Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/f1kmm1viP1JpShChN2T-8khwmCE.roa
File: f1kmm1viP1JpShChN2T-8khwmCE.roa (raw, json)
Hash identifier: oA16peDdFaNYYVYRr7l06EBaQutaxn0Ux8cCt1MZLyc=
Subject key identifier: 7F:59:26:9B:5B:E2:3F:52:69:4A:10:A1:37:64:FE:F2:48:70:98:21
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 019420685A302D753CDACDA57B42B2BB1A73
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/f1kmm1viP1JpShChN2T-8khwmCE.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208338
IP address blocks: 45.144.4.0/23 maxlen: 23
2a0e:e740::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5a:30:2d:75:3c:da:cd:a5:7b:42:b2:bb:1a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f59269b5be23f52694a10a13764fef248709821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:17:8f:76:75:65:9d:24:11:fc:da:6d:cc:1d:
b8:8d:4b:03:3c:15:fe:3c:51:90:20:39:e2:53:6e:
9d:db:a7:30:18:48:29:32:8a:7a:87:23:39:6f:9d:
56:7e:2a:e5:5c:be:00:76:de:4c:0c:19:10:87:6d:
d6:b0:c2:81:32:ab:60:4d:5c:b7:ce:e8:f3:3c:16:
ba:0c:a4:ba:e5:7f:10:0f:fa:20:64:ea:dc:d1:97:
4e:ef:40:25:ae:6b:53:0d:2c:89:95:7f:b4:a6:ed:
4d:6d:17:7e:fe:d5:1e:19:de:3a:b6:7a:eb:33:84:
75:ef:53:8f:c4:e6:89:f4:ff:20:0f:08:95:03:c3:
03:c3:c6:bf:a9:4f:61:d8:e1:66:64:60:6f:30:99:
f7:c3:e2:2f:7a:e4:85:d5:a3:66:25:e9:18:09:79:
a0:82:8f:46:30:60:78:d7:2e:4b:0d:04:ba:bf:83:
ee:30:97:9e:29:5c:c7:0c:e2:0a:60:8c:ad:a3:6e:
f3:f2:f0:96:1a:0e:eb:85:ea:e2:7f:5d:03:f7:f0:
eb:73:84:29:ad:b6:76:92:6b:11:a3:b7:b8:80:79:
5d:a8:e2:ce:72:05:a8:cb:77:77:89:a5:d1:c3:41:
5e:48:b0:e1:9e:e8:d1:8c:13:2c:7e:8e:4e:75:91:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:59:26:9B:5B:E2:3F:52:69:4A:10:A1:37:64:FE:F2:48:70:98:21
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/f1kmm1viP1JpShChN2T-8khwmCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.4.0/23
IPv6:
2a0e:e740::/30
Signature Algorithm: sha256WithRSAEncryption
bc:99:39:77:6c:ad:da:c0:95:b6:5c:69:b7:51:b0:5b:6e:cd:
3e:db:9c:a2:be:93:77:da:bb:6d:68:af:e8:56:98:d6:17:e5:
2c:a8:cb:ec:0a:59:ee:89:44:f3:b4:05:3d:f8:b8:ad:a0:32:
9e:75:3c:d6:b4:0d:af:06:29:00:51:32:5d:fc:8a:fa:2f:8b:
b3:f0:e3:e0:b0:9f:e0:a3:91:a5:47:b3:c7:bf:17:b3:72:c2:
28:32:6a:23:eb:13:37:23:48:79:e4:02:fc:5d:a9:69:bf:af:
3a:13:d5:d2:d5:59:8c:61:53:d4:2e:65:32:70:99:8a:ca:17:
56:65:3b:50:c8:cf:d0:a4:86:fa:87:c4:d0:4a:08:d7:67:b1:
9f:30:74:7a:a6:b5:65:8b:ee:b4:2b:7a:ea:75:d8:55:8d:2d:
3d:7e:eb:e5:b2:54:c3:7a:14:fb:2c:be:ae:e3:cc:42:3a:15:
70:0b:51:a4:2a:c8:a6:25:83:b8:d6:c7:ce:a3:0c:68:12:21:
61:5a:e0:36:ea:76:ea:2b:e5:ec:05:c0:7d:86:6a:b7:11:d3:
38:c9:3e:c6:6e:ab:0a:9b:a6:94:4a:de:0f:e9:a2:b5:6b:5a:
f1:ee:d0:29:fa:c9:a6:97:28:11:c9:92:cc:4e:7d:32:20:85:
d9:83:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:06:14 2025 by rpki-client