Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/XCizLhxosay_G9f3R5CEYPj3NhI.roa
File: XCizLhxosay_G9f3R5CEYPj3NhI.roa (raw, json)
Hash identifier: HGHY684vUAOqDdwLiLSY37YmzadSJ7uI+DTibMEFnzM=
Subject key identifier: 5C:28:B3:2E:1C:68:B1:AC:BF:1B:D7:F7:47:90:84:60:F8:F7:36:12
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01964304330B9E0F56B8572AA98EAF82B2B4
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/XCizLhxosay_G9f3R5CEYPj3NhI.roa
Signing time: Thu 17 Apr 2025 09:11:10 +0000
ROA not before: Thu 17 Apr 2025 09:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 45.150.32.0/24 maxlen: 24
45.150.33.0/24 maxlen: 24
104.238.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:04:33:0b:9e:0f:56:b8:57:2a:a9:8e:af:82:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 17 09:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c28b32e1c68b1acbf1bd7f747908460f8f73612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0c:c6:29:f8:34:42:c5:ba:c5:48:12:25:85:
13:dc:41:61:3b:f5:8c:df:cf:a5:f4:35:3b:ce:9d:
77:8f:7d:33:6e:f0:81:5c:d2:f5:54:0d:50:14:0b:
1a:10:be:40:84:8e:e3:d8:a1:64:af:90:a7:4b:9c:
f4:e4:4a:ce:a8:2a:1f:aa:49:0b:96:d6:34:eb:7b:
b6:82:6b:90:14:26:d5:da:d0:d2:db:b3:d2:e3:1a:
f1:aa:82:e2:c7:10:c9:b3:d6:9c:c2:af:da:93:7f:
ff:0b:9a:fd:08:4a:cf:36:dd:ca:36:0c:19:84:52:
fd:6d:12:7a:d7:11:de:7e:c9:91:7c:a0:1d:f7:04:
d7:05:b8:2a:a3:97:45:97:53:c1:7e:44:fe:46:71:
18:a6:e6:b4:c6:7b:f9:23:7a:30:fd:65:51:44:75:
e6:a6:1b:b7:e5:d6:59:a3:3d:ba:da:31:07:f6:e0:
b5:a6:dd:57:88:6b:e9:ca:b2:63:c4:a8:7b:a9:fd:
5a:e5:c3:8c:cc:57:6e:4e:47:a1:17:61:64:b6:22:
36:a7:dd:eb:b5:b1:fa:1e:ad:e5:f6:ec:40:88:83:
c3:f6:61:37:6c:89:71:a5:ab:05:25:4e:62:6b:81:
71:c7:8c:bb:cb:4b:04:e3:22:b3:0e:64:1b:fb:0b:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:28:B3:2E:1C:68:B1:AC:BF:1B:D7:F7:47:90:84:60:F8:F7:36:12
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/XCizLhxosay_G9f3R5CEYPj3NhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.32.0/23
104.238.29.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1c:7a:65:02:1f:1c:21:a8:fb:32:38:4f:60:54:8d:ef:00:
24:98:fa:51:e0:86:74:60:d1:e5:99:7f:48:8a:95:15:fb:3a:
6c:0e:41:01:47:3c:98:7b:df:e2:30:d7:ed:38:9e:e6:ba:c3:
af:90:cf:5c:dd:a5:d0:54:82:a5:8f:00:d5:cf:eb:38:d6:53:
55:46:63:ce:7b:1a:40:20:bf:58:cc:23:10:c7:78:14:10:e1:
4d:ba:d8:62:da:32:8c:72:f9:98:02:06:76:eb:05:0e:66:31:
cc:5f:a2:dc:e1:e4:7b:28:38:b5:21:86:6b:c4:a2:b1:42:86:
85:4b:f5:0d:71:e7:f9:f9:ef:82:73:d0:44:d2:04:19:bc:1c:
25:cc:3e:28:ac:bd:d2:60:78:88:3b:97:f0:81:b8:19:24:9d:
e0:de:65:9b:cf:58:58:9c:1c:7d:3e:2a:38:d3:89:84:97:73:
d5:fb:b8:a9:81:3b:5c:23:3d:84:c9:f1:85:e5:a3:60:bc:91:
4b:ae:99:81:79:90:0a:a0:87:1b:b5:60:3f:ff:a4:4a:b1:42:
b8:b3:f5:6d:83:ab:d6:9a:97:7d:08:0e:f2:c7:33:ce:99:11:
99:6a:78:fc:f5:79:49:f9:ca:cb:9a:13:f8:a5:8b:6b:c3:19:
58:27:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:45:12 2025 by rpki-client