Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/603LAvQ5JXA5_S8BjHWOsHJK9Wo.roa
File: 603LAvQ5JXA5_S8BjHWOsHJK9Wo.roa (raw, json)
Hash identifier: 8uIPD2qt5HOkYhC38b1edHK/qDoR0Hb99DfiBmCJ4B8=
Subject key identifier: EB:4D:CB:02:F4:39:25:70:39:FD:2F:01:8C:75:8E:B0:72:4A:F5:6A
Certificate issuer: /CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Certificate serial: 0194D55EC95ADC6FF2D8B75763FE711E19F9
Authority key identifier: EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/603LAvQ5JXA5_S8BjHWOsHJK9Wo.roa
Signing time: Wed 05 Feb 2025 09:09:06 +0000
ROA not before: Wed 05 Feb 2025 09:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39923
IP address blocks: 45.153.152.0/22 maxlen: 22
45.153.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:5e:c9:5a:dc:6f:f2:d8:b7:57:63:fe:71:1e:19:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead20a22e948fb9644129ad3019f08d4f4981fcf
Validity
Not Before: Feb 5 09:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb4dcb02f439257039fd2f018c758eb0724af56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:84:9c:93:07:98:6b:bb:b7:b7:b6:5c:f5:
b5:12:03:1c:16:fc:ff:f7:11:fb:c0:9a:eb:84:a0:
d5:d0:45:ea:5d:ad:91:58:c0:84:5a:c1:b0:7f:60:
f6:69:74:b8:dd:dc:7b:7f:45:8e:6b:87:80:94:8c:
5f:1d:44:c3:ba:6b:43:08:5d:3b:a5:30:63:67:ae:
8c:ce:33:40:31:f0:64:8e:83:aa:94:b8:27:ef:de:
27:9c:43:e3:cc:0f:6c:80:cc:ca:5a:22:e8:55:1f:
f0:db:e3:ad:0f:7d:26:e6:4c:45:04:db:60:84:f2:
46:45:18:11:f5:ff:11:11:1d:1b:da:63:27:ce:91:
7b:99:1c:ef:c7:da:05:8a:fd:5d:2d:8f:2f:b0:48:
f4:27:83:c8:a2:03:67:fd:c5:bc:cd:6a:88:6c:a6:
98:73:cb:5a:2e:b0:c5:7d:38:51:4d:a5:38:f6:6d:
e2:72:dd:81:23:6c:e8:04:2e:12:40:0a:e7:ab:c1:
ee:72:dc:62:42:54:d3:40:a9:59:a0:ad:0e:8d:97:
e3:53:5c:ac:44:96:64:87:88:06:11:d5:c7:f0:ba:
fa:31:98:dd:04:c4:85:7a:f0:6d:d9:18:6a:2e:67:
1d:0c:56:3c:8d:aa:ff:19:4f:ff:b4:4b:21:04:73:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4D:CB:02:F4:39:25:70:39:FD:2F:01:8C:75:8E:B0:72:4A:F5:6A
X509v3 Authority Key Identifier:
keyid:EA:D2:0A:22:E9:48:FB:96:44:12:9A:D3:01:9F:08:D4:F4:98:1F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6tIKIulI-5ZEEprTAZ8I1PSYH88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/603LAvQ5JXA5_S8BjHWOsHJK9Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/17ca5f-4327-4a88-b976-b64ffce06580/1/6tIKIulI-5ZEEprTAZ8I1PSYH88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.152.0/22
Signature Algorithm: sha256WithRSAEncryption
09:a1:29:ea:89:8a:ac:32:d8:ac:b7:de:ae:00:a0:93:23:48:
1b:5e:87:a3:15:cd:23:a0:ab:0a:c0:be:f1:d2:e2:aa:d4:8e:
aa:2a:ae:fe:d1:fd:08:fc:d2:58:f9:94:88:90:20:e7:5a:ed:
83:70:db:6f:0a:42:a5:53:6c:60:25:b6:39:46:3e:ee:f5:e4:
55:32:9f:60:6e:5c:2f:af:87:52:68:f9:59:43:d1:c1:d9:72:
92:90:06:f9:a9:92:44:d0:7b:47:84:a6:92:4e:b6:88:f0:ce:
5d:7a:22:7b:98:df:66:8f:22:fa:e5:72:7c:5d:26:11:fe:d9:
44:e0:ee:34:d1:e9:09:94:f4:b6:f4:35:62:d0:18:3f:55:ef:
2d:fd:95:44:44:4d:a0:5f:4b:5f:13:ae:cc:8c:10:e7:e5:ca:
eb:f9:ec:77:e5:98:c0:6e:71:d8:b2:c5:01:8f:4a:97:79:12:
82:22:22:a4:f8:38:37:7f:d6:56:1d:ca:df:8e:ad:59:39:6e:
53:4b:5d:e7:66:89:1f:a0:06:e4:23:2b:09:dc:ed:92:ca:9c:
20:a2:1d:49:d3:6c:09:e6:dc:9b:91:e5:89:d1:5b:32:ae:79:
e3:c6:26:f1:00:c6:7b:31:09:75:24:84:71:0c:9d:d8:c3:28:
c3:27:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:14:51 2025 by rpki-client