Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa
File: 9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa (raw, json)
Hash identifier: xEiD+NeQMOim7hnrMiNX9H8tnd7mZQhnJ+lXAAgggm4=
Subject key identifier: F6:05:9D:FD:B1:79:E6:75:05:B7:39:69:B5:F4:3E:26:2E:E1:40:F2
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 01942825AA778CDA04537DAE8117B7094A92
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa
Signing time: Thu 02 Jan 2025 17:52:24 +0000
ROA not before: Thu 02 Jan 2025 17:52:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 45.145.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:aa:77:8c:da:04:53:7d:ae:81:17:b7:09:4a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Jan 2 17:52:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6059dfdb179e67505b73969b5f43e262ee140f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0b:8c:7c:fe:95:cc:d7:40:c0:b1:6b:b4:c5:
4f:ea:3e:03:22:f1:1e:3c:cf:3c:c9:bd:9b:79:35:
e7:1e:76:f4:c8:02:94:fb:93:66:47:b7:23:56:dc:
1e:69:e4:67:51:f6:01:dc:55:22:40:67:45:01:5d:
43:44:d6:fe:5f:1b:11:8e:22:4f:e5:6f:d2:be:1d:
d3:e0:87:77:7c:56:df:64:3c:e3:33:75:c8:46:80:
06:dc:64:41:db:1e:36:f5:ab:5e:c7:56:01:e5:b7:
2d:d3:bb:20:76:16:ed:59:1d:87:cc:8b:73:9d:b2:
44:dc:b8:6d:64:8f:12:cb:c2:d8:cc:85:ec:63:96:
c3:5b:57:c4:c8:61:31:79:81:fd:56:d0:37:3e:52:
91:f9:fd:b2:23:f8:32:91:f0:43:e3:c4:65:72:55:
60:67:e4:94:b0:c9:59:9c:cb:0d:23:24:56:b6:48:
b9:9e:0a:61:c4:1e:1b:ed:84:70:a4:d5:5d:8e:24:
c0:37:d5:01:2b:23:13:fb:90:2b:23:92:bf:3e:60:
a7:79:32:99:54:89:d2:a5:09:39:20:80:12:16:c5:
2e:03:4d:ca:58:70:a0:5a:a2:42:9e:3a:be:ad:39:
06:aa:8b:44:f2:63:ae:59:07:23:3f:23:01:ae:2d:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:05:9D:FD:B1:79:E6:75:05:B7:39:69:B5:F4:3E:26:2E:E1:40:F2
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/9gWd_bF55nUFtzlptfQ-Ji7hQPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.155.0/24
Signature Algorithm: sha256WithRSAEncryption
73:da:7b:4f:9d:bd:a4:d2:da:e5:8a:c2:21:61:d4:3c:de:f4:
5d:75:d4:ce:0d:2a:25:17:eb:42:47:cd:3b:90:69:cf:f1:f3:
75:99:93:a4:84:2b:06:97:1d:59:80:d4:84:1d:18:f6:d2:35:
95:f3:2a:98:2a:c0:47:9a:d6:f8:87:18:09:3a:7b:08:48:45:
e5:be:f0:42:01:38:58:23:06:fd:f7:00:f1:8f:b9:d6:77:be:
9a:1b:88:94:c7:31:4c:1f:e4:da:05:40:a9:61:43:c3:6b:72:
f9:6c:ad:1e:c5:3e:e5:24:94:3c:11:83:c9:c5:b7:13:06:67:
2f:0e:ed:16:a4:6f:47:87:02:bc:01:71:a2:09:34:2a:e0:8a:
4b:d8:2e:a9:d7:ed:de:02:ba:e0:b3:da:79:64:09:e1:90:8a:
3f:cd:44:05:7f:15:38:29:2f:c1:c1:3a:d5:cc:23:e6:94:f6:
7f:f6:06:01:df:37:62:4d:e5:91:8b:9e:4c:b5:2d:4d:2a:eb:
6a:1d:94:8d:b1:41:f1:bb:76:ad:03:3f:10:7b:33:2e:ac:86:
63:aa:1f:28:bc:f1:9d:8a:18:f5:ae:98:d0:a0:b8:ee:25:63:
9a:3c:91:c3:cf:20:6c:1b:69:cb:a9:03:55:a0:09:6f:21:c9:
79:e6:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:08:23 2025 by rpki-client