Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Xj1Bdg1eeU236Icvbyd4ZMhiis4.roa
File: Xj1Bdg1eeU236Icvbyd4ZMhiis4.roa (raw, json)
Hash identifier: 7GudeD60gM7wLCxcwIVJcT8vDk7d19PkM2wdgnGJt18=
Subject key identifier: 5E:3D:41:76:0D:5E:79:4D:B7:E8:87:2F:6F:27:78:64:C8:62:8A:CE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019470AB5FFDDDFEE09ED7979C41E6AB53DE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Xj1Bdg1eeU236Icvbyd4ZMhiis4.roa
Signing time: Thu 16 Jan 2025 19:51:06 +0000
ROA not before: Thu 16 Jan 2025 19:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28358
IP address blocks: 45.9.119.0/24 maxlen: 24
2a0f:e7c4:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:70:ab:5f:fd:dd:fe:e0:9e:d7:97:9c:41:e6:ab:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 16 19:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e3d41760d5e794db7e8872f6f277864c8628ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:b9:8a:21:6c:fe:34:2b:c6:93:74:47:a0:
2a:cc:e3:92:93:0a:2a:46:a3:96:55:4b:b2:67:aa:
ef:c9:ee:87:fd:3e:38:75:e0:30:a7:dd:a4:73:93:
74:8a:2e:50:d6:bf:48:c8:4f:a0:ba:a4:fd:88:98:
7a:e3:2c:c7:d8:3b:c2:be:2f:ff:f9:f7:08:5f:2f:
da:a0:2d:cb:3a:81:60:6c:09:87:0e:48:59:f6:d8:
f3:14:42:01:1c:69:27:d0:d9:40:4d:02:7a:11:25:
cb:96:3f:3f:8d:fd:19:42:a9:bf:72:e9:78:07:29:
1c:10:02:96:b6:d6:28:88:e7:46:4f:0f:19:d4:c6:
16:58:93:fb:43:3e:03:aa:87:34:97:d2:67:75:5d:
7a:f9:30:84:27:71:79:f4:fa:7d:fc:c1:21:7a:f5:
35:6f:03:4d:88:4a:3a:f5:ba:9b:4c:ee:f0:8a:1d:
a9:4a:b5:fb:3c:1d:f6:0c:e0:b7:d0:c1:8f:55:b9:
55:98:db:b7:d2:1c:1d:b7:4d:74:e8:07:a3:64:26:
53:b2:25:47:35:8c:ed:a6:38:70:71:05:e6:80:9e:
01:e1:4e:12:2e:67:fd:4d:47:b3:05:da:1a:07:50:
e5:df:ad:56:a2:e2:e0:74:f9:1c:67:13:89:77:12:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3D:41:76:0D:5E:79:4D:B7:E8:87:2F:6F:27:78:64:C8:62:8A:CE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Xj1Bdg1eeU236Icvbyd4ZMhiis4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.119.0/24
IPv6:
2a0f:e7c4:11::/48
Signature Algorithm: sha256WithRSAEncryption
1d:ba:44:9f:0e:db:a3:2a:85:14:4a:9d:76:e2:50:82:51:48:
1e:c3:bc:32:04:23:a6:ee:4c:e1:d8:e8:6b:21:db:a4:52:86:
fc:70:3f:ad:b7:e6:af:6f:dc:cd:4f:48:b4:0f:55:75:1c:38:
59:bc:5d:3d:a3:bc:60:33:c7:14:58:12:e8:72:b2:cb:be:fc:
b3:1f:6d:82:de:17:8e:6b:47:88:e4:bb:45:63:69:b6:97:1b:
c8:69:dd:e6:eb:7d:91:39:9b:92:29:7c:0e:5c:17:80:73:08:
b6:ad:6a:33:f2:75:53:a2:20:7c:18:5a:46:a9:66:0d:2a:e7:
7a:ca:74:90:f3:4e:ba:bf:38:e5:68:5d:d9:4d:30:8c:ae:7a:
0d:b9:9c:05:4a:68:01:5a:a9:a2:3a:e2:b3:0c:e6:0c:3d:ae:
52:ca:3f:94:f1:ed:b1:2b:06:bb:2b:87:b9:7e:4a:27:23:6d:
a0:e1:5c:73:c5:bd:a7:ef:84:1e:63:69:6c:97:0c:11:26:e5:
06:e8:48:69:94:b2:32:41:28:6d:24:6a:11:fb:f3:6a:5f:76:
56:da:95:79:7b:63:d2:b7:ea:64:f5:ba:3d:e3:8b:15:ca:83:
fc:df:74:4a:0e:94:51:7f:0a:0a:62:e8:65:93:3c:e9:4a:42:
86:5a:af:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:20 2025 by rpki-client