Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa
File: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (raw, json)
Hash identifier: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=
Subject key identifier: BF:19:29:50:5C:98:FE:95:78:E8:3C:B6:BD:C7:16:FE:41:60:DD:78
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 0194244574C75A441C946DD36D861417B4A0
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa
Signing time: Wed 01 Jan 2025 23:48:39 +0000
ROA not before: Wed 01 Jan 2025 23:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.141.48.0/24 maxlen: 24
45.141.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:74:c7:5a:44:1c:94:6d:d3:6d:86:14:17:b4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 1 23:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf1929505c98fe9578e83cb6bdc716fe4160dd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:f2:16:57:3f:44:e2:cd:b5:7b:bd:3a:2f:
ca:fd:32:4f:d7:ba:5d:e1:e1:b0:bf:76:03:c2:8b:
14:19:7c:96:07:48:df:92:ab:27:5d:bc:8e:3a:08:
18:37:c1:41:30:a8:8c:04:03:19:bb:1d:14:e1:30:
2d:b9:81:ab:ab:ea:ba:c9:0f:54:9a:45:5c:a2:28:
79:02:5c:d5:c8:98:e5:68:9f:87:ba:35:82:4b:1c:
4a:b0:12:f5:74:31:11:cd:5a:fa:3e:ce:46:b8:46:
70:f1:a3:e8:db:9b:b6:8a:b4:5c:ca:07:73:54:5c:
53:29:02:5c:61:39:39:00:f6:53:48:8a:b1:5a:eb:
2e:46:e1:b2:9b:7d:0e:54:a6:6f:3a:77:2e:a0:97:
00:a6:d7:08:67:a2:96:ed:db:f9:78:59:f5:b3:31:
b7:3c:4f:62:a4:e2:51:6b:86:ab:dd:00:0f:39:3a:
8b:f8:b3:35:59:ad:83:ec:be:7e:8a:c9:c8:58:0e:
19:d3:a0:f9:62:74:0b:19:f9:c0:d6:85:35:a4:5a:
0a:bb:37:16:63:3a:14:a9:7d:76:f5:75:77:2a:6d:
ea:23:ee:f8:20:24:8e:88:fd:3d:1e:24:94:e1:6b:
f8:0e:3d:c5:c8:87:39:44:db:2c:07:7c:f5:f3:a1:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:19:29:50:5C:98:FE:95:78:E8:3C:B6:BD:C7:16:FE:41:60:DD:78
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.48.0/24
45.141.50.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b4:20:43:17:13:41:6a:bc:71:02:83:05:6c:bb:03:eb:9e:
b9:57:28:d3:b0:0c:b9:10:e9:bc:71:fb:ca:c6:7a:ba:3e:e4:
32:8b:60:01:bb:54:a9:7c:f8:13:55:ae:06:8e:12:68:24:af:
29:b2:90:6c:69:ca:82:9a:55:a7:a1:1f:d5:56:65:d3:f4:5f:
36:fe:43:6e:84:db:a9:da:62:c7:0a:24:96:3b:98:65:2b:10:
15:7d:39:0f:13:66:73:10:97:1a:1f:2b:ea:f4:1b:05:02:4a:
4f:53:4f:22:7f:e8:b5:24:9e:e3:b4:4a:79:02:8d:dc:45:2c:
9e:cd:64:36:0f:a0:54:52:9d:cf:e9:7a:39:38:10:6c:6a:b5:
5b:d7:33:10:96:75:fa:fe:77:e9:16:5d:77:90:de:bd:b1:a6:
e9:53:65:7f:a9:88:4c:11:45:b1:a9:10:0e:0e:a3:5b:b8:43:
e0:85:48:49:b5:c1:b6:c9:e1:6f:f4:4f:4b:8b:64:4c:46:8a:
e7:10:51:c8:58:9d:98:b3:bd:da:08:30:32:16:92:8b:08:a5:
31:21:11:09:f8:4c:73:2d:54:2e:f3:39:d8:5a:8e:22:a5:4f:
00:a7:68:15:33:c1:7a:09:d9:4b:c5:e4:ca:fa:76:b1:a9:26:
37:4a:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:48:39 2025 by rpki-client