Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa
File: dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa (raw, json)
Hash identifier: yPB+megpjB1yqKHInLenUJsMo1ixynNI2NtglnJ5Xh4=
Subject key identifier: 75:98:91:0E:97:5E:DD:43:90:D7:1C:76:28:C8:E0:EE:7F:1F:47:95
Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7
Certificate serial: 0194228E450E779083540B0B993AD3DD37D7
Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa
Signing time: Wed 01 Jan 2025 15:48:56 +0000
ROA not before: Wed 01 Jan 2025 15:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 45.149.168.0/23 maxlen: 24
45.149.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:45:0e:77:90:83:54:0b:0b:99:3a:d3:dd:37:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7598910e975edd4390d71c7628c8e0ee7f1f4795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:23:ac:5e:6f:a6:2e:b4:48:42:2f:19:3b:
f5:9c:70:00:16:1b:2c:22:d7:cf:6e:d2:b7:27:c9:
30:bf:14:9e:70:88:0b:bc:c7:df:d6:03:d1:0c:dd:
bf:ca:11:dd:90:56:c4:15:73:2b:9a:e3:ab:35:3e:
c8:5a:0a:1d:3e:23:be:ae:d5:64:89:09:2c:8a:4b:
c4:35:79:93:e6:55:f2:a8:e5:d2:68:cb:14:1f:22:
9c:77:38:82:5b:48:b5:52:bd:53:56:cd:59:a9:ea:
84:90:19:30:c3:26:cb:c1:83:11:b2:6e:fd:0c:ee:
a7:2b:75:2e:31:af:a3:d2:c6:70:be:17:9b:f9:b4:
58:b8:a5:c8:96:6d:c5:91:65:9b:95:e4:22:21:79:
f1:46:ca:a0:1f:2f:c7:02:09:ea:ae:c2:44:07:2f:
e9:9c:1b:2d:05:40:94:81:77:97:ca:36:3a:ca:e9:
b0:a9:ad:05:1b:40:93:f2:45:cb:9e:7e:2e:22:a8:
9c:ee:dd:49:18:80:fb:d3:7b:34:7a:ea:b0:15:46:
a3:4e:19:46:c0:8d:8a:80:46:aa:68:93:c7:9c:c3:
90:79:69:77:4e:eb:d1:bf:71:8d:71:c8:56:ff:84:
e5:f6:f4:8e:94:10:d3:4b:30:a8:3a:15:f3:c5:b9:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:98:91:0E:97:5E:DD:43:90:D7:1C:76:28:C8:E0:EE:7F:1F:47:95
X509v3 Authority Key Identifier:
keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/dZiRDpde3UOQ1xx2KMjg7n8fR5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.168.0/22
Signature Algorithm: sha256WithRSAEncryption
17:64:10:bf:89:bc:aa:4d:a4:90:ad:a6:ab:c6:10:ad:69:8a:
b8:cf:be:8c:4e:4d:c8:7f:27:e1:40:bf:11:6b:51:76:a3:f1:
2f:80:df:4a:b2:76:7d:b8:a7:94:2a:b3:80:c5:03:60:7a:d7:
31:02:56:8b:4c:b8:ce:d6:b3:f3:31:18:ea:fc:d6:2b:41:6c:
e9:a2:24:d4:80:87:17:05:8e:04:d6:b9:9e:96:31:89:ae:36:
cd:b4:eb:0e:0c:e9:97:38:3e:3e:9e:b8:26:2b:62:13:e4:3a:
9c:b8:c8:79:16:54:d7:68:18:45:aa:c3:8b:6c:ae:db:c3:c0:
b3:fc:75:e0:70:5a:a7:ca:a1:42:1e:79:5d:7b:3a:68:6b:82:
39:cb:62:76:e0:40:4e:77:c7:e1:5b:69:84:cd:4a:94:82:c6:
0a:54:7f:57:95:4c:af:11:15:9f:02:eb:f4:ad:43:5d:11:f4:
eb:ce:9b:a0:93:d0:85:1c:a3:91:1b:19:62:0c:ec:3f:79:f0:
00:e8:d3:94:f4:4c:8b:fe:56:13:00:56:52:8f:c2:40:2f:71:
61:d7:a8:a5:99:37:97:84:b8:46:5a:d9:22:80:26:f9:b0:8a:
e6:96:6b:60:a5:f6:39:3c:92:51:1b:51:e5:d7:15:d8:e9:4b:
f9:99:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:52:53 2025 by rpki-client