Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/Z51tk-_RA8tS0qKG579XKDThD1k.roa
File: Z51tk-_RA8tS0qKG579XKDThD1k.roa (raw, json)
Hash identifier: jrw3DdxxDeKhPMS6oVcqpTg9EmGuyht4s1KNeKcKW/U=
Subject key identifier: 67:9D:6D:93:EF:D1:03:CB:52:D2:A2:86:E7:BF:57:28:34:E1:0F:59
Certificate issuer: /CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Certificate serial: 019426D994093714C1368871A3B357CE119F
Authority key identifier: 1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/Z51tk-_RA8tS0qKG579XKDThD1k.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50939
IP address blocks: 45.134.160.0/22 maxlen: 22
2a0f:4480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:94:09:37:14:c1:36:88:71:a3:b3:57:ce:11:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eb99c120ec994f3b70dbfc5e019a2e8b187cd0c
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=679d6d93efd103cb52d2a286e7bf572834e10f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:6a:69:64:ff:d5:0a:0f:27:1b:b6:c6:d4:
e3:2f:c2:a7:1f:d4:69:98:f2:ff:31:96:8f:c5:bc:
6d:ae:5c:82:9e:cf:8a:34:f5:97:1e:fa:40:60:42:
a5:cf:34:07:24:69:5b:23:6b:7d:02:fb:ca:94:02:
1e:d7:23:4d:16:75:e4:35:4c:2e:32:f8:0a:e7:b7:
88:c2:ec:01:8e:68:98:fa:98:4e:27:94:e0:5e:12:
c0:0b:0c:19:2e:69:f0:7a:a3:ee:f7:83:37:22:36:
c1:17:f4:e1:ac:06:6f:a0:3c:e7:b7:a4:a3:56:36:
76:38:bd:59:d7:6c:73:65:35:dd:36:e2:ee:d9:b4:
57:23:05:c0:e9:97:68:db:bc:fe:26:0d:ce:64:b1:
6e:b9:96:e8:6f:ef:c7:27:12:5a:c3:3d:66:56:64:
fa:59:86:6d:cc:cc:99:bc:77:58:c8:9f:37:b3:2d:
72:cf:b4:91:56:5d:c8:9b:cc:e6:34:e9:ed:7e:47:
3c:31:c8:76:60:23:d7:ea:7e:f1:a3:50:50:ae:10:
ec:9c:2e:5d:ac:42:c7:01:c6:3d:c6:ca:d2:55:19:
ab:cc:08:c1:6e:35:eb:0e:9b:b8:6a:eb:33:55:39:
3f:35:7d:b2:0a:9b:bd:d9:98:d4:d4:be:48:81:41:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9D:6D:93:EF:D1:03:CB:52:D2:A2:86:E7:BF:57:28:34:E1:0F:59
X509v3 Authority Key Identifier:
keyid:1E:B9:9C:12:0E:C9:94:F3:B7:0D:BF:C5:E0:19:A2:E8:B1:87:CD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/Z51tk-_RA8tS0qKG579XKDThD1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/90843e-6663-4ee1-b1f4-a9b88fdab668/1/HrmcEg7JlPO3Db_F4Bmi6LGHzQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.160.0/22
IPv6:
2a0f:4480::/48
Signature Algorithm: sha256WithRSAEncryption
5e:e4:2e:72:3d:68:93:69:cb:21:6f:e7:41:bf:45:2d:d2:17:
97:6d:85:6a:0e:f3:67:da:38:67:ba:7f:08:df:e5:9f:4d:cb:
aa:52:5e:7e:bf:b3:75:6e:fa:77:5a:7c:38:f5:3b:cc:89:3e:
18:53:ca:80:0e:6a:e3:8a:36:40:b8:5d:f0:ab:5f:e2:57:a5:
a5:ac:b1:b4:e4:7f:48:2a:bc:ed:cf:2b:45:e0:a9:6b:95:2a:
a0:cf:2b:06:28:e2:83:dc:8f:bc:4b:37:cd:97:d6:9b:cb:b9:
4f:65:eb:28:30:16:29:b1:cf:e4:01:d7:50:48:35:38:1d:e0:
db:c6:d7:9a:c0:37:36:7a:94:40:7c:01:f1:4c:18:05:ac:b0:
4f:bb:6d:12:8d:6c:e2:48:ae:85:2a:86:73:cf:16:69:62:0a:
9e:48:29:a2:97:23:83:0e:0e:cb:71:13:ef:31:7d:89:77:43:
fa:21:3c:9d:96:9d:7d:c1:c9:e5:f5:33:1d:73:1b:a1:8a:80:
07:90:75:0e:1b:2d:53:22:50:40:47:ab:64:27:d0:c8:9a:42:
eb:c2:7d:ea:f6:41:dd:aa:2b:4f:ba:b2:a7:42:a7:5a:a1:19:
3d:7d:57:f7:ab:07:eb:5e:7f:72:9b:2c:d9:fb:58:b7:10:e0:
b0:f1:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:30:42 2025 by rpki-client