Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/eSkFWVq4tnO9_NQGHXzn_2jwNdA.roa
File: eSkFWVq4tnO9_NQGHXzn_2jwNdA.roa (raw, json)
Hash identifier: 9ioA1jXrjMJWs1wQcB4LuvE2y/VKc7mVQhoDroMNB5E=
Subject key identifier: 79:29:05:59:5A:B8:B6:73:BD:FC:D4:06:1D:7C:E7:FF:68:F0:35:D0
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019420D5D2CEE5E2734E26EEDB9E9055C04C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/eSkFWVq4tnO9_NQGHXzn_2jwNdA.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57724
IP address blocks: 45.155.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d2:ce:e5:e2:73:4e:26:ee:db:9e:90:55:c0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=792905595ab8b673bdfcd4061d7ce7ff68f035d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:75:8a:06:1d:5d:a9:ab:43:d2:0f:c1:3f:
ae:79:9d:59:69:30:f4:a7:e1:8b:dc:16:f2:12:62:
1c:fe:23:c0:7d:d6:d1:5c:18:60:4c:b5:bb:8f:c5:
88:bd:0a:cd:a2:21:59:8c:1f:58:10:b2:59:cf:e3:
5a:67:27:6b:43:cf:74:3e:7e:f9:de:40:ec:b5:33:
af:c3:56:1b:89:d8:23:0f:a1:9b:4e:5b:35:e9:0f:
ad:69:3e:67:79:e9:b6:fb:8f:f4:b1:52:45:a1:fe:
d5:49:cc:2c:d1:28:cd:04:f3:2d:fe:b7:47:30:1b:
58:96:b3:36:92:56:fa:18:01:2d:5c:0c:a9:af:d3:
d5:28:0e:8b:a2:48:d6:52:50:8f:f7:08:f1:86:41:
c9:b6:4f:28:cb:9a:4c:43:f5:0c:bd:3b:f2:39:32:
1a:6e:ea:70:45:fd:8d:22:d7:f4:6c:3d:d4:8f:0b:
43:54:cd:e4:b1:ed:d6:29:5a:87:b9:3c:b3:7b:fc:
3c:43:c2:1c:6a:e9:bf:1d:f4:57:3e:da:57:d8:11:
1d:f7:26:e2:f5:58:46:25:3a:cf:9f:e2:52:16:f9:
27:8f:cf:4f:1e:86:3a:e5:0c:14:9b:5d:cb:46:fd:
8b:51:17:83:64:46:fa:84:1f:84:24:e0:76:22:8e:
73:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:05:59:5A:B8:B6:73:BD:FC:D4:06:1D:7C:E7:FF:68:F0:35:D0
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/eSkFWVq4tnO9_NQGHXzn_2jwNdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.60.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c7:8f:51:73:4b:a9:b0:4f:27:fa:7d:01:86:f1:1a:00:5c:
5c:16:0b:70:5d:31:36:a4:41:96:0c:1b:83:9e:27:cb:9e:ad:
51:03:dd:a9:9c:d9:3b:16:8e:21:b6:0a:99:9a:9b:4c:99:8e:
95:c6:f4:19:7a:eb:21:30:ab:a8:a2:ed:f9:f5:d4:90:ae:b4:
2e:c4:4f:9f:54:63:78:41:46:fe:0b:4e:b8:4e:2d:82:5f:e2:
c1:e5:f7:b4:67:f9:20:aa:71:d2:41:10:ce:a9:0e:a6:b5:51:
73:dc:6d:90:77:79:13:ba:1d:88:ca:ea:e3:4a:3d:98:c3:08:
08:85:58:b3:72:34:5d:ab:5a:e8:e8:f9:87:73:c4:78:6c:e6:
7a:76:64:e9:3b:59:c6:5d:b2:ca:5f:bd:f4:b3:21:e4:85:d9:
59:ef:ff:01:49:8f:23:ae:2e:b8:bd:c1:e9:be:72:bf:32:d4:
d4:08:c5:04:b2:90:1d:c1:31:89:bb:5b:6a:6e:06:61:60:07:
c1:58:0e:68:fe:33:27:a7:a8:b4:d4:62:ae:20:ac:69:82:b8:
bb:d4:67:df:86:24:ba:ce:ad:8c:0c:a6:a4:15:b9:5a:a6:17:
88:fe:fa:c0:34:14:78:32:0a:47:db:6a:ee:7a:d7:6e:6f:23:
90:27:15:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:00:41 2025 by rpki-client