Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X1ZSsrnS-XXP5V-TR2FZ1yRhkrE.roa
File: X1ZSsrnS-XXP5V-TR2FZ1yRhkrE.roa (raw, json)
Hash identifier: QFgm0mbPRhzs3Sr8jh0/7NlMFtPhuzoOUliXGMjuPN0=
Subject key identifier: 5F:56:52:B2:B9:D2:F9:75:CF:E5:5F:93:47:61:59:D7:24:61:92:B1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01942748328ADC62F9B8C4FED4A90015CE1E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X1ZSsrnS-XXP5V-TR2FZ1yRhkrE.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395954
IP address blocks: 45.145.58.0/24 maxlen: 24
45.147.100.0/24 maxlen: 24
45.147.101.0/24 maxlen: 24
45.147.102.0/24 maxlen: 24
45.147.103.0/24 maxlen: 24
45.152.201.0/24 maxlen: 24
45.155.200.0/24 maxlen: 24
45.155.201.0/24 maxlen: 24
45.155.202.0/24 maxlen: 24
45.155.203.0/24 maxlen: 24
193.8.8.0/24 maxlen: 24
194.41.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:32:8a:dc:62:f9:b8:c4:fe:d4:a9:00:15:ce:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f5652b2b9d2f975cfe55f93476159d7246192b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:7d:39:bc:3a:86:93:f2:ac:79:d6:42:d0:
6e:18:43:13:f4:7a:a8:48:fb:c9:b4:11:29:93:f0:
c8:b8:c9:72:6e:52:be:7a:52:f6:fb:bc:9a:bf:34:
e0:5d:e1:f0:cd:e9:d6:fb:4f:a5:b4:ef:01:fd:f6:
39:08:21:25:a7:f4:84:ba:88:1c:ba:9f:b8:53:7c:
2e:1b:22:e8:0c:67:31:5c:75:3b:ab:e6:8b:ca:93:
ae:0b:3b:c8:ea:0f:39:81:0f:76:d0:6a:65:a5:33:
e0:f6:2d:76:7c:e8:10:82:f7:83:67:8c:14:37:b6:
46:f8:57:02:2b:f7:2d:41:75:9f:9f:0d:3a:b0:20:
08:5a:da:30:71:c6:b1:2b:40:66:a8:13:a4:b5:da:
a4:1b:90:e7:61:b0:bc:6f:19:80:04:74:0d:71:f9:
06:cd:1d:4d:52:ae:53:c3:ca:ed:41:e9:24:83:b7:
97:a3:ce:85:42:a6:fb:ce:87:9b:a7:2c:79:24:ae:
0f:09:61:58:69:e0:07:0f:39:7a:8a:fa:47:04:0c:
00:2f:9c:df:65:e7:41:64:c6:91:98:e1:66:66:a6:
bc:d7:9b:f6:a7:e6:e6:4a:2f:34:ac:1c:be:88:43:
e0:c0:27:79:b8:eb:07:dc:be:00:f9:5d:ac:cf:85:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:56:52:B2:B9:D2:F9:75:CF:E5:5F:93:47:61:59:D7:24:61:92:B1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/X1ZSsrnS-XXP5V-TR2FZ1yRhkrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.58.0/24
45.147.100.0/22
45.152.201.0/24
45.155.200.0/22
193.8.8.0/24
194.41.56.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ea:33:42:e5:29:f0:a3:3f:d5:d3:61:d8:4c:84:f3:77:99:
9d:14:50:5b:ad:dc:dd:a1:d9:c6:ae:b1:af:cc:4f:4a:49:22:
ea:d7:c9:00:5e:11:2f:ef:d2:51:68:5b:da:a3:c1:56:92:59:
4e:44:1a:c4:de:eb:6b:74:4b:31:9b:54:4b:3b:6d:1a:fb:63:
f5:50:6d:f4:f5:97:43:49:68:55:75:d2:9b:5d:cc:75:88:ec:
bf:d8:b5:20:34:e5:30:b6:e9:6d:52:7b:59:d1:97:00:a0:1c:
9e:ca:b6:a8:b2:5b:cf:a4:44:ab:d6:46:22:57:ac:f7:8a:d0:
be:0b:0b:bd:77:3d:55:71:6b:55:db:ba:35:52:73:4a:6a:9a:
9e:64:63:69:04:62:b2:1b:2d:10:8b:d6:db:96:2d:6a:d3:bf:
97:10:a1:af:2a:5b:d6:58:6c:dc:f3:77:c9:73:f5:9d:4c:fd:
ee:15:4d:8b:3d:36:a5:31:07:37:83:21:d3:b3:f7:60:bd:17:
96:73:0b:88:98:bc:fc:a9:f2:ec:b1:f1:c8:e5:ec:d1:23:9a:
a5:b4:d9:dc:15:09:43:e9:09:d7:95:4e:f9:5c:4d:7c:6c:9a:
9d:8d:e4:34:f2:ff:9e:4d:b6:f7:d1:63:65:1f:28:39:f4:8c:
5c:db:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:31:02 2025 by rpki-client