9:18:37:9f:71:74:12:05:4b:50:
6d:14:c6:8c:b7:a9:cd:df:a3:30:23:5a:a3:29:4e:60:38:a8:
23:9a:08:3d:30:cd:7c:04:58:33:be:42:f5:03:f6:7f:6a:1d:
05:bd:12:63:33:01:a0:94:52:65:9f:3e:85:d9:71:98:31:00:
f5:1a:0a:45:61:3e:75:4a:7e:e3:4e:e2:c4:90:84:c4:c8:db:
86:c9:19:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:28:19 2025 by rpki-client