Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fs1opBD4kQBa99PFXIpD6uKomSQ.roa
File: fs1opBD4kQBa99PFXIpD6uKomSQ.roa (raw, json)
Hash identifier: vSb2wVt/UtTP7BbL+Vcm1d0jcKcfKyDa5rR15ChAwtc=
Subject key identifier: 7E:CD:68:A4:10:F8:91:00:5A:F7:D3:C5:5C:8A:43:EA:E2:A8:99:24
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019421B23C79AB6841BF60EDDCB40AA177E5
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fs1opBD4kQBa99PFXIpD6uKomSQ.roa
Signing time: Wed 01 Jan 2025 11:48:36 +0000
ROA not before: Wed 01 Jan 2025 11:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58110
IP address blocks: 45.15.184.0/24 maxlen: 24
45.88.169.0/24 maxlen: 24
45.92.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3c:79:ab:68:41:bf:60:ed:dc:b4:0a:a1:77:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 11:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ecd68a410f891005af7d3c55c8a43eae2a89924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:f9:cc:ef:52:86:d0:25:fa:b1:08:c0:36:
2b:49:91:23:5b:d6:c6:cc:48:30:b5:c5:df:29:46:
64:ac:2b:15:22:e1:d9:65:b6:a9:09:8d:ed:6f:ca:
5a:fd:f6:8b:50:dd:25:b6:51:b3:4d:78:39:a3:b3:
a2:7b:14:08:79:51:a2:9d:95:f4:23:ed:5e:94:3a:
58:f2:2b:02:32:80:09:f4:7d:45:48:5e:f1:16:4f:
04:d3:d4:03:b7:b8:4d:99:62:85:02:f1:9b:25:b4:
88:b9:e3:a2:36:c8:42:17:c1:63:21:fd:d5:a0:f6:
17:df:a8:93:31:47:7c:0e:ee:ea:84:1b:e6:e9:2a:
88:d7:a6:dc:b0:a7:f2:b5:35:bb:8d:a6:f1:fc:e3:
e5:f6:c5:70:bb:04:32:46:a7:75:7b:f6:00:82:55:
4f:70:65:c4:05:a7:a1:4e:1e:fc:69:29:a6:28:31:
d1:a8:0f:ac:01:a6:b3:c1:01:d5:90:6e:30:84:a0:
a5:cf:32:53:31:02:fa:d9:63:a5:9e:08:86:32:94:
a6:6c:e8:ba:09:46:dc:1a:8e:16:11:e0:8d:ad:f7:
cc:b2:1d:f6:dd:d9:3c:9c:33:27:d2:3b:59:e2:b3:
e1:1f:87:c5:49:60:7a:05:6d:d5:51:a4:23:b7:0d:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CD:68:A4:10:F8:91:00:5A:F7:D3:C5:5C:8A:43:EA:E2:A8:99:24
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/fs1opBD4kQBa99PFXIpD6uKomSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.184.0/24
45.88.169.0/24
45.92.162.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:65:0a:f4:c6:42:8e:d8:9c:06:04:f0:8d:26:82:16:8f:c2:
5a:67:bd:ef:52:19:b8:7d:86:7d:c7:de:65:17:0f:b4:51:06:
a1:69:d4:11:29:dc:0f:f5:f5:15:97:40:56:af:22:f4:58:28:
b3:23:c9:8d:74:47:d3:ab:62:9f:5d:f0:38:d7:1f:33:60:14:
c2:38:fe:b1:73:bb:25:cf:7e:50:35:e3:09:cb:ef:09:7c:55:
71:20:19:45:96:1d:42:09:70:a9:42:72:92:17:11:8c:d6:2a:
97:bc:64:3a:3f:4e:8e:44:01:56:0b:d7:cb:b3:0d:cc:e6:40:
18:0e:96:7d:5d:4d:7a:ed:ac:03:b2:c3:8f:d9:3c:bb:d0:5a:
38:3c:0e:3d:ed:cc:39:f0:78:6b:38:6c:82:f1:83:07:fd:e2:
6b:22:c7:1d:b5:b0:c9:23:43:4f:3c:d0:f4:53:dc:5a:e3:f4:
6e:71:66:e6:b8:aa:28:f9:16:6e:7f:97:bf:62:7b:d9:57:64:
be:5b:76:da:65:d3:49:4f:e2:60:b7:a3:5d:67:b7:f2:8b:a2:
c5:58:fa:20:35:72:1d:e7:01:59:26:30:36:dd:ff:06:6f:39:
71:73:32:66:b2:0f:39:81:34:74:10:f1:94:52:7c:2d:20:86:
ec:da:fb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:25 2025 by rpki-client