Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cfv79gKvQBIuVD6aE_q_xPYsNjw.roa
File: cfv79gKvQBIuVD6aE_q_xPYsNjw.roa (raw, json)
Hash identifier: 4/ZgOCAZ3Gg2ueMhsHDWAsKck4gokksicCpLDJKH86Q=
Subject key identifier: 71:FB:FB:F6:02:AF:40:12:2E:54:3E:9A:13:FA:BF:C4:F6:2C:36:3C
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0196D3AF1BB888CE8790DD4470D02317A1F5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cfv79gKvQBIuVD6aE_q_xPYsNjw.roa
Signing time: Thu 15 May 2025 11:23:10 +0000
ROA not before: Thu 15 May 2025 11:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.43.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:af:1b:b8:88:ce:87:90:dd:44:70:d0:23:17:a1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 15 11:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71fbfbf602af40122e543e9a13fabfc4f62c363c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:f7:69:fb:e7:3d:bc:f5:47:50:71:53:87:
f9:0b:78:0c:5e:bb:73:e5:73:f0:88:d1:b7:bb:cc:
11:56:ad:51:9c:fa:2b:cc:e7:b1:69:54:d8:39:6d:
27:43:5c:ba:de:28:e3:45:b7:a5:76:21:4b:6b:8e:
6c:6a:93:79:d5:79:14:9c:e8:43:cb:ae:81:01:34:
d9:0b:a2:92:09:3e:f4:31:2b:5a:78:cc:bd:04:fd:
8d:97:76:35:63:e8:b9:0c:e1:e5:12:11:56:3c:36:
ff:eb:e4:ad:f9:2c:78:a5:b0:63:77:2a:00:5f:72:
a6:eb:17:e2:0d:46:52:38:e8:d1:b9:49:64:d6:ff:
b2:68:cf:8e:5b:78:49:60:76:91:9d:d3:6c:b1:51:
01:b9:27:5c:7b:04:a1:d6:4b:2e:3c:d6:72:3e:7e:
08:97:0b:50:fb:06:d0:fd:7c:35:0d:24:61:36:f7:
74:16:31:f4:df:10:b8:ac:b9:aa:eb:fa:ef:8e:75:
40:6e:6f:6e:47:23:16:e7:38:36:91:d1:83:2f:b3:
8a:de:b8:5a:c8:0d:0c:80:b1:c5:a9:cb:ef:8d:36:
bd:94:08:4b:df:99:69:dc:26:62:95:07:19:81:f2:
46:9a:bf:4f:d2:43:9a:13:00:96:0e:72:30:ae:ad:
be:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FB:FB:F6:02:AF:40:12:2E:54:3E:9A:13:FA:BF:C4:F6:2C:36:3C
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/cfv79gKvQBIuVD6aE_q_xPYsNjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
48:14:2b:1a:84:31:50:18:fb:d9:7d:58:07:bd:2d:d4:b4:e9:
eb:bb:77:c3:8c:48:0e:56:7f:b3:f6:32:7c:f1:83:dd:03:07:
d1:19:06:e7:8e:f5:ae:5f:20:31:cc:65:da:b4:17:fc:fa:b9:
be:29:53:91:6d:94:27:1b:7f:d0:bd:96:4a:7f:57:ba:6e:51:
33:b8:da:b6:65:6a:2e:f1:3a:a4:53:87:9f:bc:38:20:6d:45:
5f:70:2f:96:36:f1:ff:8f:43:4c:c8:12:14:b9:01:1f:74:a7:
89:8e:0b:e0:96:5a:9a:30:a0:56:58:b7:87:40:99:b3:c2:88:
e1:36:19:e7:79:b6:1a:c0:69:98:30:b8:6c:d7:d2:61:b8:45:
10:1f:1a:1f:94:1e:42:ac:22:5e:12:a3:73:20:19:79:4f:be:
46:ba:75:0f:18:94:ac:5c:19:0f:ba:ce:ab:07:ac:ac:64:93:
c6:4a:60:e2:c9:b0:01:70:da:62:eb:2c:12:14:49:49:90:56:
e2:d4:2d:2b:71:1c:84:a8:f9:2e:25:f8:7d:06:7e:c1:35:b5:
a8:4e:71:91:c5:3b:99:90:22:76:45:a6:79:ee:a4:bd:86:4d:
09:40:a4:fb:fa:b6:8f:20:dc:7d:40:65:3b:71:87:f4:95:9d:
87:29:77:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZbTrxu4iM6HkN1EcNAjF6H1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjUwNTE1MTEyMzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWZiZmJmNjAyYWY0MDEyMmU1NDNlOWExM2ZhYmZjNGY2MmMzNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V33afvnPbz1R1BxU4f5C3gMXrtz
5XPwiNG3u8wRVq1RnPorzOexaVTYOW0nQ1y63ijjRbeldiFLa45sapN51XkUnOhD
y66BATTZC6KSCT70MStaeMy9BP2Nl3Y1Y+i5DOHlEhFWPDb/6+St+Sx4pbBjdyoA
X3Km6xfiDUZSOOjRuUlk1v+yaM+OW3hJYHaRndNssVEBuSdcewSh1ksuPNZyPn4I
lwtQ+wbQ/Xw1DSRhNvd0FjH03xC4rLmq6/rvjnVAbm9uRyMW5zg2kdGDL7OK3rha
yA0MgLHFqcvvjTa9lAhL35lp3CZilQcZgfJGmr9P0kOaEwCWDnIwrq2+nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHH7+/YCr0ASLlQ+mhP6v8T2LDY8MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvY2Z2NzlnS3ZRQkl1VkQ2YUVfcV94UFlzTmp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSuOMA0G
CSqGSIb3DQEBCwUAA4IBAQBIFCsahDFQGPvZfVgHvS3UtOnru3fDjEgOVn+z9jJ8
8YPdAwfRGQbnjvWuXyAxzGXatBf8+rm+KVORbZQnG3/QvZZKf1e6blEzuNq2ZWou
8TqkU4efvDggbUVfcC+WNvH/j0NMyBIUuQEfdKeJjgvgllqaMKBWWLeHQJmzwojh
NhnnebYawGmYMLhs19JhuEUQHxoflB5CrCJeEqNzIBl5T75GunUPGJSsXBkPus6r
B6ysZJPGSmDiybABcNpi6ywSFElJkFbi1C0rcRyEqPkuJfh9Bn7BNbWoTnGRxTuZ
kCJ2RaZ57qS9hk0JQKT7+raPINx9QGU7cYf0lZ2HKXcm
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:42 2025 by rpki-client