Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa
File: 1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa (raw, json)
Hash identifier: 2k5Vbn4Uzj43wxo1XqMC5rFldjjQHil2kjWg9IIMQEQ=
Subject key identifier: FA:DA:38:90:E5:5A:9F:FC:85:31:2E:18:E9:93:E6:A6:25:E4:3F:2D
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 019425FCD30ADDB692B4E1DC3414B446073F
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa
Signing time: Thu 02 Jan 2025 07:48:33 +0000
ROA not before: Thu 02 Jan 2025 07:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44938
IP address blocks: 45.14.128.0/24 maxlen: 24
45.14.129.0/24 maxlen: 24
45.14.130.0/24 maxlen: 24
45.14.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:d3:0a:dd:b6:92:b4:e1:dc:34:14:b4:46:07:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Jan 2 07:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fada3890e55a9ffc85312e18e993e6a625e43f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cf:4c:03:84:ed:72:f5:fb:71:d0:55:8d:28:
f5:b9:73:c9:e6:f7:82:8f:2f:6b:52:8a:59:09:5f:
c0:5a:28:17:b2:35:19:ab:58:22:4a:1e:b9:a8:d3:
11:e3:49:50:7c:46:d1:0a:f5:de:90:38:49:0c:c3:
0f:4b:2f:01:5b:04:19:53:2f:66:b6:56:07:a0:60:
ca:b2:17:8e:dd:b6:4b:f9:d3:93:f3:0d:83:6e:05:
53:9a:ba:a6:43:69:16:23:52:67:26:06:a2:9e:f5:
c6:64:9a:cc:6d:1a:12:1d:e3:1e:99:55:e7:2c:3e:
3c:7e:8d:1c:15:69:57:27:c2:ff:9d:9e:20:88:31:
5c:c0:d0:31:16:87:78:af:c8:f3:1a:2b:ed:7a:32:
76:66:01:2f:57:4d:02:0b:88:2a:99:2f:c6:15:ba:
38:1d:31:67:59:78:0b:d8:06:87:ab:a7:7a:a6:c5:
27:94:2d:73:7e:07:05:f2:c8:a3:1d:24:e8:d2:f4:
ba:9f:19:0c:84:e3:e6:6b:11:46:e1:90:64:b6:2d:
eb:b6:1b:e5:c9:e3:56:43:47:19:7d:f1:6a:bf:d3:
75:42:84:09:23:db:f0:53:d8:72:82:f0:11:ac:da:
f1:21:bb:c4:91:52:05:2f:0b:bd:60:39:1d:68:90:
b3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:38:90:E5:5A:9F:FC:85:31:2E:18:E9:93:E6:A6:25:E4:3F:2D
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/1-to4kOVan_yFMS4Y6ZPmpiXkPy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.128.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:91:81:53:48:b8:7c:2a:12:ef:c3:03:bd:35:8a:b1:32:b6:
0c:a6:b8:24:63:e5:6f:89:09:8f:4b:dd:fb:67:4e:11:d6:26:
5d:b2:0d:0a:c7:47:46:46:91:6a:1c:6a:4b:48:bf:f9:36:25:
b7:f2:c6:3c:aa:31:8f:64:6f:d3:fd:a5:8f:42:73:3a:7b:9a:
6f:7b:fe:08:3c:80:45:3c:57:48:1d:59:0a:fa:5a:3d:1c:a8:
13:c1:bd:d4:3e:d3:c2:52:7d:e8:fa:40:6d:aa:c2:60:e4:51:
30:9a:d3:56:47:7b:53:84:3e:8d:06:6b:c9:7d:c2:9c:ff:7e:
61:66:0f:68:e8:c6:e6:d5:b0:8e:b7:28:09:e4:ac:e4:68:56:
41:01:58:14:c5:e9:72:58:ce:c3:2b:19:f8:67:84:ed:de:14:
c9:a7:08:8f:6b:5f:45:56:7d:be:43:68:a4:69:74:4d:50:89:
ca:eb:2d:31:2e:72:bf:21:8d:ea:41:ed:29:d9:50:94:af:20:
79:ca:3f:37:39:94:5b:06:63:37:62:5c:ea:eb:c4:ea:a1:46:
99:5f:ee:4c:ed:f3:f2:72:c6:48:2a:ab:47:ec:04:93:54:ed:
0b:3d:3b:81:c6:86:d1:02:90:71:b5:be:f3:54:20:a5:0a:8f:
97:82:47:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:50 2025 by rpki-client