Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/5vi5HEIa24OLVlu1NLlqMeqNBBA.roa
File: 5vi5HEIa24OLVlu1NLlqMeqNBBA.roa (raw, json)
Hash identifier: t4iwwwtMrdc2NWlcEkOyxsuPUKCMIObH0+SES3zZ1EI=
Subject key identifier: E6:F8:B9:1C:42:1A:DB:83:8B:56:5B:B5:34:B9:6A:31:EA:8D:04:10
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 0195B3385AE147AE4B57C3A7D989F5624143
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/5vi5HEIa24OLVlu1NLlqMeqNBBA.roa
Signing time: Thu 20 Mar 2025 11:02:49 +0000
ROA not before: Thu 20 Mar 2025 11:02:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199980
IP address blocks: 45.85.208.0/22 maxlen: 22
45.143.72.0/22 maxlen: 22
81.161.108.0/22 maxlen: 22
185.144.244.0/22 maxlen: 22
193.105.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:38:5a:e1:47:ae:4b:57:c3:a7:d9:89:f5:62:41:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Mar 20 11:02:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6f8b91c421adb838b565bb534b96a31ea8d0410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5f:06:c0:6b:fb:c3:20:d0:87:0f:47:4f:3d:
48:2e:a7:96:dd:fb:eb:58:ff:49:8b:7a:fc:d6:52:
2d:b1:71:a2:cd:9a:3d:5a:2c:96:60:4d:3b:db:af:
50:23:9b:b2:d8:9e:80:3e:8a:ef:25:76:8c:e2:52:
c8:66:90:8c:4e:8b:f5:71:c4:f9:45:55:83:de:d0:
62:2c:da:6d:fd:9f:5b:4e:d0:d9:01:25:60:e8:2f:
48:09:9b:80:f9:b9:16:30:dd:21:cf:3d:27:03:e6:
f7:5f:d2:86:1e:8c:c7:14:56:b4:4e:05:4b:ae:90:
62:9f:54:d2:3f:dc:31:2e:b4:bd:63:c6:a4:84:f6:
90:9a:f9:41:e9:87:14:43:51:ad:cd:09:d5:56:48:
df:22:4d:70:80:1d:7e:a1:b6:75:ba:40:05:ce:db:
c2:8d:7a:04:04:af:26:ef:d8:b5:08:70:0a:a2:1c:
46:06:18:3a:dc:65:81:91:f8:5f:d2:a2:de:3c:1d:
8e:87:82:08:56:b9:2d:19:23:f2:9f:49:75:af:f5:
38:15:aa:c7:fd:9b:b4:63:a9:8d:25:59:d8:13:4d:
24:ce:68:1a:4d:b5:5c:ca:b8:f2:72:24:26:7d:df:
38:32:04:42:9c:00:34:9e:bd:b4:3e:31:42:ea:00:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F8:B9:1C:42:1A:DB:83:8B:56:5B:B5:34:B9:6A:31:EA:8D:04:10
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/5vi5HEIa24OLVlu1NLlqMeqNBBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.208.0/22
45.143.72.0/22
81.161.108.0/22
185.144.244.0/22
193.105.178.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ec:bd:3c:d7:be:62:85:85:5a:36:6b:3c:6c:82:ab:00:fa:
e1:03:34:ae:22:bc:95:82:22:d4:78:da:33:79:e1:f0:81:04:
f6:48:a3:bd:dd:44:ad:5f:44:13:ef:ce:cf:4c:35:cc:31:59:
53:03:b7:3a:d1:10:32:65:0a:79:b4:c8:9a:79:a3:cf:d8:3c:
e9:04:bb:6c:19:67:85:4d:05:2e:29:08:ab:52:3f:6b:18:74:
b5:40:ee:c1:b7:de:e2:5b:13:b3:d6:56:2d:de:50:63:96:8c:
d1:bf:da:03:63:e0:16:51:dd:29:d7:38:e4:ad:33:cb:3c:b3:
a0:76:f3:0d:26:fc:70:81:fe:08:f9:5b:5b:11:9d:c7:60:68:
e0:24:6a:e9:14:c8:d4:af:d5:35:4d:b1:2d:62:db:1c:f2:80:
18:81:36:1f:78:dc:f3:b6:44:b6:47:f6:db:fb:61:97:9b:1c:
ec:33:33:64:d9:99:83:30:d8:14:29:dd:d5:77:03:cf:b5:64:
9d:dd:a8:9c:02:7a:c7:c5:1c:63:b1:b7:ea:a6:b5:b7:91:f9:
6e:9e:dd:52:12:db:0c:e8:89:ef:52:4f:46:6d:99:6e:d2:0c:
58:5e:79:15:35:9b:f1:6b:7b:9a:df:12:0d:93:ed:f9:1b:f6:
b6:2a:15:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:07:51 2025 by rpki-client