Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa
File: zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa (raw, json)
Hash identifier: 0LyNXWO0Wf/6GO5a+bSTGSO0K4OEPsxkW9pcYGNMQq8=
Subject key identifier: CD:7D:F3:F8:8B:EA:EC:7E:7F:29:4E:24:D6:52:24:38:29:C6:85:DD
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 019464120B664DCEE032FA4DED227609662D
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa
Signing time: Tue 14 Jan 2025 09:08:11 +0000
ROA not before: Tue 14 Jan 2025 09:08:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208928
IP address blocks: 45.15.0.0/22 maxlen: 22
45.15.0.0/24 maxlen: 24
45.15.1.0/24 maxlen: 24
45.15.2.0/24 maxlen: 24
45.15.3.0/24 maxlen: 24
45.147.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:12:0b:66:4d:ce:e0:32:fa:4d:ed:22:76:09:66:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Jan 14 09:08:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd7df3f88beaec7e7f294e24d652243829c685dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:c2:b1:00:b2:26:15:be:54:d1:77:f8:dd:
8a:1d:1c:ab:60:85:48:c9:8f:8f:41:b7:e1:be:ca:
07:8e:75:65:00:87:77:c4:ab:03:da:93:da:f2:85:
dc:0b:b5:75:e2:b7:52:83:db:37:92:57:ae:45:39:
5b:75:4c:e1:76:48:e6:cf:f3:5b:ca:c1:a1:4d:87:
13:61:81:d4:08:9f:18:a7:5a:74:ad:fd:03:a5:78:
a0:bf:62:3e:ea:0d:ad:5a:33:9a:78:49:7c:e5:a2:
99:59:1b:74:d5:50:c8:ed:be:eb:d2:1d:04:61:65:
72:91:fb:7b:b4:25:5f:ae:06:60:b1:bb:95:f5:37:
2e:73:4e:a8:1d:86:2c:07:d7:fa:43:aa:e3:1f:9a:
a8:a0:ef:07:92:ab:42:c1:3e:bd:2b:bb:ba:4e:5e:
83:db:b9:43:d9:39:d1:ba:48:ea:30:38:b2:ff:72:
b5:a5:03:77:60:3f:2c:d8:9b:be:d6:c4:9e:b7:58:
fd:93:23:3b:5e:f0:40:22:4d:e5:de:e9:e5:6d:bb:
3d:19:2f:be:ab:f2:b0:59:16:4a:e1:93:b7:8b:c6:
1d:7d:06:fa:61:ff:00:d4:ca:c4:cf:5d:64:f5:a6:
a3:d3:20:63:94:d0:b7:42:3c:24:bd:37:22:fb:88:
c6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:F3:F8:8B:EA:EC:7E:7F:29:4E:24:D6:52:24:38:29:C6:85:DD
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/zX3z-Ivq7H5_KU4k1lIkOCnGhd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.0.0/22
45.147.128.0/24
Signature Algorithm: sha256WithRSAEncryption
58:bf:7c:a4:9c:84:f4:91:bd:11:8b:7f:91:58:42:94:41:60:
15:12:a1:40:f9:b1:8d:70:c9:8e:c7:23:11:06:f2:8e:38:bb:
2d:3a:6f:33:dd:0e:20:66:4c:3a:38:5a:45:18:a0:eb:2d:55:
5d:dd:6f:d2:d3:b0:52:6d:aa:c2:2e:26:fa:c1:ef:75:32:6f:
0d:b3:bc:b8:fc:35:aa:2b:03:8b:fc:55:5c:fd:51:0e:e4:f4:
86:67:2c:a1:2f:b3:14:3a:36:77:0a:02:e4:d6:f3:2a:5f:56:
40:14:e9:8e:ed:a6:ff:ad:01:03:fa:f1:c6:67:52:73:d3:8c:
a4:f4:d9:0f:65:07:63:3e:b5:4a:a9:33:39:c5:9e:4e:e0:03:
fb:b2:7e:9e:5f:1f:63:90:d8:83:14:82:38:5d:09:94:9a:0d:
ae:ad:b5:1e:3e:de:b6:60:81:f4:97:d7:02:ca:bf:66:9a:7e:
ef:70:d1:58:78:95:2e:93:29:9d:0d:3e:24:6a:65:6e:70:94:
fe:55:5f:ca:a8:b0:20:55:4a:eb:6a:34:03:14:9a:1c:0e:d9:
2a:cf:52:af:b9:a8:a4:14:ab:e5:39:dd:b9:9e:6c:19:af:39:
96:a2:ce:fc:1f:ea:b2:bc:43:06:33:4a:5b:c6:d6:6d:8b:fc:
03:08:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:35 2025 by rpki-client