Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HeiAoYFTB8enXnV122UsKAm4cJw.roa
File: HeiAoYFTB8enXnV122UsKAm4cJw.roa (raw, json)
Hash identifier: z86qZYP7aD18g1u96XjtRuEBd4NjJETbrSBsq3ORMl4=
Subject key identifier: 1D:E8:80:A1:81:53:07:C7:A7:5E:75:75:DB:65:2C:28:09:B8:70:9C
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0195607ED66EAFD9C1089C1B6EB1818889F9
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HeiAoYFTB8enXnV122UsKAm4cJw.roa
Signing time: Tue 04 Mar 2025 09:31:19 +0000
ROA not before: Tue 04 Mar 2025 09:31:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44803
IP address blocks: 45.136.70.0/23 maxlen: 23
45.153.48.0/24 maxlen: 24
92.119.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:7e:d6:6e:af:d9:c1:08:9c:1b:6e:b1:81:88:89:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Mar 4 09:31:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1de880a1815307c7a75e7575db652c2809b8709c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:bf:49:09:71:2a:ff:c8:ff:9e:c8:9d:ca:
a4:bd:42:cb:1c:b8:00:e3:25:67:2f:2a:47:a6:37:
ee:aa:6c:73:e7:15:4d:d6:03:1f:9c:82:e6:a3:dd:
0c:f7:ba:18:48:76:09:23:16:4d:69:3e:38:c7:9c:
56:8a:da:d7:2e:78:7d:61:54:1e:66:0d:65:be:67:
34:e3:99:84:93:7f:bd:49:4c:92:d7:18:07:fe:f4:
fe:21:05:61:24:d1:18:d0:15:cb:78:61:c5:bc:53:
56:d9:28:c5:c3:ba:2d:46:d3:bd:a2:68:f0:39:ba:
27:b2:bb:07:72:21:f7:03:80:49:6c:d9:96:11:a0:
ae:8b:6c:c8:b8:e8:d4:bc:09:c1:7e:68:f0:57:27:
a0:4f:8e:51:8e:45:57:90:b6:fd:bf:7f:7a:ee:fe:
12:a7:95:5e:22:d8:9a:bf:eb:60:a8:a7:e9:46:17:
19:f2:28:f7:35:d9:55:15:5a:bd:1a:2d:1b:83:22:
5d:b2:44:5b:c1:bf:75:08:30:08:a6:ff:d0:13:5c:
00:be:93:da:37:fa:03:9b:76:1e:c2:88:a2:1b:36:
ae:d1:2e:35:fd:35:94:d4:e9:df:2c:55:30:ac:03:
60:75:eb:d6:d8:c6:d5:0c:4a:d4:6f:39:15:7e:bd:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E8:80:A1:81:53:07:C7:A7:5E:75:75:DB:65:2C:28:09:B8:70:9C
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/HeiAoYFTB8enXnV122UsKAm4cJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.70.0/23
45.153.48.0/24
92.119.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:bd:29:65:d3:7a:9f:e5:ee:d7:f1:b7:c2:56:00:20:1d:5f:
2a:e5:7c:ad:c2:89:f8:33:17:fc:3b:85:ac:9b:3c:3c:35:4e:
ec:21:9b:c4:89:37:0f:43:aa:59:09:f1:3c:c6:51:fe:6a:a4:
7b:e8:2f:9e:9f:78:d9:3f:d6:9f:3d:8f:dc:bc:55:66:ec:7c:
57:c4:0e:93:b0:92:d0:8f:b5:83:72:23:e5:33:78:09:e3:b8:
ce:81:9a:ec:93:04:62:37:17:4d:0f:12:28:09:94:6f:34:82:
59:a0:88:78:41:af:70:24:a4:f3:5f:9d:9f:a9:d4:29:0c:e5:
ca:ef:7c:21:67:a0:f9:cc:9b:cd:db:8f:df:83:47:52:44:a6:
63:c6:ee:17:bc:1e:35:72:61:a3:13:de:52:29:5e:f8:76:6a:
c3:67:60:bd:30:75:05:a0:fc:1f:37:ce:34:5a:16:da:d3:17:
df:ab:91:8a:bf:4a:17:7f:d8:f2:7f:a4:97:3d:c7:8c:97:ad:
3a:28:21:fd:20:3e:d2:c7:6b:86:1b:be:68:69:d9:67:21:ea:
9a:66:26:51:8b:6e:28:07:52:a4:e4:49:ed:71:e1:2d:7b:eb:
d7:b5:ef:23:6e:81:8a:f2:bd:0f:c4:1f:7b:3b:ca:50:55:f2:
32:4c:31:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:35:08 2025 by rpki-client