Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7ojxdO3WQXP1f2Je46g3K3Jr9J0.roa
File: 7ojxdO3WQXP1f2Je46g3K3Jr9J0.roa (raw, json)
Hash identifier: OWKX/tClFO5zaIAEZ+aTBfUkrL1WeJEVtvr7CGpLdSg=
Subject key identifier: EE:88:F1:74:ED:D6:41:73:F5:7F:62:5E:E3:A8:37:2B:72:6B:F4:9D
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B2531878732235033BFC77806895C0
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7ojxdO3WQXP1f2Je46g3K3Jr9J0.roa
Signing time: Wed 01 Jan 2025 11:48:42 +0000
ROA not before: Wed 01 Jan 2025 11:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400529
IP address blocks: 45.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:53:18:78:73:22:35:03:3b:fc:77:80:68:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee88f174edd64173f57f625ee3a8372b726bf49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9e:29:9d:19:8a:a9:27:49:dc:33:92:2b:91:
38:64:85:55:a9:4a:bc:d7:00:f3:43:e8:99:9d:63:
3a:64:5e:78:a1:00:a5:75:e9:d0:5d:d5:04:64:a2:
ce:e7:9f:85:a4:f6:20:b4:b5:fc:75:c6:2a:0b:b7:
1a:fa:d0:9a:bb:16:55:a7:1b:59:37:28:2f:31:aa:
11:1f:8d:7e:3a:7f:13:e0:9c:0f:2b:19:64:bf:b6:
1d:49:42:e9:3c:46:f0:83:ca:54:a2:3f:0e:3a:11:
da:76:3d:81:8b:39:83:94:14:9f:a4:19:d0:fa:59:
63:65:74:7e:4e:f1:f5:c6:6a:65:bf:ae:0c:0b:70:
99:bf:b9:d6:5b:3c:3a:b7:89:a1:f1:fb:c0:0a:40:
67:58:e1:aa:67:60:48:04:f1:6b:ce:05:b3:38:8f:
5d:cc:1c:68:bd:4e:48:63:b5:94:fc:ab:c2:ad:34:
c6:f1:3a:a8:98:43:a2:ed:44:1a:87:7a:15:6c:a4:
8b:61:72:95:4e:ba:c9:6a:b8:a5:f7:82:a1:71:0d:
63:e4:33:50:c9:b8:88:06:ee:5c:db:aa:33:20:5c:
d1:7f:19:9a:ff:8e:a0:db:67:34:63:e2:ab:46:e4:
9d:ea:31:b6:49:6c:af:4e:65:32:9e:aa:85:d7:f0:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:88:F1:74:ED:D6:41:73:F5:7F:62:5E:E3:A8:37:2B:72:6B:F4:9D
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/7ojxdO3WQXP1f2Je46g3K3Jr9J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ee:51:64:52:93:74:9d:95:3d:96:7a:af:0d:f2:a1:84:de:
00:0c:82:b0:be:33:94:3a:8a:a2:15:6c:3e:4d:22:da:1b:0f:
88:c9:51:b7:d0:e4:36:5b:ae:7b:29:68:9e:70:0d:9a:06:83:
d1:76:e5:f0:f0:c6:a6:8f:9e:28:6a:44:03:0b:9c:cd:dc:21:
65:2c:62:15:4e:63:66:e5:9e:0c:39:28:e3:0a:94:82:38:c0:
18:b9:fd:60:e8:d8:c5:cb:f3:01:7b:38:29:49:81:1e:4d:82:
60:52:6b:d1:61:5b:ba:d8:1d:ff:c5:13:a1:31:14:e1:f6:3c:
03:fb:a3:5c:bd:b4:cb:36:f3:4e:68:58:a1:71:75:e2:b3:bb:
74:06:da:77:73:5a:9f:53:20:ff:7e:13:64:70:fe:d7:ea:9d:
cc:3a:3d:ba:2f:6a:65:50:e1:40:82:4c:4e:96:57:bf:32:70:
5f:c5:8b:7f:f2:0d:d5:b9:26:a4:d0:7e:d4:1e:bc:18:a5:f8:
05:48:21:21:4d:0c:19:a8:6d:db:24:15:ed:0b:45:dc:87:5d:
e3:3a:39:d7:6e:0e:dd:e3:67:20:9b:7f:83:fe:7b:60:7f:1f:
92:e7:57:30:e4:23:05:b1:7b:27:84:70:d8:07:e8:f3:7c:75:
24:f6:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:04:29 2025 by rpki-client