Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/dGsyJ7jM6KvOdugHv606GHJw2t8.roa
File: dGsyJ7jM6KvOdugHv606GHJw2t8.roa (raw, json)
Hash identifier: T1+/lyFZuo6NN3DPCdQyKfzTAN48j9zk6Jj/XS5Es/U=
Subject key identifier: 74:6B:32:27:B8:CC:E8:AB:CE:76:E8:07:BF:AD:3A:18:72:70:DA:DF
Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial: 0194258F30FC44E935602383B7921418B250
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/dGsyJ7jM6KvOdugHv606GHJw2t8.roa
Signing time: Thu 02 Jan 2025 05:48:48 +0000
ROA not before: Thu 02 Jan 2025 05:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215910
IP address blocks: 45.90.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:30:fc:44:e9:35:60:23:83:b7:92:14:18:b2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=746b3227b8cce8abce76e807bfad3a187270dadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:a4:f6:b8:84:22:9e:68:6f:7b:c4:09:23:
41:2d:cc:9d:9d:5f:57:cd:e1:17:8e:18:d5:0b:97:
ae:e4:1b:53:b1:de:bb:4b:b5:a7:f4:48:cb:bd:73:
a4:76:dd:27:5a:05:3f:d1:7c:29:65:4b:fe:20:ed:
7f:45:d5:45:57:5d:96:b8:37:42:8d:73:f7:2d:c2:
6a:9e:a0:04:8e:b2:c7:56:97:52:b8:8c:5d:b5:c5:
96:1b:a1:85:ef:f6:9e:ed:3c:d4:2b:83:61:8e:cc:
5e:8e:36:d9:0a:68:32:04:b5:6e:54:13:f7:6b:02:
46:47:27:a4:34:46:83:81:56:20:22:6c:46:31:17:
49:55:6b:23:6a:aa:b1:41:5c:e7:87:b5:33:2b:16:
69:d1:a2:7b:57:fa:33:68:9c:7f:16:35:3c:be:10:
ad:a8:17:06:2e:52:7f:86:8b:60:34:a4:f6:94:80:
81:74:23:b7:00:74:c6:3e:bc:99:09:1b:8d:e7:36:
d3:9b:ec:12:b1:b3:8c:19:3c:ed:1e:86:74:03:c3:
c0:7e:04:2f:04:88:ae:49:04:e2:5e:5c:75:ea:e0:
95:2f:59:9c:05:0f:09:ce:da:d6:48:fb:d9:1f:5a:
2e:0b:7f:23:b5:ad:dd:e6:ce:98:88:5c:fd:e7:55:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6B:32:27:B8:CC:E8:AB:CE:76:E8:07:BF:AD:3A:18:72:70:DA:DF
X509v3 Authority Key Identifier:
keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/dGsyJ7jM6KvOdugHv606GHJw2t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.80.0/24
Signature Algorithm: sha256WithRSAEncryption
42:03:cd:1f:a8:ab:02:22:26:6e:b2:ab:4f:88:3a:f0:19:bd:
05:61:71:6a:8c:1b:9e:a6:53:8f:28:94:9e:33:60:1e:13:d5:
4f:5d:36:98:d6:7c:a2:62:8b:34:d8:87:91:36:ff:88:53:90:
43:1b:88:27:4b:59:14:0e:f8:9a:59:ef:d4:d1:68:45:56:cd:
12:cf:fa:20:2d:89:1a:26:c6:78:d4:ef:09:5e:0e:78:ef:86:
3e:44:14:bf:d7:ae:76:e5:b2:0e:6c:f6:86:81:bb:e2:af:95:
03:0f:e1:78:a4:9a:a7:cf:6f:29:ec:9e:18:e1:50:e5:98:f7:
93:03:9d:c8:08:1f:cd:ca:28:1e:5f:34:39:d7:93:65:01:68:
c1:c5:39:4d:a6:03:0c:ab:40:c5:fe:12:ea:ff:69:74:e8:ca:
92:50:6c:24:c1:4e:a5:70:db:6a:28:78:49:94:aa:86:9c:21:
83:fb:dc:a3:b5:8c:f6:65:ba:a8:76:7d:ea:13:be:e5:3f:9f:
55:3a:57:57:f9:16:d2:8d:b8:84:ba:02:19:1f:0c:9c:9f:31:
0e:45:32:aa:d8:f5:93:73:67:50:b8:48:ca:cf:37:fb:d5:9f:
7d:87:29:78:9d:67:0a:36:0a:e7:fe:a1:fa:7e:c5:fd:bd:74:
33:48:c7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:20:17 2025 by rpki-client