Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/iWujOO5h_XVMHY2nSFxBko0o46E.roa
File: iWujOO5h_XVMHY2nSFxBko0o46E.roa (raw, json)
Hash identifier: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=
Subject key identifier: 89:6B:A3:38:EE:61:FD:75:4C:1D:8D:A7:48:5C:41:92:8D:28:E3:A1
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 019426D96585A7BE2D6D1C0E75C8EE1E8004
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/iWujOO5h_XVMHY2nSFxBko0o46E.roa
Signing time: Thu 02 Jan 2025 11:49:28 +0000
ROA not before: Thu 02 Jan 2025 11:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 45.136.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:65:85:a7:be:2d:6d:1c:0e:75:c8:ee:1e:80:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=896ba338ee61fd754c1d8da7485c41928d28e3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ae:13:5d:86:92:21:61:0b:b4:84:55:0e:8e:
99:9e:ab:bc:8d:6f:60:e7:5e:0e:1f:7b:42:fe:10:
1f:fe:31:33:35:37:a4:a1:ae:e4:69:0c:7a:c0:d3:
a1:91:d3:86:43:c7:58:5a:01:13:7d:00:e7:e5:f7:
2c:bc:4d:98:2c:8c:26:4d:83:7f:b1:f0:f6:20:b6:
91:7d:94:1b:b1:74:5d:0c:eb:50:1f:b7:e2:2c:fb:
e7:14:c7:8c:21:d0:2d:6c:41:27:b3:15:d5:15:a1:
a8:33:d0:f4:c8:3a:28:0b:1b:c6:1f:cd:10:30:40:
08:96:1b:64:c9:b6:86:ef:cf:88:98:a5:f6:c8:fb:
4c:e3:49:5b:7b:48:1f:f5:70:db:33:0d:0e:81:2b:
8c:44:40:c4:37:a4:b9:f8:fd:f1:89:e7:47:98:21:
93:c3:80:43:dc:dd:31:41:2b:0f:e3:a5:bf:14:ed:
ff:6b:e1:7d:83:af:58:62:98:db:48:e6:23:93:ee:
d4:f9:a2:2a:41:cb:e4:f6:5f:52:32:0a:21:4a:3f:
3a:98:d1:12:d0:91:82:8b:11:40:73:5f:2e:0c:84:
32:91:a1:9d:42:8e:07:1d:14:0b:fa:02:8c:8d:17:
44:e0:75:8e:49:cb:59:0b:d9:62:25:74:77:60:26:
31:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6B:A3:38:EE:61:FD:75:4C:1D:8D:A7:48:5C:41:92:8D:28:E3:A1
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/iWujOO5h_XVMHY2nSFxBko0o46E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.240.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:15:ba:6b:67:a7:11:9b:31:17:34:12:d2:12:8b:a4:55:1b:
3d:ca:e2:ea:f5:ec:cb:b6:71:d9:de:72:f4:e7:09:49:d6:e1:
36:98:11:56:01:ba:67:3b:a7:f3:ac:32:e6:d6:12:af:b8:ec:
b9:00:63:02:89:ba:85:88:00:49:77:55:7b:e2:92:34:d6:be:
98:15:9f:8e:55:ca:36:e8:89:15:2f:9d:4b:bd:2d:92:9f:3f:
b1:72:25:03:cb:79:74:cc:1c:91:fc:e7:ea:99:31:2e:63:9e:
98:29:61:72:68:1d:a0:08:eb:0d:8d:d8:79:a6:af:ad:ce:87:
d5:f7:fa:f7:9d:1b:f3:71:80:28:e3:66:57:e9:f0:a3:d0:0e:
30:30:51:92:e4:2b:f4:9f:47:b3:a1:4c:b9:22:0d:11:4e:c1:
33:a3:eb:e0:12:bd:ae:d4:4b:d2:bc:a6:8f:de:4c:0e:8d:e7:
d7:2a:57:97:84:18:92:2e:a8:4a:6e:19:f3:73:e9:88:a3:35:
58:0e:40:6b:08:55:a3:97:2d:ed:52:16:ef:b7:48:e5:7b:21:
cb:d2:6d:6a:04:af:7d:df:c5:6c:38:38:f1:c9:db:b0:3a:4b:
5c:c6:56:ba:f0:f1:69:6f:c8:2f:5e:ed:2e:3f:aa:dc:3a:2f:
5c:47:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:17 2025 by rpki-client