Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/b_wRgWYeYrJvukDKrVQNSxCC1oA.roa
File: b_wRgWYeYrJvukDKrVQNSxCC1oA.roa (raw, json)
Hash identifier: QgRcnGJHDmU6CdnsgDMY+L6P5HOFim8w8/7ckonms0U=
Subject key identifier: 6F:FC:11:81:66:1E:62:B2:6F:BA:40:CA:AD:54:0D:4B:10:82:D6:80
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD2BAF71F2BD56A72FEC3DE8B8AAE8
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/b_wRgWYeYrJvukDKrVQNSxCC1oA.roa
Signing time: Thu 02 Jan 2025 07:48:56 +0000
ROA not before: Thu 02 Jan 2025 07:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211541
IP address blocks: 45.43.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:2b:af:71:f2:bd:56:a7:2f:ec:3d:e8:b8:aa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ffc1181661e62b26fba40caad540d4b1082d680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:60:e0:08:e7:fb:59:53:40:4e:8b:8c:62:
b1:ef:bd:09:d7:2b:79:b1:8a:d5:4d:db:01:68:8a:
59:52:24:84:c2:c2:d1:b4:ac:75:97:6e:1a:f7:cf:
7a:83:c2:14:ea:b9:f1:e1:65:d5:5b:0c:f4:08:8c:
64:d0:b4:91:47:9f:4a:36:9f:48:62:38:5b:8a:1b:
70:31:a5:0f:ff:3a:41:b6:50:d9:1e:61:77:96:dd:
5c:37:f5:55:c0:de:d6:ee:7c:bb:c7:08:64:61:6e:
b9:6c:14:26:0a:75:b4:75:d4:40:2c:4c:41:3f:80:
a3:52:c7:93:bd:2f:00:ba:9b:95:60:01:bd:dc:0c:
e7:dd:12:3e:bb:16:3f:a9:46:02:d7:42:43:15:30:
89:84:b1:c9:1f:a2:2e:f0:22:7c:46:09:35:6f:32:
1c:f9:db:8b:46:18:4e:44:af:18:0f:61:ef:10:39:
af:b4:ef:2a:55:99:7f:ec:32:03:54:51:b8:dd:c5:
cc:40:61:f6:08:59:c3:c5:42:af:08:3f:e1:6f:29:
40:23:44:ee:94:2c:e0:9e:b6:ef:0a:20:f3:4e:dd:
56:41:29:5a:70:46:f3:5b:f3:39:b5:bc:c7:97:d5:
43:70:92:36:44:b5:c7:20:35:dd:2e:c2:f7:f6:c0:
b6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:11:81:66:1E:62:B2:6F:BA:40:CA:AD:54:0D:4B:10:82:D6:80
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/b_wRgWYeYrJvukDKrVQNSxCC1oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.153.0/24
Signature Algorithm: sha256WithRSAEncryption
15:29:c1:8c:33:a4:92:4c:f7:98:ed:cd:22:18:93:c0:96:f7:
2e:f8:10:38:f6:06:d6:c2:e2:d4:cd:ff:b2:77:df:b4:b8:34:
ca:54:3e:7f:5f:6e:bb:4c:51:5e:49:03:57:c1:2f:4b:62:97:
af:da:0c:62:78:cf:24:01:af:e3:28:c6:f4:8c:9c:64:01:0b:
8a:fa:ab:c6:2e:88:5f:b3:2c:cf:fa:a0:a7:1a:1e:c3:76:35:
e1:ad:a3:81:2a:a7:0c:79:94:4c:30:34:4a:9e:2e:2d:c2:df:
ea:b8:c5:35:ad:4e:a2:30:18:4f:6a:ec:f5:df:42:2a:b4:c8:
37:28:59:24:4d:c1:ac:f3:19:3e:7f:f1:a7:1f:53:16:8e:3c:
a1:7e:13:5c:d6:82:a9:da:c1:bb:46:bc:a3:e8:fa:8b:67:dc:
f2:c1:f6:12:a9:23:ed:37:4f:17:b8:b5:61:f5:e0:a3:20:ae:
50:b7:49:c2:9c:45:53:48:35:f2:88:55:20:d1:b1:18:66:e1:
15:d6:59:80:64:c3:67:85:0e:c0:ed:6e:1d:66:6e:78:a8:f1:
b5:87:89:14:1b:8d:2e:df:5e:29:b8:92:17:76:8b:25:67:a9:
ec:0c:6a:41:b2:6a:1f:ab:c1:4f:e8:5d:af:31:c1:3a:1c:13:
0f:4e:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:57:36 2025 by rpki-client