Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa
File: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (raw, json)
Hash identifier: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=
Subject key identifier: EE:42:92:68:0B:50:5E:F0:CB:C7:09:86:F1:F5:D0:3A:7E:79:1E:A7
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067B8CD918126322ADAF71015B2DA64
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa
Signing time: Wed 01 Jan 2025 05:47:35 +0000
ROA not before: Wed 01 Jan 2025 05:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.152.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b8:cd:91:81:26:32:2a:da:f7:10:15:b2:da:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee4292680b505ef0cbc70986f1f5d03a7e791ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:e8:99:5c:ca:8d:fd:7b:be:9c:42:13:a5:
1a:e4:46:47:60:4d:2c:b9:c5:32:f5:d2:b6:26:fe:
6a:df:52:5c:7f:32:f9:b0:e8:34:e2:66:f3:d2:6a:
95:b8:a4:67:7f:83:fb:f0:4d:cf:fa:e1:f2:8b:f9:
82:40:a4:e9:6e:ad:ce:2e:5c:0f:89:9d:72:da:dd:
9f:45:3c:52:0b:6f:09:e9:6d:4b:a1:53:61:56:e2:
7b:5b:09:67:1f:ba:b3:1e:04:32:f8:a6:28:70:eb:
1e:df:fd:e0:b8:09:95:8b:e2:5c:d1:fa:c5:83:04:
bf:f3:fe:98:e0:b4:b9:9a:44:8f:fc:fd:34:2d:39:
58:86:ab:8c:87:52:fa:e5:78:fe:9f:e5:0f:5c:39:
82:e9:e9:1f:40:77:7f:c0:f8:27:1f:0f:5a:db:6a:
79:88:fe:07:38:ab:69:4e:71:3d:4f:2e:da:55:41:
3c:ae:a9:69:f8:ad:3b:24:fa:35:ed:e7:fe:b1:3a:
8b:33:2d:55:09:ce:20:96:0a:77:1b:f8:b8:08:e6:
4b:0d:fc:40:87:58:27:8c:cd:3b:0d:54:ff:5c:bd:
71:72:06:56:79:19:17:62:26:83:5b:ab:f1:53:04:
0c:70:de:10:fe:a4:7f:99:91:65:cd:27:05:99:99:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:42:92:68:0B:50:5E:F0:CB:C7:09:86:F1:F5:D0:3A:7E:79:1E:A7
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.179.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1c:44:ab:29:71:2c:17:23:6c:49:b0:a2:00:f6:e9:d8:d4:
1f:06:e7:b7:16:09:9b:6b:65:64:18:a0:92:ea:4d:b2:1c:00:
e2:75:9d:da:d3:6b:26:26:d9:bf:be:b6:a8:06:9a:d6:b7:a6:
a5:d4:d2:56:0c:12:22:55:81:1d:a0:35:39:6f:1e:46:fa:74:
58:4a:bc:7b:85:3e:a5:46:fb:c6:6c:98:79:ef:09:48:a3:20:
32:95:59:49:7a:4f:7c:8a:17:37:71:d0:91:ee:f6:a2:20:4b:
c2:1e:8b:93:fc:a4:b6:6f:e8:8f:73:7b:2e:71:c4:22:73:a3:
aa:ab:31:1c:67:dd:36:3d:ea:ae:28:58:6a:e5:3b:a0:76:ab:
8e:68:49:14:06:b9:d3:25:37:73:0b:bf:c7:54:90:73:38:b6:
1c:8d:c1:bf:13:b3:3b:09:56:7a:7b:e1:3d:ed:51:21:10:f5:
84:68:71:a1:ea:47:0a:c2:aa:04:69:2c:e8:61:38:08:2c:35:
76:d5:3f:80:4b:3a:a0:37:ad:69:ee:4c:3d:74:84:ce:22:15:
88:1d:f6:e1:ba:3d:0c:ee:18:5a:37:8b:4f:e2:01:fd:34:96:
2d:0c:c8:82:fb:fb:a7:fd:ba:e6:05:dd:e4:15:3f:ae:42:93:
3a:69:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:22 2025 by rpki-client