Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_vRtaZ8lhaUYV2CzG2khuwwh8Qg.roa
File: _vRtaZ8lhaUYV2CzG2khuwwh8Qg.roa (raw, json)
Hash identifier: d9eMAgnRUKlJnDYxOtPksvDup7DzzXognuMVbz5EjoE=
Subject key identifier: FE:F4:6D:69:9F:25:85:A5:18:57:60:B3:1B:69:21:BB:0C:21:F1:08
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427482D859C9DA7D551A82EF07DF2F14E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_vRtaZ8lhaUYV2CzG2khuwwh8Qg.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211593
IP address blocks: 45.87.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2d:85:9c:9d:a7:d5:51:a8:2e:f0:7d:f2:f1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fef46d699f2585a5185760b31b6921bb0c21f108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:0a:a2:10:4d:4c:dd:03:75:62:cc:d7:3d:
3e:9b:24:f3:dd:e0:5a:da:bb:e1:db:1d:05:69:2e:
fa:7e:c7:23:0a:17:5b:5c:c4:d1:27:03:d6:e2:c5:
ba:4c:82:2e:89:92:48:bf:61:7b:c9:93:6d:79:4d:
2f:12:47:45:a7:dd:b4:e8:66:e6:82:6b:b8:39:d4:
28:1b:e7:21:90:71:30:78:d0:b5:d7:f6:9a:f2:89:
c9:8e:22:d2:22:ac:fe:96:fc:3b:10:f0:16:7f:8d:
69:28:9b:cc:af:4c:eb:9e:03:cb:d6:94:5f:07:a8:
22:65:1c:51:1d:bb:ad:2a:5e:c1:d5:69:d8:e7:35:
e0:ac:41:df:27:43:9f:f0:fb:78:83:1b:66:29:c6:
53:b4:b4:11:fd:5d:6c:2c:11:d3:dd:79:c3:79:45:
50:f1:f9:68:47:44:89:da:2e:25:18:38:44:50:2d:
7a:45:51:33:4f:0a:28:bd:5e:fd:85:c2:bb:23:07:
65:07:fd:8a:a5:53:e8:b8:47:53:48:0a:59:69:71:
9b:70:69:5d:ae:a7:cd:01:75:ec:34:81:b0:14:49:
61:62:23:95:bc:04:c5:e3:74:c5:7b:9a:67:fa:b2:
49:2c:5a:7e:23:e8:20:3b:e3:bc:f9:c1:df:fc:87:
ed:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F4:6D:69:9F:25:85:A5:18:57:60:B3:1B:69:21:BB:0C:21:F1:08
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_vRtaZ8lhaUYV2CzG2khuwwh8Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.251.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e4:a8:4d:98:e1:1f:20:03:f0:11:c5:19:75:94:01:1a:00:
5e:d1:5e:78:97:20:99:d3:e8:63:a7:3f:20:99:80:31:5f:ed:
84:bb:a2:b9:8a:ca:e8:99:93:04:e8:3a:b4:41:c4:83:7f:e1:
34:9a:06:3f:97:33:85:b5:18:3c:64:c9:f2:c0:33:6e:40:3e:
54:c0:23:50:78:26:66:40:a7:1a:cc:c1:f7:eb:2d:3a:31:5d:
bb:e3:ef:26:b1:50:b8:72:39:3d:c7:06:46:17:44:63:53:21:
5f:6f:03:70:fb:db:63:8b:8d:c7:78:05:95:20:8d:69:5a:e9:
ac:53:4d:19:85:17:1c:1b:92:62:41:33:dd:e7:c7:52:8d:58:
72:9b:10:70:3e:c9:d2:46:c0:26:ff:38:b1:c7:15:f4:86:67:
92:3d:da:c0:85:1d:72:7c:9b:e5:92:64:9a:c4:3c:57:53:30:
16:51:88:b4:5a:1a:90:69:e8:26:f9:8d:d5:bd:75:7f:92:09:
05:b2:fe:91:3f:a6:2a:97:81:10:75:ca:aa:7f:40:aa:bf:0e:
fb:39:e5:2a:8d:92:6d:fe:86:dd:5e:cd:1b:78:a2:e8:32:eb:
4d:b6:60:43:01:52:93:10:c8:28:29:93:6d:92:5c:2b:ed:72:
f5:b1:95:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:59 2025 by rpki-client