Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/g6hQI_rF-M9uMvF9BrKEyXmUEz4.roa
File: g6hQI_rF-M9uMvF9BrKEyXmUEz4.roa (raw, json)
Hash identifier: n0C1owP42We2B+tz26M24CR8+gVn0wd9yQ78cMhq7Wk=
Subject key identifier: 83:A8:50:23:FA:C5:F8:CF:6E:32:F1:7D:06:B2:84:C9:79:94:13:3E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD11F667C75F99F70573F32D9A4245
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/g6hQI_rF-M9uMvF9BrKEyXmUEz4.roa
Signing time: Thu 02 Jan 2025 07:48:49 +0000
ROA not before: Thu 02 Jan 2025 07:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 45.43.166.0/24 maxlen: 24
64.137.52.0/23 maxlen: 23
104.238.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:11:f6:67:c7:5f:99:f7:05:73:f3:2d:9a:42:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83a85023fac5f8cf6e32f17d06b284c97994133e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:cd:47:de:06:ec:28:a3:4c:af:b7:3b:57:
32:ee:ce:49:84:68:a0:eb:27:b0:41:b2:00:88:44:
e0:2f:51:a9:c4:25:dc:ed:ed:48:e6:94:07:a6:80:
6f:bb:24:c1:14:89:83:77:b8:88:94:5e:02:17:00:
4b:0e:da:cc:be:77:f0:bc:76:df:54:ca:10:2d:0e:
94:d5:85:67:1d:f0:7c:d2:1a:b7:14:2f:1d:ba:a2:
e3:5a:54:98:57:e4:82:09:f0:99:ca:fb:4f:4d:c1:
38:e8:ce:b2:9a:c0:c0:ff:c4:66:18:08:21:a2:6d:
2b:7e:2c:2b:e8:ee:e7:d5:1b:04:e8:5f:eb:1f:75:
e9:e3:4e:5e:76:45:82:e6:54:73:79:a3:09:2d:20:
cf:b4:42:6f:58:8e:eb:48:e9:89:d9:a1:f5:26:0a:
f3:da:e8:17:07:61:c1:f6:b6:c7:95:3f:15:01:9c:
bf:b1:b7:aa:4f:95:e3:f7:24:63:80:e3:b6:77:28:
be:09:61:b2:18:06:c9:2c:ea:24:01:bf:0e:56:de:
73:a2:3a:ef:9a:86:83:ea:d4:b7:d1:67:ff:ed:87:
d1:b1:d1:e2:d7:40:f0:b9:4b:bc:5a:b8:2d:2a:00:
ae:b3:32:74:f3:43:0f:49:1f:7f:7e:a1:8a:0f:c9:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A8:50:23:FA:C5:F8:CF:6E:32:F1:7D:06:B2:84:C9:79:94:13:3E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/g6hQI_rF-M9uMvF9BrKEyXmUEz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.166.0/24
64.137.52.0/23
104.238.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:1c:0b:c3:ab:a8:00:5c:72:86:d6:12:06:0e:65:d2:32:d7:
ca:13:3d:69:e2:28:e4:4f:62:c5:a1:90:1c:ee:3e:dd:04:ad:
e8:d5:ee:81:d8:2e:b6:e9:f7:6a:5f:5c:f5:5b:99:ba:b7:91:
5a:67:72:22:a9:f0:bd:b0:ed:d3:25:b1:c7:3b:c9:7b:e2:07:
f2:6b:51:7a:fe:08:30:37:32:d3:89:2f:15:7c:56:10:70:78:
f8:04:60:df:65:dd:9d:28:6c:9e:f3:30:63:e0:ac:87:7c:ee:
31:9b:95:6e:21:6d:e6:d1:b0:bf:82:65:f0:e0:55:49:b8:8b:
8f:8c:61:cb:00:8e:01:a3:00:3a:cf:3e:e7:1e:1c:9c:82:b4:
2e:3b:c0:ed:b8:3e:8d:90:bc:5f:7c:0a:a2:f7:16:de:8b:23:
00:2a:77:60:cb:cb:76:74:32:4f:b0:ed:82:a7:cd:b6:d1:ac:
f8:9f:21:85:fe:f2:9f:af:68:32:ef:53:30:cc:e2:88:42:65:
1d:39:7d:0d:1c:ce:b0:92:be:2e:f2:77:3a:d5:89:7d:29:5c:
9b:5e:5c:8c:00:72:de:6d:70:f3:8c:53:96:0b:c9:10:8c:ba:
63:9e:66:82:6f:53:eb:bf:e8:c9:7a:d4:a5:6f:31:24:10:a1:
23:9c:3e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:44:56 2025 by rpki-client