Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/rE9cybiH6oB4mGa5EHSN9cceqWE.roa
File: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (raw, json)
Hash identifier: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=
Subject key identifier: AC:4F:5C:C9:B8:87:EA:80:78:98:66:B9:10:74:8D:F5:C7:1E:A9:61
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0194222003BFFB1EFA1C73CAC48769B0A001
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/rE9cybiH6oB4mGa5EHSN9cceqWE.roa
Signing time: Wed 01 Jan 2025 13:48:30 +0000
ROA not before: Wed 01 Jan 2025 13:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48955
IP address blocks: 45.13.176.0/23 maxlen: 24
45.13.178.0/24 maxlen: 24
45.93.128.0/22 maxlen: 24
45.95.220.0/22 maxlen: 24
45.131.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:03:bf:fb:1e:fa:1c:73:ca:c4:87:69:b0:a0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 13:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac4f5cc9b887ea80789866b910748df5c71ea961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:c8:f0:49:37:b0:23:9a:b5:5d:0d:fb:c5:
d0:b2:cf:4f:21:da:99:a5:71:5f:55:15:69:b5:7c:
de:bf:9d:c7:3f:da:c9:d1:97:0f:56:20:77:38:49:
38:0a:73:69:a6:d2:98:ac:a6:8f:0c:d6:a7:de:9b:
11:85:ad:4f:21:56:0d:c2:c1:0e:8c:11:6b:8d:61:
e6:c6:be:53:c7:f6:03:a2:ed:dc:7e:d8:e3:2e:9b:
fc:77:b9:d4:a1:66:0c:16:32:12:a2:68:4a:5c:bb:
f6:cb:cc:3f:7d:c6:63:f6:4b:69:d0:c2:3f:6f:cf:
a0:90:0e:6c:6a:83:bd:2e:ad:d9:ff:94:20:8d:8d:
48:00:b7:19:6f:de:92:19:eb:1e:5f:f0:7e:15:2b:
2d:5f:ff:3b:8c:bd:60:dc:98:ea:2f:21:5c:11:d0:
17:c1:e4:01:b8:35:19:01:6e:18:3b:78:24:6c:3e:
ca:7e:fb:17:1f:70:dc:9e:85:c6:09:05:e1:93:fd:
dd:c5:42:6d:02:25:d4:1b:af:67:0a:f0:74:70:6e:
56:fa:bb:df:81:1e:dc:f9:d9:fd:7f:cb:55:22:1a:
36:42:b0:a6:2d:b8:57:8e:ef:f4:02:85:76:a4:e6:
99:af:e5:76:73:3e:8d:b5:22:ba:53:7f:f2:b7:ab:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4F:5C:C9:B8:87:EA:80:78:98:66:B9:10:74:8D:F5:C7:1E:A9:61
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/rE9cybiH6oB4mGa5EHSN9cceqWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.176.0-45.13.178.255
45.93.128.0/22
45.95.220.0/22
45.131.104.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:ff:2c:10:ba:7e:8e:12:97:b4:fb:ad:50:20:2a:f3:fd:b2:
71:5b:3b:67:38:2e:33:7f:31:c3:6b:74:44:f2:ab:fe:1f:a2:
95:b2:3d:de:2b:2f:65:23:81:30:41:83:9f:49:86:e4:1d:ff:
f8:e4:2b:d6:68:96:ec:a4:97:37:d0:0a:52:23:e9:9f:45:13:
26:40:a7:f7:ca:39:39:bd:ae:01:b9:89:dd:ad:db:6d:1b:e9:
53:5c:b7:b6:ec:cc:39:6d:4f:ed:01:fb:e7:f4:8c:04:64:54:
b7:22:dd:a2:33:03:ed:4d:6c:ce:6d:38:11:3f:09:6f:e2:bc:
6c:ba:87:09:ea:d5:ce:7a:6a:68:72:47:2e:62:df:0b:2d:67:
e2:4b:f7:88:8f:48:80:86:13:56:ce:dd:ef:76:c5:cc:9b:fa:
8a:d0:30:80:64:9a:f4:f7:63:11:15:4b:56:d3:46:49:f5:cd:
8d:ef:36:12:58:a2:f1:ad:a9:1c:18:fa:6c:da:db:88:b5:fc:
75:64:83:7f:0f:07:ad:4a:a6:1d:6d:a6:03:8c:9e:bc:ef:dd:
a4:71:6b:b7:d6:d9:b1:88:cd:4e:ef:65:3c:7e:e7:2f:59:96:
34:df:3e:c6:ee:7f:80:c1:00:99:70:21:cb:ef:5b:02:3c:80:
f8:90:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:33 2025 by rpki-client