Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zefl7p4iqiJ_p7nwtC97VVBgrx0.roa
File: zefl7p4iqiJ_p7nwtC97VVBgrx0.roa (raw, json)
Hash identifier: QFuYNB0IHk2uvABMPzSW0a4thxTPyS63QOM2zybFSzg=
Subject key identifier: CD:E7:E5:EE:9E:22:AA:22:7F:A7:B9:F0:B4:2F:7B:55:50:60:AF:1D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195C2E6F1D28AAA4066F4F04D276B2ED6AA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zefl7p4iqiJ_p7nwtC97VVBgrx0.roa
Signing time: Sun 23 Mar 2025 12:07:49 +0000
ROA not before: Sun 23 Mar 2025 12:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 45.151.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c2:e6:f1:d2:8a:aa:40:66:f4:f0:4d:27:6b:2e:d6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 23 12:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cde7e5ee9e22aa227fa7b9f0b42f7b555060af1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:f7:97:93:12:f6:5c:f6:75:75:62:05:11:
65:80:e5:0d:96:d5:14:3e:17:f5:d3:e7:42:e4:a1:
05:fa:be:01:a4:42:39:b8:65:73:c9:a4:1a:b3:e8:
80:97:b3:22:31:2a:00:fd:7f:83:1d:d7:fc:8f:d0:
0b:ac:d2:cc:44:ce:1f:9f:a1:69:5e:67:38:fb:01:
86:29:58:8e:e1:f0:60:4a:53:e2:37:30:98:4c:18:
1b:c5:f3:78:02:e2:e7:a5:7b:be:45:f0:43:15:a8:
52:4a:8a:dd:30:9c:b9:cb:64:e6:67:06:5c:e7:e0:
d8:a6:2d:51:be:c6:aa:e5:10:e5:97:62:92:a3:76:
9d:ed:d4:c0:5b:3c:a3:e8:5c:ed:f2:9b:04:0c:49:
62:c2:6a:2a:78:83:a7:7f:75:57:4f:25:bc:9c:3b:
1e:29:33:54:ee:5c:9a:63:40:cb:a5:66:37:4a:6d:
e8:03:f4:6e:80:29:25:d6:96:3a:c7:76:89:c8:7b:
77:65:8a:8c:8f:ab:fa:22:56:33:eb:1a:39:e8:cf:
20:ff:c4:c2:f2:22:a6:6b:fe:7a:31:78:73:19:b2:
55:50:b7:fc:5f:33:b5:e2:9d:52:ed:1b:e4:a0:9f:
e1:e2:54:77:be:d0:81:98:8d:5d:86:67:36:fc:20:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E7:E5:EE:9E:22:AA:22:7F:A7:B9:F0:B4:2F:7B:55:50:60:AF:1D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zefl7p4iqiJ_p7nwtC97VVBgrx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:3b:49:9d:e9:c8:81:92:b2:08:f8:69:ed:de:4f:6b:4b:ac:
31:35:5e:7c:fe:54:a5:f7:94:39:09:6c:f7:32:91:df:11:eb:
29:40:a5:43:d2:2b:d0:57:c3:9b:32:5a:66:6a:d5:f9:44:86:
f1:59:00:c4:35:31:88:f6:86:f4:30:f8:26:34:3d:d6:05:89:
81:6f:71:58:77:8d:f0:da:3a:1a:fb:3a:95:81:3e:3a:41:7e:
2b:d9:1a:e2:36:76:1c:e6:74:12:59:ce:e2:b8:fd:16:16:13:
45:90:2e:2a:3d:c1:54:b2:13:45:10:95:1b:ed:d0:4f:2a:f2:
77:88:d9:b0:99:83:10:83:ff:f5:ef:5a:e4:d1:d0:f6:6e:bc:
ce:4b:52:36:8d:9b:4d:88:36:cb:9c:fb:a6:8e:db:be:1b:0c:
7b:98:a2:58:66:61:b0:1e:6e:41:88:e3:d3:ab:29:08:60:b9:
05:a4:1a:eb:5c:4f:be:3d:05:85:cb:e5:30:d6:9d:05:ed:5e:
9c:31:93:9d:23:ff:cb:5a:1c:62:6d:f4:be:bf:c5:d9:b6:f0:
73:e6:8c:26:44:e8:c2:20:73:52:3e:0b:9f:9f:0d:52:b5:7f:
ca:41:e5:e3:36:86:2d:a1:13:ef:8b:1a:14:31:40:e0:5a:33:
89:c8:7b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:40:13 2025 by rpki-client