Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/TydRWxXZQOtNWFnr_XG63P2ou-E.roa
File: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (raw, json)
Hash identifier: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=
Subject key identifier: 4F:27:51:5B:15:D9:40:EB:4D:58:59:EB:FD:71:BA:DC:FD:A8:BB:E1
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 019420D62A2F69D49630694C36B91C9C08FD
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/TydRWxXZQOtNWFnr_XG63P2ou-E.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199631
IP address blocks: 45.155.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2a:2f:69:d4:96:30:69:4c:36:b9:1c:9c:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f27515b15d940eb4d5859ebfd71badcfda8bbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:94:a2:ae:59:f4:3d:2a:2e:21:68:1a:9f:
19:16:74:e6:e8:73:19:a3:18:30:4c:31:97:2a:96:
9b:c5:ca:7d:ad:95:8f:9c:65:64:bf:7e:31:4f:25:
ca:76:31:0b:cd:ac:8c:b4:13:14:b4:63:68:24:69:
68:da:66:29:8c:d8:86:77:3a:dd:8b:f2:18:aa:f7:
e6:e0:49:e0:14:fe:96:74:3c:94:27:7b:5e:9c:f9:
8c:97:2e:90:24:74:f5:36:c3:22:9c:12:1a:78:bd:
89:d4:54:cf:c1:c7:5e:2f:a0:ee:66:8a:90:68:24:
c0:eb:5a:ee:61:69:29:0f:6b:cb:a5:8d:b6:c8:9e:
9f:11:9b:fe:82:8d:c6:cd:11:bc:8d:5a:74:63:02:
36:53:d1:dd:3d:01:6a:3e:e4:01:2b:ca:94:4b:11:
e5:42:dc:3a:7f:99:50:ee:7c:81:19:4b:41:ff:8e:
fd:2a:b5:b7:f1:13:b9:e4:0b:c8:8c:9f:18:2b:03:
2e:90:ee:ff:3b:d8:e8:f9:25:ea:95:dc:c0:c8:be:
c2:80:bd:dc:ad:e8:d4:89:44:b7:e6:7b:8d:b1:16:
a7:1b:a0:d2:19:46:0f:79:cc:95:39:94:67:76:b7:
4a:d5:5c:f7:84:57:c1:76:8f:70:7a:fe:ec:1a:52:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:27:51:5B:15:D9:40:EB:4D:58:59:EB:FD:71:BA:DC:FD:A8:BB:E1
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/TydRWxXZQOtNWFnr_XG63P2ou-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fa:c2:49:35:96:ed:6a:45:5d:88:c6:84:e2:2b:66:a8:75:
62:c1:e8:2f:14:55:da:ea:b9:19:85:60:2c:81:c5:34:6c:73:
60:e8:3a:d2:98:07:c5:66:72:2c:41:92:82:6d:47:9c:b3:f8:
51:ea:5c:ca:96:d6:5e:c1:40:6f:26:87:69:d6:6f:83:9e:ff:
0d:fa:ad:f3:6f:e6:be:97:da:6e:8a:2b:c1:c8:05:a4:32:9d:
77:10:44:8d:6d:61:38:47:be:b2:f0:f1:67:7e:05:9e:dc:c2:
1f:f2:65:ee:72:3e:90:11:b3:bf:e6:ac:48:4c:17:4f:88:b7:
93:90:65:57:01:05:c0:55:d1:ff:cb:d5:b2:66:72:cb:ba:ea:
dc:20:75:cd:8f:a9:df:e7:e9:d0:c8:6e:c9:83:88:f9:13:30:
d8:50:cb:33:21:23:60:a1:c4:96:28:33:9f:7a:20:2b:b8:60:
e5:37:48:d5:a1:ea:23:27:6b:6e:50:a4:77:74:68:49:61:94:
b8:a0:2f:dd:b6:0f:40:1c:23:de:6c:5d:13:b6:64:07:27:31:
0f:42:68:b9:29:09:4a:cc:46:97:33:fc:81:e4:6e:e9:62:0a:
cc:b4:48:0e:8c:a6:e1:86:a7:cf:a8:ae:83:02:40:5b:5e:3b:
7e:f3:ea:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:04:26 2025 by rpki-client