Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/sEp92JJOOutIpHjLS3hTbE4CMc4.roa
File: sEp92JJOOutIpHjLS3hTbE4CMc4.roa (raw, json)
Hash identifier: zayIaTeW8P15HaHDoVK2CtiggZ6Pbixqm/OKP7D4RHg=
Subject key identifier: B0:4A:7D:D8:92:4E:3A:EB:48:A4:78:CB:4B:78:53:6C:4E:02:31:CE
Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Certificate serial: 0194266B1221D9AD266EAA2914C7685CA56C
Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/sEp92JJOOutIpHjLS3hTbE4CMc4.roa
Signing time: Thu 02 Jan 2025 09:48:58 +0000
ROA not before: Thu 02 Jan 2025 09:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212097
IP address blocks: 45.81.88.0/22 maxlen: 22
45.81.88.0/24 maxlen: 24
45.81.89.0/24 maxlen: 24
45.81.90.0/24 maxlen: 24
45.81.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:12:21:d9:ad:26:6e:aa:29:14:c7:68:5c:a5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb
Validity
Not Before: Jan 2 09:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b04a7dd8924e3aeb48a478cb4b78536c4e0231ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:c8:6e:88:10:66:b5:a5:f0:29:1f:d6:e5:
23:3e:95:9a:eb:54:ca:95:1b:97:da:db:8c:c1:40:
cf:e4:4f:0a:22:ed:f8:d1:79:12:3f:de:3b:16:58:
15:e6:c2:08:43:3a:8e:58:21:e8:5e:8c:48:02:c0:
c5:20:18:c3:fa:50:99:e8:56:6b:47:50:ab:46:f7:
97:9f:63:2b:cd:98:12:16:62:5d:ee:a3:ba:d0:59:
a5:06:d9:65:4d:b2:1a:5c:28:2d:b0:d7:8f:6b:70:
28:f8:0c:de:99:d7:79:34:06:31:da:49:a8:7f:76:
9d:ba:d2:bf:69:06:fd:ab:45:86:52:30:50:a5:62:
8c:d6:8e:88:ca:e1:91:47:6b:f3:11:20:e0:59:7e:
8b:56:cc:43:d3:26:6c:bb:fb:fa:fe:73:9d:2d:e2:
02:2d:cc:ad:99:59:62:e3:15:ce:f8:c8:30:03:d7:
8d:72:1f:08:c0:ba:b4:f1:02:f9:74:cf:1f:71:3a:
9a:c8:ec:c1:7d:f8:06:61:fc:b7:61:cf:e5:28:a6:
0d:98:dd:67:4c:f5:0d:83:d0:0b:1a:37:f4:c2:98:
70:a7:62:1d:e2:0d:59:07:4e:69:8d:60:6a:36:1c:
20:c7:64:5c:9a:fd:52:c5:ce:96:3b:26:ef:bb:8a:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4A:7D:D8:92:4E:3A:EB:48:A4:78:CB:4B:78:53:6C:4E:02:31:CE
X509v3 Authority Key Identifier:
keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/sEp92JJOOutIpHjLS3hTbE4CMc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:a0:80:8a:2b:72:6f:80:dc:5a:0e:a3:2d:6e:a0:84:31:d1:
a5:ad:73:23:83:94:6b:e6:61:8b:8f:21:04:6b:fe:d5:24:36:
f3:4c:f7:05:de:7e:98:9f:19:b5:ac:ec:77:9a:2e:2b:fe:b9:
21:cb:4a:af:5c:7a:62:fd:f7:1a:a1:55:6c:17:ec:32:2a:4e:
14:9b:6b:f4:1a:ae:45:d0:e0:57:72:69:83:00:67:5a:2f:cf:
c7:25:93:ba:0a:6e:24:8a:35:4c:b1:ea:08:8a:a4:69:a3:6e:
94:18:39:f1:09:6c:9c:a3:3d:f3:a1:0a:f8:60:ec:27:f6:3e:
e1:e6:44:37:5e:91:5a:51:64:16:4a:09:e4:e9:ad:74:df:9c:
f0:b7:27:9d:e0:75:1e:9e:c6:09:5f:a6:b1:e1:1a:c8:8c:0a:
d2:80:24:d4:e9:37:55:fb:23:c6:dc:ad:6b:4f:57:83:b5:87:
f9:0a:bc:31:6b:95:46:88:c5:bc:df:f5:ea:04:e4:e8:48:15:
20:f0:81:b4:55:44:d8:b6:74:73:f3:15:56:c6:0e:ac:51:c9:
8e:89:77:d8:c7:1a:dc:f2:d3:25:ee:1e:c2:59:85:74:06:ed:
a6:bb:ae:3d:ff:ff:b8:c1:00:b8:66:bf:52:e7:db:19:40:c4:
a2:c7:85:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:36:42 2025 by rpki-client