Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa
File: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (raw, json)
Hash identifier: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=
Subject key identifier: 0E:7C:C7:98:5E:93:0A:7A:63:3F:B4:D6:12:32:7F:AC:25:E7:BC:86
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 01941F8C897528CE308BAC85CD50A22D854D
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59692
IP address blocks: 45.183.4.0/22 maxlen: 32
186.2.160.0/20 maxlen: 32
190.115.16.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:89:75:28:ce:30:8b:ac:85:cd:50:a2:2d:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e7cc7985e930a7a633fb4d612327fac25e7bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ce:c9:88:dc:ac:1b:a3:7b:31:e0:7c:77:0f:
b1:6c:19:79:6f:bf:8d:38:08:f7:8b:73:53:52:7f:
f3:36:3d:d8:b0:bd:dc:55:bd:ca:56:7d:ad:e6:8f:
3e:84:05:1b:41:02:10:21:88:57:bf:0a:d0:1a:e4:
b6:d5:2b:89:80:89:7a:51:ac:79:bc:b2:28:10:11:
04:ab:21:ab:56:53:c9:3e:7a:18:f1:16:38:15:b2:
62:c8:e9:20:d3:66:c2:bb:9f:5e:a6:77:3f:87:7e:
6d:e8:ed:f6:9b:03:33:82:0a:09:62:e8:b9:1b:cf:
90:59:cb:80:84:08:53:89:68:ed:e6:08:5a:c0:7c:
bc:a8:1f:96:d0:ba:51:0d:d4:54:a9:9a:9d:81:1d:
95:1f:1c:9e:3b:85:f5:ca:b3:f3:3f:ee:35:28:24:
12:e9:df:02:a5:30:50:b6:52:62:46:d8:28:b1:1f:
2e:08:56:ae:4e:5a:74:99:cd:88:70:f9:e0:8c:30:
3e:dc:3e:c4:c3:17:83:40:c8:74:29:b9:03:0e:d8:
75:7e:a9:75:42:c7:7a:04:e5:7d:b5:76:28:2f:15:
6d:02:08:0b:04:1f:6d:00:38:ae:6f:04:c7:1e:6b:
ee:6b:e9:92:f7:70:93:d2:5d:5e:00:80:f4:0d:a0:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7C:C7:98:5E:93:0A:7A:63:3F:B4:D6:12:32:7F:AC:25:E7:BC:86
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.183.4.0/22
186.2.160.0/20
190.115.16.0/20
Signature Algorithm: sha256WithRSAEncryption
72:d3:32:86:50:58:59:b2:e8:ab:5e:4c:7f:ab:22:e3:36:df:
3e:cc:2e:da:7e:cb:00:f0:53:fa:49:10:53:54:16:5e:6e:7b:
e1:26:cc:a3:6a:8c:c5:87:5c:8b:ff:e0:6a:43:50:28:68:22:
b7:53:37:b6:5b:e6:4d:18:e6:8e:f5:12:71:90:fa:f0:98:15:
bb:92:63:99:ca:d8:0e:73:9a:2e:86:5e:2d:97:fd:75:70:78:
44:64:4a:f1:12:c0:52:df:99:b7:58:45:f7:99:49:61:ef:15:
97:08:73:f4:8b:b3:63:82:89:e3:ae:59:ba:ee:a7:6a:8b:34:
84:c1:40:74:53:5d:66:a3:fe:25:bc:62:34:be:a6:41:25:f9:
a8:19:7a:35:34:6a:a7:23:4b:f0:7e:aa:19:14:98:f6:d6:63:
ec:bc:b5:5d:2c:6d:be:41:36:88:c7:ed:4d:bd:04:57:a9:6a:
b0:f7:29:6d:43:b3:7a:e8:9a:e8:57:0c:0f:d3:81:18:d0:ec:
54:5d:ec:19:14:55:39:90:0d:f5:11:d4:32:8d:17:91:61:61:
73:ad:2b:d9:37:34:1e:d4:80:7c:33:5d:8b:b4:43:b1:70:c9:
05:30:7e:04:72:75:82:20:06:7b:90:99:77:b2:19:8c:e8:b2:
7b:48:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 16:40:13 2025 by rpki-client