Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5LSH-4OSyAc3XbW0WJ2ol7Bae2U.roa
File: 5LSH-4OSyAc3XbW0WJ2ol7Bae2U.roa (raw, json)
Hash identifier: /Zm4npWA0uupBsH2Zq8G2+OqXPGDbSxFVw0jJyybfC8=
Subject key identifier: E4:B4:87:FB:83:92:C8:07:37:5D:B5:B4:58:9D:A8:97:B0:5A:7B:65
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01965D08A90120401CDC68AE55BBAF0FF5C9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5LSH-4OSyAc3XbW0WJ2ol7Bae2U.roa
Signing time: Tue 22 Apr 2025 10:26:10 +0000
ROA not before: Tue 22 Apr 2025 10:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.43.145.0/24 maxlen: 24
45.43.155.0/24 maxlen: 24
45.43.156.0/24 maxlen: 24
45.43.160.0/24 maxlen: 24
64.137.16.0/24 maxlen: 24
104.238.17.0/24 maxlen: 24
104.239.51.0/24 maxlen: 24
104.239.64.0/24 maxlen: 24
104.239.65.0/24 maxlen: 24
216.173.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:08:a9:01:20:40:1c:dc:68:ae:55:bb:af:0f:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 22 10:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4b487fb8392c807375db5b4589da897b05a7b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:44:0b:50:eb:7c:4a:23:5d:6b:d0:1d:fa:
03:22:f0:3b:ba:ad:5b:3e:fc:d1:bd:50:31:fe:b8:
9c:62:af:cd:b1:c7:17:db:32:7f:ee:ec:04:c8:be:
04:fb:f7:45:4d:f6:e3:e0:c0:ba:0f:70:f2:bb:02:
22:67:95:e3:36:7a:8c:47:1e:18:53:14:67:d2:a0:
4b:d7:01:66:33:f6:5f:66:c9:8f:13:5e:2e:06:8b:
2f:44:09:08:6b:8f:26:57:05:92:78:73:ad:94:8e:
7f:d0:3f:c0:4a:5e:ec:fc:31:4b:6b:71:58:c9:14:
30:7b:1a:96:6d:e3:a7:7e:4b:3b:ce:c9:8e:c4:a9:
90:e3:0a:00:5c:e7:81:ea:72:a8:86:50:3b:62:ab:
94:c5:22:bf:57:ea:00:43:30:09:07:c8:11:ae:37:
dd:e5:18:a5:15:7f:aa:c5:a1:f3:4d:dd:eb:85:4c:
03:3a:75:42:d9:5c:99:ad:7f:f1:6e:48:61:4d:14:
8e:80:12:e6:d4:87:c5:87:f4:34:1c:22:7c:aa:b9:
2d:d3:71:dc:3d:e6:d0:8c:50:f1:f2:82:f8:e3:51:
2d:fa:35:a6:70:3a:0d:23:e8:10:f0:46:3a:4c:f0:
88:74:a8:67:50:e1:5f:ec:01:2f:46:47:2c:49:5b:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B4:87:FB:83:92:C8:07:37:5D:B5:B4:58:9D:A8:97:B0:5A:7B:65
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/5LSH-4OSyAc3XbW0WJ2ol7Bae2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.145.0/24
45.43.155.0-45.43.156.255
45.43.160.0/24
64.137.16.0/24
104.238.17.0/24
104.239.51.0/24
104.239.64.0/23
216.173.94.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:49:b4:a2:4f:73:4b:e2:c4:9d:5a:5e:01:62:c4:35:66:13:
d6:25:38:72:db:63:f9:db:00:42:1e:68:95:9d:76:2d:2f:fc:
bc:8d:48:e4:72:71:39:4b:d1:48:47:ec:54:e7:ac:4a:6f:df:
b0:2e:00:80:85:5b:fb:1f:c3:8c:80:35:e9:b3:9f:a5:f6:67:
3f:f5:35:58:e0:aa:6b:79:58:c0:df:a2:d8:5e:b4:5e:47:2f:
c4:9e:c1:be:ec:2e:a5:fa:95:75:57:0e:f7:84:4f:79:18:31:
b6:8b:9b:b0:c0:c1:b0:d1:53:d3:93:35:12:3a:3a:8c:59:a2:
ef:1d:a4:d0:4d:6e:86:17:8d:8b:75:8a:4e:dd:44:89:5c:83:
24:7e:63:ba:99:cd:72:f4:0d:1e:a9:40:ae:20:47:b5:f5:fe:
ed:39:19:1d:78:dc:e4:c7:22:b8:75:a8:13:28:32:04:28:41:
a5:a9:a5:58:2a:b3:0e:24:7b:cb:e9:39:94:a4:8e:7f:2d:f8:
d8:f0:a6:50:01:43:d2:fc:a3:90:f5:0b:61:df:b6:38:ef:72:
f5:ad:ce:54:fb:4c:91:07:09:59:c6:58:63:a0:a9:55:bf:1b:
6d:16:91:49:ea:df:d6:a6:7a:4a:ea:11:83:70:01:9f:30:9c:
44:78:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:25:53 2025 by rpki-client