Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/1FRdiyb2IlZHXUod0EZtqjIuV48.roa
File: 1FRdiyb2IlZHXUod0EZtqjIuV48.roa (raw, json)
Hash identifier: yKc3udCTzpcxZg08Iku4TuTVL01TeqCQ6AGsUIubbLc=
Subject key identifier: D4:54:5D:8B:26:F6:22:56:47:5D:4A:1D:D0:46:6D:AA:32:2E:57:8F
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0194228E356F38713D7F66480638A8A52F90
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/1FRdiyb2IlZHXUod0EZtqjIuV48.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19437
IP address blocks: 45.143.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:35:6f:38:71:3d:7f:66:48:06:38:a8:a5:2f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4545d8b26f62256475d4a1dd0466daa322e578f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:be:56:f9:4e:18:59:2e:0b:bd:8d:04:b0:
7c:fc:68:b6:46:66:1d:f4:40:08:d1:66:70:f3:9c:
55:9c:72:c0:1d:47:d8:58:37:32:1f:b6:68:f1:33:
a6:25:ef:16:af:86:26:84:37:70:14:e0:df:39:41:
e2:5b:3c:41:3f:f5:d6:79:8e:59:0f:9c:cd:01:91:
1f:a7:69:7a:8c:4c:39:5d:31:da:bb:d8:89:fc:82:
a1:57:4f:f6:6b:4c:a5:eb:82:64:02:58:e9:52:1e:
83:e8:52:10:6f:71:ff:4e:e7:36:01:4e:fb:05:19:
3b:ef:57:e1:96:f6:1c:9f:bf:f7:03:3d:2c:05:0b:
18:f8:1b:6c:a4:66:74:b7:5c:f5:0a:ef:91:d9:82:
83:3b:12:35:69:99:ef:2d:48:dd:a3:a3:22:f4:fc:
65:02:9e:93:be:83:32:27:3d:f0:af:3e:e1:85:9a:
f1:da:f3:7f:e3:44:e4:54:a0:9b:97:64:b1:d2:38:
ab:d6:54:f6:1b:e8:9f:c3:d5:46:05:3c:0e:f3:d6:
d8:b0:25:ed:a4:93:09:69:1a:67:96:ff:fe:ba:43:
ca:17:78:a6:73:d6:6a:80:da:be:ad:6e:ed:f5:c2:
15:64:32:9c:87:3f:a0:b4:cd:74:c6:8e:d4:d2:be:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:54:5D:8B:26:F6:22:56:47:5D:4A:1D:D0:46:6D:AA:32:2E:57:8F
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/1FRdiyb2IlZHXUod0EZtqjIuV48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.163.0/24
Signature Algorithm: sha256WithRSAEncryption
27:00:af:b9:30:bf:9f:72:c6:e4:cc:9e:b4:75:36:a6:b7:70:
6b:dc:09:09:7d:97:1a:18:76:24:68:d0:91:21:4d:1c:42:00:
a6:11:5f:3c:45:2a:b6:57:79:f2:65:c9:cc:90:c7:6c:b1:9a:
01:1c:04:f3:f3:57:b0:02:0b:84:f3:b4:8c:5d:dc:2b:b3:ad:
88:09:af:40:b4:40:4a:f4:2b:db:72:08:8a:c5:39:4e:cd:0b:
8e:11:49:de:ee:d6:1a:25:9a:a3:b4:a4:d5:7f:da:a9:9d:a2:
f7:9d:15:ff:9f:71:bc:c5:5e:f5:01:e3:ed:3b:fe:e0:88:d9:
71:2a:f5:78:04:64:9c:1c:f4:ce:b9:2a:00:51:fa:a6:26:4c:
d3:bb:01:bc:28:31:85:59:6a:33:14:d4:09:6b:19:79:a5:04:
8b:8b:b9:6a:36:22:d3:03:1c:67:7d:23:bd:8d:a2:d4:40:c7:
4d:97:87:1b:f9:51:c1:d5:41:7f:95:ba:53:42:59:f4:f6:3f:
b0:d7:c0:b6:37:a4:5e:f7:2d:56:79:7f:d5:9e:85:e2:d5:b4:
c7:7b:09:6c:20:f9:31:7c:24:2e:b9:e0:34:b5:2a:a9:79:7d:
52:d4:0b:7f:fa:fd:98:41:46:19:b6:23:35:5a:9a:04:2b:56:
99:41:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:46 2025 by rpki-client