Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa
File: 5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa (raw, json)
Hash identifier: voEtz6mEruRpxmdJ50z2YHPNPHZIPj+18ktBBGi8uuc=
Subject key identifier: E6:27:BC:24:5E:0A:29:74:AB:33:DD:C9:94:F9:F6:75:5E:15:E9:8C
Certificate issuer: /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial: 01941FFAA61013E4AC7A51BAB285FFB4C157
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa
Signing time: Wed 01 Jan 2025 03:48:27 +0000
ROA not before: Wed 01 Jan 2025 03:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212816
IP address blocks: 45.136.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a6:10:13:e4:ac:7a:51:ba:b2:85:ff:b4:c1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e627bc245e0a2974ab33ddc994f9f6755e15e98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:41:3b:ee:74:0f:ff:06:4e:51:3f:98:3e:
b9:4a:cb:69:52:a9:c6:81:e8:79:99:a0:40:47:44:
bb:f2:72:20:95:33:e2:24:01:55:83:3a:bd:5c:78:
e3:f0:20:4b:bc:20:b6:56:2d:cf:4e:8b:cd:5f:13:
71:29:44:c8:42:3f:c5:9f:f9:22:ed:2c:92:7e:69:
ec:06:9e:9a:f2:d7:8f:41:7f:1a:9b:f2:51:72:6b:
cd:9a:26:36:11:63:a5:68:4c:1f:6b:3e:43:38:fa:
28:99:f5:e5:ea:8b:3c:f8:41:f8:89:1f:b0:40:06:
4b:1c:ac:f0:d1:12:06:8a:07:f0:b3:fd:17:d6:5c:
51:84:e0:5b:0a:f1:8e:89:55:08:fb:c2:6f:d5:99:
8b:ba:1e:8e:0b:69:b2:06:52:4b:d7:cf:7c:1e:67:
f3:dc:92:d0:a0:48:43:be:36:00:b6:6b:39:56:6e:
35:7c:b7:79:4a:92:ec:1e:d5:ed:42:1b:c1:3c:33:
37:7e:33:ee:e3:63:69:34:da:18:fc:b6:5b:97:02:
d0:a9:b9:30:6c:47:dc:14:11:bd:fb:c6:a8:cb:c1:
44:51:28:0d:5d:12:21:e5:c2:bd:0f:ef:7b:de:0a:
23:14:b1:3e:90:37:2b:f2:5b:b0:cd:84:11:b9:0b:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:27:BC:24:5E:0A:29:74:AB:33:DD:C9:94:F9:F6:75:5E:15:E9:8C
X509v3 Authority Key Identifier:
keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.40.0/22
Signature Algorithm: sha256WithRSAEncryption
32:45:c0:bc:ee:e5:cd:24:30:94:a0:fe:9e:4b:d9:95:b1:0e:
ae:57:26:67:d4:37:6a:a4:bd:36:e5:14:4c:0d:ac:01:d3:7e:
27:04:90:f7:18:0a:f4:ac:c5:8b:e5:6a:40:16:6c:5b:58:81:
6c:ce:39:93:a1:d8:d1:da:38:85:81:52:c1:03:65:59:6b:a3:
89:80:67:c9:f0:b6:b9:ff:3f:c2:6d:46:27:de:c5:1f:5e:6a:
db:47:9d:19:91:0c:7c:36:45:7d:02:8b:77:ab:34:09:8e:2d:
51:65:c9:97:c2:c4:73:07:95:4f:fb:b4:60:96:a4:bc:9c:64:
7d:72:46:6b:8a:22:01:31:4b:65:ec:6f:c3:db:76:5c:2b:03:
b0:35:25:3f:f4:e0:9f:81:5f:f4:56:88:50:8e:fa:ea:be:2f:
a3:d1:07:a6:4d:c9:fa:2e:ac:f6:27:13:85:86:20:9c:7b:d2:
3e:1e:70:bc:d9:b7:8a:8b:f6:92:91:e6:16:90:9a:87:3a:f4:
bd:95:d7:98:ae:95:d7:01:c8:46:5d:24:6b:68:03:38:90:a0:
80:03:79:66:70:68:2d:9d:20:ba:67:43:19:29:0f:ae:9f:af:
c4:77:8a:3c:ed:ad:1f:65:20:ae:17:42:b6:26:e4:b6:67:46:
5c:60:d0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:17:22 2025 by rpki-client