Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/CXLJsfdv2mQYEw_nRCBRyHgGrls.roa
File: CXLJsfdv2mQYEw_nRCBRyHgGrls.roa (raw, json)
Hash identifier: gIlLTUkZL/5+bXwsRESHghLIgWvhwbD5U5vB0n4lI0k=
Subject key identifier: 09:72:C9:B1:F7:6F:DA:64:18:13:0F:E7:44:20:51:C8:78:06:AE:5B
Certificate issuer: /CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Certificate serial: 01955CD296A964433D254D50B72FE81FD69B
Authority key identifier: 5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/CXLJsfdv2mQYEw_nRCBRyHgGrls.roa
Signing time: Mon 03 Mar 2025 16:24:19 +0000
ROA not before: Mon 03 Mar 2025 16:24:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200017
IP address blocks: 45.134.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:d2:96:a9:64:43:3d:25:4d:50:b7:2f:e8:1f:d6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf31afc36cb6955007fe97ed4a5e3185d2271ba
Validity
Not Before: Mar 3 16:24:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0972c9b1f76fda6418130fe7442051c87806ae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:69:ab:fc:be:27:84:67:13:90:74:15:7c:
80:aa:b9:06:c2:16:ea:45:dd:cc:84:47:6d:83:14:
38:3d:52:e7:bd:46:9f:3c:f0:a8:a9:a8:af:7d:c8:
9d:92:8d:1a:3a:08:f3:39:f5:7a:00:70:78:0d:92:
a0:1f:37:78:af:0a:5e:17:03:26:14:ef:a6:f4:30:
c8:e8:46:71:05:77:91:76:4b:6b:ea:a2:8f:93:da:
48:c3:ff:7f:3b:d1:a1:68:86:68:13:a3:c1:b7:87:
6f:7e:97:44:42:f8:86:bd:fc:41:52:c7:c6:99:30:
98:6b:bf:42:81:d4:26:76:b0:a8:b9:7e:6a:ff:ec:
38:87:84:de:b5:a1:d3:47:63:44:eb:d3:d2:81:aa:
7d:df:84:b1:af:88:0c:39:ff:01:89:97:b5:25:02:
2d:fd:a5:6b:48:e5:10:8a:11:a5:19:13:b9:d6:ec:
ea:0f:19:ce:d9:d3:c6:0b:e8:74:a2:5c:e3:c2:22:
49:98:25:86:9c:2a:53:ab:c9:77:f8:6f:89:27:cb:
34:33:ea:e5:30:92:45:cc:3c:fc:21:bf:ba:29:0c:
79:9d:bd:86:88:72:f2:8c:1e:d6:92:68:0c:d2:b1:
69:3c:94:2a:0b:7e:4a:f5:d4:39:a7:2a:0b:53:83:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:72:C9:B1:F7:6F:DA:64:18:13:0F:E7:44:20:51:C8:78:06:AE:5B
X509v3 Authority Key Identifier:
keyid:5C:F3:1A:FC:36:CB:69:55:00:7F:E9:7E:D4:A5:E3:18:5D:22:71:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPMa_DbLaVUAf-l-1KXjGF0icbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/CXLJsfdv2mQYEw_nRCBRyHgGrls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/458ec3-0451-4e41-9a34-736d12888ca8/1/XPMa_DbLaVUAf-l-1KXjGF0icbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.73.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:53:2d:6d:00:37:70:a5:51:f8:c2:9f:e6:27:36:d5:f7:05:
f1:49:fe:63:f8:b1:7d:36:c6:00:3e:c0:ca:ec:4b:23:4e:78:
32:37:64:34:5d:f1:ef:13:0b:e6:c1:05:eb:f1:6b:5f:3a:57:
66:f5:63:05:2f:ea:9a:2a:31:36:a7:f3:e8:6a:8e:fc:06:d8:
ec:71:26:d0:bf:31:2f:7f:b8:ca:f7:1d:80:53:64:c3:fc:fb:
b6:89:8c:9e:d1:34:f7:ed:f5:b3:42:4f:65:80:7e:ae:92:b9:
00:d5:4c:4d:55:c7:b1:32:42:58:dc:d7:36:14:ae:25:8c:27:
96:d6:e5:a7:bd:1b:62:7b:69:fa:44:9d:d9:a6:e5:51:0f:b0:
ef:f1:f1:4d:40:f9:a5:96:4a:60:b2:06:b6:0b:ed:4b:7b:83:
1d:a1:a6:ca:e5:33:c9:6e:f3:89:b8:c7:1f:c5:d3:47:d7:80:
88:7f:b9:de:95:78:b5:c8:20:b8:dd:e1:ea:6d:0f:20:4a:15:
05:a7:3a:fe:1a:eb:72:ba:85:af:7f:3c:b9:4d:e4:6d:26:68:
9e:00:85:cc:03:b6:23:aa:6e:95:7d:ab:71:82:cf:eb:e8:d8:
da:7f:a5:23:b0:d1:50:fe:25:94:da:8a:9d:74:24:20:2f:97:
fe:c5:5d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:32:02 2025 by rpki-client