Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-wQ9N7FF9mEDQIsGr4i9lfO1Z8U.roa
File: 1-wQ9N7FF9mEDQIsGr4i9lfO1Z8U.roa (raw, json)
Hash identifier: hwcricUjO6SemGG2HSnnYI3wBTUxAlSRBZXdZVk/LQc=
Subject key identifier: FB:04:3D:37:B1:45:F6:61:03:40:8B:06:AF:88:BD:95:F3:B5:67:C5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01954D47B54AF81B143C6EFA4D417A2155F4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-wQ9N7FF9mEDQIsGr4i9lfO1Z8U.roa
Signing time: Fri 28 Feb 2025 15:58:19 +0000
ROA not before: Fri 28 Feb 2025 15:58:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208959
IP address blocks: 45.9.118.0/24 maxlen: 24
45.12.61.0/24 maxlen: 24
45.142.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:47:b5:4a:f8:1b:14:3c:6e:fa:4d:41:7a:21:55:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 28 15:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb043d37b145f66103408b06af88bd95f3b567c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:90:7f:f8:cb:bb:df:39:30:1e:5e:a5:aa:
b6:99:56:68:1b:8e:e4:b7:8e:73:f4:f2:87:ab:13:
2d:17:0d:1e:92:05:e9:95:25:ce:e6:37:90:ec:d7:
ef:c7:e2:75:cb:f5:5e:8f:b9:f8:1e:e6:ed:fa:09:
f7:8c:aa:92:03:cd:de:dc:03:4a:4c:ca:95:48:6f:
e4:18:47:88:2f:5d:92:0c:fd:47:7c:c5:aa:c9:1a:
53:10:f6:bf:06:79:4f:45:cf:e5:31:77:d1:cb:93:
29:87:62:f8:10:3f:54:d2:31:46:a8:1b:b2:bb:7b:
6e:c3:62:dc:d0:a5:cf:a9:7f:9a:7a:95:93:36:12:
34:58:be:1d:3f:97:c8:e3:9c:3f:5c:b6:47:92:93:
df:75:e1:e6:8d:2c:ff:19:50:b7:25:e6:da:59:94:
c6:78:4c:2d:a3:df:79:40:da:47:34:c6:cc:d5:d8:
b1:28:1b:13:43:88:e7:1c:5d:4b:ed:50:24:3b:5d:
99:f4:14:cb:06:14:a5:46:66:45:a4:3a:8f:88:ed:
c9:9c:4e:ec:29:bf:39:67:b5:56:39:e3:d8:4d:29:
58:35:fe:7d:fc:fd:c4:19:13:c1:8e:1b:c0:b4:c4:
4a:3e:be:b3:bd:f3:ba:d2:5b:4c:6b:90:43:fa:98:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:04:3D:37:B1:45:F6:61:03:40:8B:06:AF:88:BD:95:F3:B5:67:C5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-wQ9N7FF9mEDQIsGr4i9lfO1Z8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.118.0/24
45.12.61.0/24
45.142.28.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ce:6d:b7:7d:06:d4:0f:ee:7a:9d:ea:14:39:68:73:63:38:
c5:61:17:76:40:8e:5f:87:3b:54:10:ee:b0:f7:bc:50:b9:84:
cc:ca:c2:f6:04:c8:fd:36:d4:55:ef:fb:6e:c6:b1:1d:39:80:
3a:ad:21:2a:a7:4d:e9:37:d5:4b:92:27:69:b5:49:51:46:36:
b2:73:59:d4:80:e7:c7:9d:b9:09:92:0a:10:06:cc:73:4f:bc:
dc:67:86:98:df:9f:1f:52:90:81:fd:f8:b2:91:f7:e4:84:11:
86:5b:ce:71:20:f4:93:07:5a:04:06:05:a3:4a:fe:61:6f:a2:
c1:52:c7:54:bb:ef:6f:e6:3b:b3:f7:8e:3a:44:5e:0a:e9:68:
4b:a9:44:2d:39:fe:90:48:30:39:fa:1a:4f:7f:54:c6:0e:b9:
5e:66:e1:73:17:cf:5f:7d:45:38:c1:5c:d6:ec:38:17:18:dc:
3e:80:19:f0:20:9d:61:2a:f1:90:6b:db:47:ee:02:b8:02:a5:
28:0d:ca:30:e8:ae:28:a5:56:be:7f:f7:33:83:3d:94:0d:ff:
85:47:8a:a7:0b:2b:b3:0e:94:f3:44:76:b4:bf:2b:12:d7:93:
1e:e8:49:95:e5:98:bb:22:9a:38:91:e0:f1:d7:35:18:f5:cc:
cc:3f:aa:f9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:02 2025 by rpki-client