Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5mkF45HVnHwyzhTrQrAWWKHbBxk.roa
File: 5mkF45HVnHwyzhTrQrAWWKHbBxk.roa (raw, json)
Hash identifier: T5KDMudftBxipTFcYP1YnGDc3Lf4bGQY3t0lbSL+tcc=
Subject key identifier: E6:69:05:E3:91:D5:9C:7C:32:CE:14:EB:42:B0:16:58:A1:DB:07:19
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01946393B33E21D90223B4EE79CBDAF08F66
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5mkF45HVnHwyzhTrQrAWWKHbBxk.roa
Signing time: Tue 14 Jan 2025 06:50:11 +0000
ROA not before: Tue 14 Jan 2025 06:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 45.91.22.0/24 maxlen: 24
45.130.141.0/24 maxlen: 24
2a07:e342::/32 maxlen: 48
2a0f:f44::/32 maxlen: 48
2a0f:f47::/32 maxlen: 48
2a0f:2740::/29 maxlen: 48
2a0f:e383::/32 maxlen: 48
2a0f:e384::/32 maxlen: 48
2a0f:e385::/32 maxlen: 48
2a0f:e387::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:63:93:b3:3e:21:d9:02:23:b4:ee:79:cb:da:f0:8f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 14 06:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e66905e391d59c7c32ce14eb42b01658a1db0719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:77:3f:78:9a:e7:d0:9e:6f:c6:7f:ba:a5:
2d:cb:d7:fa:38:53:24:40:52:98:9b:54:36:b4:00:
5e:fd:17:b8:0c:08:b0:1e:35:40:f3:ac:e1:7c:e3:
68:14:98:ec:ac:9e:df:e2:de:46:7a:e5:f6:b0:67:
78:05:7d:f9:c3:74:ff:26:36:76:69:65:2c:2c:4c:
b9:be:d1:9c:5d:cc:7f:c1:4f:19:78:d5:66:7d:83:
fe:67:7f:03:35:65:54:f8:37:56:6b:d0:db:05:75:
f5:37:b0:7e:80:dc:c1:8f:ab:21:9a:60:c0:be:c4:
27:7a:c9:b0:bf:53:fe:fa:43:b1:e7:b6:b5:b2:b3:
70:f8:82:de:80:00:d7:46:99:da:d8:ec:9f:a3:5e:
2f:74:d4:2b:30:a6:e2:96:22:9a:a6:0e:d1:0d:09:
80:55:ac:02:2a:e7:34:70:c5:38:3c:c7:7d:94:cb:
f8:2f:61:8b:b1:5b:26:8b:59:b7:37:ad:c8:90:e4:
42:98:f3:69:e0:1d:b7:c9:3c:eb:7f:42:f2:09:88:
b1:e6:62:07:16:c3:ad:34:ed:55:15:16:8c:fb:ff:
0b:d5:c9:18:ae:cc:17:ff:04:db:10:c1:52:ba:a9:
cd:58:f7:fb:2e:1c:74:77:98:80:b1:de:af:fe:e0:
db:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:69:05:E3:91:D5:9C:7C:32:CE:14:EB:42:B0:16:58:A1:DB:07:19
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5mkF45HVnHwyzhTrQrAWWKHbBxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.22.0/24
45.130.141.0/24
IPv6:
2a07:e342::/32
2a0f:f44::/32
2a0f:f47::/32
2a0f:2740::/29
2a0f:e383::-2a0f:e385:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:e387::/32
Signature Algorithm: sha256WithRSAEncryption
6b:83:7c:23:21:86:94:54:10:72:d1:10:96:01:db:6e:f1:15:
09:7f:6d:81:d1:df:c1:2b:ae:ae:a4:c9:e2:18:d9:4b:3e:77:
e4:31:32:36:77:0d:3f:4f:e4:01:cd:f2:26:06:f2:ae:bf:96:
3f:c2:9d:de:78:fe:8a:f4:2f:da:a5:ae:9b:49:f2:8d:b7:78:
a0:0e:88:93:42:4e:e2:f8:ba:bf:64:86:49:94:a5:44:01:27:
06:8d:5a:d6:05:86:c8:fc:50:72:53:47:39:39:46:36:48:21:
99:b7:3b:a7:cf:73:f2:4b:33:18:22:72:7b:53:be:2b:49:82:
06:f2:b3:1f:78:cd:4e:cb:7c:47:d2:a7:ab:54:10:08:98:59:
ce:14:8f:07:fa:6c:9c:6d:66:c5:51:61:da:4b:91:57:71:f6:
52:28:cf:d4:f1:26:54:d4:d3:bc:f3:33:6d:d3:65:db:d4:40:
c6:ac:2c:1a:6c:2b:a9:b3:0a:97:df:17:8d:64:24:4f:8f:e0:
02:6c:b2:cb:48:4c:ce:07:2b:55:22:3e:83:0a:a2:61:69:03:
1d:af:88:c6:c5:a5:ed:6a:23:a2:3c:f0:4d:79:c7:85:91:96:
89:04:b8:a5:3a:b7:d1:13:b4:51:96:8f:24:a5:31:4b:30:ef:
c7:f7:4f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:50:26 2025 by rpki-client