Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/eZY2teiRCMuc8ordB3siE6vvyrU.roa
File: eZY2teiRCMuc8ordB3siE6vvyrU.roa (raw, json)
Hash identifier: eYVuxyQrp/ArDQADFzcG2OxANFHCCc8GbHzB/2LAyF8=
Subject key identifier: 79:96:36:B5:E8:91:08:CB:9C:F2:8A:DD:07:7B:22:13:AB:EF:CA:B5
Certificate issuer: /CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Certificate serial: 019424451E2E21C9EA3C94DE0C65E0749985
Authority key identifier: A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/eZY2teiRCMuc8ordB3siE6vvyrU.roa
Signing time: Wed 01 Jan 2025 23:48:16 +0000
ROA not before: Wed 01 Jan 2025 23:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20810
IP address blocks: 45.138.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1e:2e:21:c9:ea:3c:94:de:0c:65:e0:74:99:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37beb7fd65caa9afc46d9f24273cd27c0f960
Validity
Not Before: Jan 1 23:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=799636b5e89108cb9cf28add077b2213abefcab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:a6:f0:9a:4a:b6:e5:fc:5b:9a:af:72:2d:
cc:7f:20:6e:dc:f2:f6:d1:35:49:7a:75:81:6d:c8:
7f:58:28:30:a5:ba:4b:94:ad:b2:a3:15:0d:2d:d3:
3e:cf:bd:e7:eb:81:fd:3a:84:b3:7a:7d:b3:a0:3c:
38:1b:d4:f7:33:07:33:cd:e6:c7:39:be:be:9d:5d:
f9:29:62:51:87:e9:46:76:37:41:d1:fe:19:c4:cb:
2d:3d:bc:5f:f4:d2:94:7b:98:55:49:ed:22:bc:3d:
2f:86:c8:6e:e2:61:7e:4b:44:81:7d:72:a2:f3:d7:
1a:0b:0e:0a:86:98:27:fc:47:c4:7b:d5:81:db:15:
6d:70:43:02:12:ca:c9:50:c4:aa:5d:99:cd:d7:7c:
79:5f:96:00:1a:15:fc:5c:60:dc:1a:df:0b:d1:37:
1a:13:ec:2a:6a:b7:59:92:83:9b:d4:8a:1e:ad:44:
e9:c3:de:20:4d:ec:f4:68:6a:11:a0:cb:4a:e4:6e:
a7:53:83:8a:87:95:9b:f7:bf:18:ac:11:b5:2b:b0:
a9:2e:91:8c:79:61:54:a9:6a:31:bc:e5:ea:c8:7f:
db:d5:9d:37:13:9d:d9:13:8c:b9:9a:46:99:3d:ad:
e7:ee:a6:14:3c:f9:d4:f1:35:1d:31:c3:45:0a:10:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:36:B5:E8:91:08:CB:9C:F2:8A:DD:07:7B:22:13:AB:EF:CA:B5
X509v3 Authority Key Identifier:
keyid:A4:A3:7B:EB:7F:D6:5C:AA:9A:FC:46:D9:F2:42:73:CD:27:C0:F9:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN763_WXKqa_EbZ8kJzzSfA-WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/eZY2teiRCMuc8ordB3siE6vvyrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f440de-1592-458c-aaa3-7c47241c0a84/1/pKN763_WXKqa_EbZ8kJzzSfA-WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.56.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:f6:44:26:ea:b8:d1:de:a8:83:da:bf:4f:81:7f:ca:b6:e2:
68:86:14:7e:b3:85:6a:76:5d:b7:93:dc:7e:96:66:1f:b4:0f:
26:91:b4:dd:ed:6e:3f:31:17:01:6f:59:fa:0c:a4:0a:3c:83:
1e:2d:9d:2d:bb:b9:1e:6a:c4:10:25:79:0a:f0:15:35:f1:a9:
db:3c:f7:c4:27:de:97:fd:3d:2f:1a:02:72:56:07:69:94:db:
02:09:c4:c4:49:f7:66:17:ca:a3:f1:16:ee:ea:10:0a:e1:59:
45:ed:14:0e:54:45:37:fd:6d:f1:05:c3:7a:19:19:8e:89:67:
d6:1e:b7:a0:fb:00:bf:26:b4:ba:48:9d:a7:d2:0d:4f:5b:7f:
f1:fc:eb:2a:98:7d:73:dc:51:84:fa:dd:17:56:2e:8a:9c:8c:
e2:2d:b7:99:5d:e1:e4:59:b2:43:6d:58:4c:44:f4:ee:65:ca:
67:87:fa:5b:6f:17:1e:af:06:4e:4d:1f:e9:ef:3a:db:82:17:
96:82:f5:1f:2f:34:c2:84:1f:a0:e1:a3:86:f8:50:22:9a:ae:
2b:d9:3b:21:f4:31:6c:79:cc:ff:8a:cc:14:ae:53:58:3f:d3:
1c:af:01:8a:7d:f9:df:a4:18:5a:5d:ae:12:ec:a8:eb:50:f3:
b6:b7:24:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:07:34 2025 by rpki-client