Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/8UVdNw9Tjppo478GX33LOZCZ8cE.roa
File: 8UVdNw9Tjppo478GX33LOZCZ8cE.roa (raw, json)
Hash identifier: xHw9+KBXqx4QOGCdYKePtsH/MkWtajsbjnbd18reXjM=
Subject key identifier: F1:45:5D:37:0F:53:8E:9A:68:E3:BF:06:5F:7D:CB:39:90:99:F1:C1
Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Certificate serial: 0196AEE37B507D2EC28AE24E490A10476C36
Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/8UVdNw9Tjppo478GX33LOZCZ8cE.roa
Signing time: Thu 08 May 2025 07:54:25 +0000
ROA not before: Thu 08 May 2025 07:54:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47454
IP address blocks: 45.80.40.0/22 maxlen: 22
2a0e:3a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e3:7b:50:7d:2e:c2:8a:e2:4e:49:0a:10:47:6c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204
Validity
Not Before: May 8 07:54:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1455d370f538e9a68e3bf065f7dcb399099f1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:16:7d:68:15:7d:5f:54:59:11:53:cf:aa:
e7:8d:7f:92:1b:bb:58:e3:a6:48:4f:db:06:cd:e8:
9b:73:d3:d7:67:39:a8:e5:64:b9:ca:cb:24:d8:c6:
af:e5:2b:fc:21:b1:b9:0f:fa:4a:f0:f8:1c:62:e8:
cd:c0:61:e5:99:5d:16:1b:7a:00:d9:f5:eb:27:a6:
ca:3b:58:2c:c3:e0:9b:84:07:9d:1d:11:d2:16:b8:
ed:ad:7b:62:52:28:3e:a5:f7:13:3e:42:c6:e2:a9:
d4:d2:9c:35:0b:bf:f7:9c:6b:0d:66:e8:c7:9e:88:
46:78:ce:c9:ba:2e:5a:43:d3:dd:a6:4b:96:9e:4d:
fb:99:18:2c:77:a6:94:6b:d3:f2:91:e8:76:8d:31:
21:93:b4:fe:cd:a4:5e:cf:ed:5e:f3:37:82:89:16:
60:95:1c:67:92:d0:1b:6e:7a:4d:56:e1:f6:74:db:
95:35:76:50:10:7d:e2:f1:fa:7f:1c:c3:25:5b:eb:
8b:d0:23:9a:4b:2f:71:7d:2a:e4:9c:6d:e9:e9:59:
45:96:a1:17:42:10:3d:d6:0c:f9:77:a7:b6:f7:62:
8a:fc:d8:6b:b4:d3:f6:1c:e1:cf:0a:d4:77:21:9c:
54:27:4c:67:74:10:7f:8a:55:74:c4:5c:1b:20:43:
7e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:45:5D:37:0F:53:8E:9A:68:E3:BF:06:5F:7D:CB:39:90:99:F1:C1
X509v3 Authority Key Identifier:
keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/8UVdNw9Tjppo478GX33LOZCZ8cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.40.0/22
IPv6:
2a0e:3a80::/32
Signature Algorithm: sha256WithRSAEncryption
c4:1e:a6:64:a8:89:87:42:fb:e0:67:e1:67:ba:7a:84:36:18:
20:41:05:5d:50:18:fd:21:4d:3d:a7:70:2c:1a:ab:c7:fd:24:
27:e1:6e:f6:24:4d:18:cb:82:01:8a:93:f0:5e:52:18:eb:d1:
f5:51:be:e9:92:84:b5:42:e7:9c:2e:0e:6e:50:4c:c2:b1:10:
da:cd:8c:8d:5d:a3:2e:11:3b:06:93:65:fe:e5:7e:4a:f5:de:
b2:72:0d:a4:93:7a:d8:9b:01:3e:b2:b3:1e:65:f9:06:03:b9:
bc:7d:01:c4:4c:66:0c:17:02:b5:10:e9:b2:70:06:b6:87:da:
6d:44:55:4a:2c:49:a1:21:33:60:ab:58:c7:a9:1f:7d:45:5c:
22:00:04:d7:77:67:01:8b:04:28:1d:58:35:1d:c3:34:80:ad:
e2:92:32:9b:09:37:67:2d:90:b8:3a:80:e2:48:1b:ee:85:53:
d1:3b:70:e4:28:87:82:bd:77:07:34:a1:cb:26:59:3b:61:ea:
37:45:09:7d:e7:26:57:6b:50:7d:9c:96:8c:49:a1:69:e3:a3:
31:aa:c9:1a:20:98:cf:25:bd:f3:b9:40:d1:95:36:88:ed:5e:
19:26:86:0c:bf:97:45:05:d0:0a:35:6d:c8:0b:be:6c:50:61:
8a:a9:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:59:33 2025 by rpki-client