Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/X_fPOs6YAZH2TT4IWQcW6KOL-FY.roa
File: X_fPOs6YAZH2TT4IWQcW6KOL-FY.roa (raw, json)
Hash identifier: bxGSJtgvXh/lnDA0x6ePZz0W8ihJege1t3FViWTKXLY=
Subject key identifier: 5F:F7:CF:3A:CE:98:01:91:F6:4D:3E:08:59:07:16:E8:A3:8B:F8:56
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 019427B3FC5CEE7222629EC6188DC68150FA
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/X_fPOs6YAZH2TT4IWQcW6KOL-FY.roa
Signing time: Thu 02 Jan 2025 15:48:14 +0000
ROA not before: Thu 02 Jan 2025 15:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46873
IP address blocks: 45.84.192.0/24 maxlen: 24
45.84.193.0/24 maxlen: 24
45.84.194.0/24 maxlen: 24
45.84.195.0/24 maxlen: 24
45.153.108.0/24 maxlen: 24
45.153.109.0/24 maxlen: 24
45.153.110.0/24 maxlen: 24
45.153.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:fc:5c:ee:72:22:62:9e:c6:18:8d:c6:81:50:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Jan 2 15:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ff7cf3ace980191f64d3e08590716e8a38bf856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:6b:39:90:8c:17:e9:0b:b9:7b:c3:01:25:
f3:f6:48:4b:cc:0d:bb:3b:dc:b2:f2:51:5a:b4:0c:
be:51:51:2f:1e:81:f7:6b:c9:73:2f:2c:36:25:b3:
e9:38:57:1f:29:66:eb:71:aa:0c:be:36:a1:0b:d0:
5a:b9:9c:08:d9:3e:fa:ef:63:bc:67:d0:36:9a:e5:
e2:6d:a7:3d:03:61:c9:a5:dd:97:6e:5a:0e:c1:be:
db:a0:f3:5c:85:1f:0b:41:f6:de:7d:3a:74:a3:42:
bc:e7:f5:11:0c:ca:ce:02:ed:2b:47:63:36:10:7b:
88:16:bb:ff:4c:0c:b6:dd:23:55:8d:24:47:08:63:
04:fb:9b:c5:1c:ca:ee:f8:59:9d:d4:37:6f:22:23:
14:99:c9:d6:68:fd:5e:40:04:90:0f:90:d6:a2:5f:
d9:82:e1:b8:03:5e:04:ca:63:35:95:61:c1:33:97:
d0:b5:dc:df:54:5b:8c:34:a9:cb:9e:5c:0a:b1:ca:
91:a7:c2:25:14:33:80:53:80:97:88:c8:fc:19:d2:
21:7e:7e:75:17:6a:3f:6d:6b:bf:ac:70:ca:87:96:
76:22:dd:59:72:a7:2d:4b:aa:d6:5c:bd:3f:99:15:
0c:2b:fe:61:14:c9:45:a7:10:b0:8c:67:11:ff:81:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F7:CF:3A:CE:98:01:91:F6:4D:3E:08:59:07:16:E8:A3:8B:F8:56
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/X_fPOs6YAZH2TT4IWQcW6KOL-FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.192.0/22
45.153.108.0/22
Signature Algorithm: sha256WithRSAEncryption
18:71:a1:52:14:81:26:61:66:65:ff:7c:6c:78:e5:a5:4c:57:
21:f0:86:aa:ed:38:e0:0c:18:56:99:9c:a9:ed:35:d0:b5:94:
79:71:22:d0:46:1d:8a:ea:17:1a:93:69:e9:70:2d:29:36:2d:
9a:05:ee:89:79:fc:dd:07:47:fa:ee:b1:1e:e3:47:63:2c:36:
1e:ad:60:55:82:cd:aa:6a:56:11:d0:16:ed:e5:61:00:50:8c:
b4:bb:25:e6:1e:84:5b:05:11:13:a1:a9:f7:14:da:fe:c6:da:
48:1a:c0:33:8d:b5:be:98:e2:9c:91:48:06:ec:34:a3:52:f0:
45:d7:e8:e2:82:88:46:b1:f3:9c:ed:d0:9f:16:6c:33:29:d1:
35:20:f7:ea:b0:bc:21:30:d4:76:f0:d1:4a:b0:47:ad:34:b1:
b3:cd:5e:16:1e:4f:04:3d:2b:49:24:d4:87:b0:7d:38:13:50:
d4:b6:92:c0:1d:fa:36:4c:c4:4c:8a:b2:06:5b:6f:5b:d5:30:
b6:e4:2b:6d:01:ee:09:49:81:5c:02:ff:3c:29:64:28:69:76:
b4:03:b0:da:f3:aa:3d:c9:02:d0:43:32:4b:07:57:d8:77:d6:
0a:05:02:16:ee:5b:86:a8:a9:a5:7a:91:28:22:7c:22:91:ca:
3a:0e:78:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:33:14 2025 by rpki-client