Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa
File: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (raw, json)
Hash identifier: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=
Subject key identifier: 30:31:C9:6E:20:4C:ED:A5:EA:42:92:F9:68:A9:16:DA:F0:5F:E7:09
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 019425FDD0C63C1A8D56CECA0036EE4EE692
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa
Signing time: Thu 02 Jan 2025 07:49:38 +0000
ROA not before: Thu 02 Jan 2025 07:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40913
IP address blocks: 45.158.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d0:c6:3c:1a:8d:56:ce:ca:00:36:ee:4e:e6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3031c96e204ceda5ea4292f968a916daf05fe709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:3a:ea:78:b6:47:e4:2a:ab:a3:61:8f:39:
ff:e7:fd:d0:0f:cf:93:17:89:31:8b:85:04:be:02:
30:65:e0:3c:e7:a5:64:a0:6d:78:ba:ad:94:99:cc:
ab:d8:20:11:50:eb:96:cb:74:db:29:ed:83:67:24:
c4:5b:6c:46:ab:d4:1d:f2:e9:e8:2e:44:6b:b3:da:
28:8d:6b:98:46:1f:6b:bc:fc:81:71:87:d1:6d:ab:
06:49:55:b9:02:13:91:ed:8b:74:d5:ef:95:78:6d:
02:d3:11:b5:2d:ae:da:fd:25:3a:4d:a5:b6:44:ee:
d4:58:0f:07:d1:2d:a5:93:5d:94:d0:26:4d:d8:83:
74:0b:c4:c3:28:cb:56:73:4c:44:98:a0:a4:f7:94:
20:72:7e:95:cf:47:97:29:3e:68:ed:df:85:14:69:
52:ed:53:88:57:af:de:73:e8:02:bd:91:97:e5:ec:
e7:6d:4a:05:b8:db:61:c0:26:a8:43:87:b7:fc:b6:
03:d2:5f:cb:aa:a2:7d:d5:c4:6b:05:55:c6:ee:e4:
ec:8b:e0:da:5a:ce:a7:44:95:fe:48:9f:8b:d5:59:
ec:90:57:81:fc:ab:e2:72:24:fa:86:7d:2a:43:87:
0a:5b:a5:96:d9:6e:d3:e4:6b:8f:2d:84:19:61:c7:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:31:C9:6E:20:4C:ED:A5:EA:42:92:F9:68:A9:16:DA:F0:5F:E7:09
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.166.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:06:e2:28:40:6a:9b:1b:d0:ee:b6:5f:7a:e6:74:fd:c3:1f:
f2:bb:e2:85:a5:89:0c:f7:b5:41:9f:e6:d9:33:fa:71:e9:d8:
74:e3:4b:7e:dd:40:a9:f1:a4:25:69:93:eb:3c:bb:50:3f:c1:
d2:5d:33:fa:2b:a2:e7:51:fb:53:76:68:10:df:c1:4c:67:bd:
4d:1f:03:73:04:e6:52:5b:8a:77:f1:15:5d:99:12:e7:81:7a:
92:bd:51:c3:ea:3c:cd:9d:dd:8a:20:03:60:53:09:51:3c:8e:
76:43:28:5f:8f:56:3c:e9:26:4b:91:b4:9a:4a:7d:aa:b6:d7:
ea:37:7e:ca:83:a9:bf:c4:bb:32:c3:58:9b:13:97:dc:1f:88:
77:b9:4d:83:24:43:d6:b2:3e:79:33:e9:74:5d:76:34:b0:93:
bf:a9:c4:cf:7b:e6:d0:ca:8e:42:5a:3f:94:75:fe:ef:82:1e:
88:32:81:cf:c9:5b:e3:29:a0:15:d0:59:87:64:90:10:2f:79:
8b:9c:22:85:79:57:dd:59:3d:76:40:df:63:69:ec:e6:6a:52:
42:f6:07:3e:f8:f7:83:ec:ee:f7:8f:ea:70:c6:98:d3:56:90:
5e:65:5d:98:80:42:74:be:3e:8b:3c:ec:79:6b:50:8a:18:02:
a0:5d:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:51:31 2025 by rpki-client