Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cc886YjTg2S3unhTYeBrJZgj3ys.roa
File: cc886YjTg2S3unhTYeBrJZgj3ys.roa (raw, json)
Hash identifier: hes0YCkfn1FJvTKmJPC9il747X+FWkHLrts8FQ9RN98=
Subject key identifier: 71:CF:3C:E9:88:D3:83:64:B7:BA:78:53:61:E0:6B:25:98:23:DF:2B
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0196C5F63A7511A5F2E4080048A755C6AB54
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cc886YjTg2S3unhTYeBrJZgj3ys.roa
Signing time: Mon 12 May 2025 19:26:10 +0000
ROA not before: Mon 12 May 2025 19:26:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215391
IP address blocks: 45.43.143.0/24 maxlen: 24
104.238.21.0/24 maxlen: 24
104.238.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:f6:3a:75:11:a5:f2:e4:08:00:48:a7:55:c6:ab:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 12 19:26:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71cf3ce988d38364b7ba785361e06b259823df2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:a2:85:33:8e:b8:95:79:be:67:4c:18:2c:
27:a8:07:cc:6c:13:c3:14:91:e0:dd:5a:0c:2c:e2:
42:00:91:67:fc:78:d9:9a:6d:ab:fe:aa:6d:6a:64:
dc:1f:8c:c4:2a:68:14:e8:79:ff:35:70:1f:1b:ea:
96:d8:3f:b2:b2:3b:4f:34:83:35:37:61:f3:b6:63:
fe:cf:22:f0:b7:8f:27:eb:bb:72:6a:9e:f0:58:24:
6d:1c:f3:c6:bb:13:bd:8e:d3:a3:ad:76:8e:8f:22:
11:93:04:85:da:28:a5:a0:a1:ef:8d:95:7e:bb:c3:
ed:ce:68:05:8e:72:2a:2d:a1:02:43:61:93:88:04:
89:0b:59:d8:fc:51:3d:d8:84:23:49:3f:ac:c9:bd:
f9:24:f2:8c:ef:6b:90:2e:e8:89:e5:10:db:96:d5:
1f:dd:6b:02:89:0b:84:f7:f2:93:d1:f2:cf:3e:7e:
08:71:6d:7a:f0:75:b8:eb:a7:60:f6:47:db:0d:90:
57:2f:2f:4f:7f:4b:af:4a:54:01:99:89:f8:9a:21:
c4:ae:93:5f:8a:60:3e:1d:98:2a:8e:5e:6b:11:4a:
b5:37:a3:65:cb:d8:b8:9f:cf:73:8b:ba:0b:d8:0c:
6b:40:e9:61:8d:c8:51:3c:6b:04:03:90:47:57:9a:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CF:3C:E9:88:D3:83:64:B7:BA:78:53:61:E0:6B:25:98:23:DF:2B
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cc886YjTg2S3unhTYeBrJZgj3ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.143.0/24
104.238.21.0/24
104.238.23.0/24
Signature Algorithm: sha256WithRSAEncryption
75:62:29:53:eb:c1:a1:00:d3:da:a7:88:37:7c:63:46:1f:bc:
1c:c4:b0:94:6a:e5:8d:1c:33:a4:3b:8f:e8:23:86:91:82:40:
a7:9f:0e:0e:f8:45:a2:eb:70:55:5b:7e:3b:38:98:a0:a4:73:
9d:08:1d:7e:ea:f9:0c:57:95:c4:ca:06:08:45:83:6a:0b:c7:
c1:5d:86:1a:8e:d0:1e:fc:36:4c:cb:18:00:d1:64:3f:10:7e:
4e:17:8e:37:63:14:7b:fc:4a:99:e5:e8:70:58:56:8e:08:9a:
69:4a:7f:85:43:66:a8:29:68:e3:4e:16:d4:a5:51:c4:89:43:
5e:db:fb:5d:ae:05:fa:2b:f1:7b:da:a9:eb:e1:73:b1:21:a6:
5d:4e:45:b1:89:96:70:93:54:a0:79:88:58:9c:31:4f:18:0e:
4d:af:06:d1:dc:fa:14:cc:7d:38:4a:02:e2:a5:93:c2:c7:74:
16:49:b2:21:ad:82:af:06:6d:7d:a4:8d:dd:57:36:07:40:fb:
65:b3:90:73:c3:6c:9f:34:a2:df:2b:cf:a6:cd:eb:6a:42:9f:
21:8a:8f:55:57:d8:70:26:65:da:00:6b:3e:7d:3a:c5:94:69:
2a:ca:90:55:42:e0:b8:e2:2f:f1:b7:bc:1a:17:00:f6:73:82:
2d:17:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:39:54 2025 by rpki-client