Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/giwtVjICmBb7Wkk9XSwHCSUK3bc.roa
File: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (raw, json)
Hash identifier: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=
Subject key identifier: 82:2C:2D:56:32:02:98:16:FB:5A:49:3D:5D:2C:07:09:25:0A:DD:B7
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 01942826A504837AC1D276F7E4EFDEC8D86E
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/giwtVjICmBb7Wkk9XSwHCSUK3bc.roa
Signing time: Thu 02 Jan 2025 17:53:28 +0000
ROA not before: Thu 02 Jan 2025 17:53:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49250
IP address blocks: 45.149.248.0/23 maxlen: 23
45.149.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:a5:04:83:7a:c1:d2:76:f7:e4:ef:de:c8:d8:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jan 2 17:53:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=822c2d5632029816fb5a493d5d2c0709250addb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:0f:71:34:5e:bf:69:2a:c0:29:2e:c8:40:
e3:54:85:52:d9:83:e2:00:dd:12:f0:29:69:5c:b5:
9e:2d:88:e2:ee:62:f0:b4:6a:f1:71:ed:46:1e:85:
b9:60:fd:18:63:1f:cf:f4:e7:cb:a4:a7:7f:80:81:
23:73:86:93:c8:f0:c4:03:30:fb:e2:d7:22:14:ae:
bb:fe:ae:86:c0:10:8e:6f:1f:8c:ee:10:83:b3:8a:
dd:ba:15:24:9d:09:7d:26:aa:f0:ab:15:78:37:1e:
12:2a:60:b9:98:16:66:d5:0d:c1:e3:cd:a7:dc:1b:
be:09:a6:bb:71:9f:e8:50:0e:72:ef:1e:00:44:2e:
c2:cb:ae:69:7e:44:1a:56:1e:97:c7:c8:98:85:96:
52:aa:57:c7:3f:ff:60:f1:ee:5c:6e:a7:17:1e:00:
b6:24:08:ac:1c:f6:aa:14:9f:57:3a:da:b1:b2:ab:
a7:9a:57:0c:97:e1:12:e0:4a:75:34:f5:e2:9c:87:
2a:c9:c0:12:9a:c3:d6:75:ab:a8:12:e2:f0:bb:0b:
cb:7b:db:34:4c:36:cf:7a:25:70:0e:47:53:92:af:
81:78:f0:14:e5:a2:df:00:f4:56:9a:96:20:e7:0c:
52:d5:aa:ac:79:e9:29:03:3e:38:a0:d8:83:32:6f:
b9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2C:2D:56:32:02:98:16:FB:5A:49:3D:5D:2C:07:09:25:0A:DD:B7
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/giwtVjICmBb7Wkk9XSwHCSUK3bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.248.0-45.149.250.255
Signature Algorithm: sha256WithRSAEncryption
4f:b5:5b:95:f5:06:f1:d4:19:c5:5c:58:4e:e4:26:f4:74:f7:
a2:e7:11:a0:f2:b2:c0:0b:3c:e5:ae:9a:52:3d:03:84:bc:0b:
5b:65:9d:61:45:b5:6f:4a:7d:d1:bb:d6:d7:3f:c5:98:93:39:
36:1c:37:5b:45:2a:15:38:02:27:06:e0:f2:71:ca:6c:ce:17:
5c:49:29:2d:90:f5:b4:e8:13:48:a6:58:a7:d3:c4:29:d2:f0:
95:c7:9e:78:9f:fa:d6:16:e9:f8:d3:e4:23:b7:05:8c:aa:ba:
09:74:2e:52:bb:5d:bf:c8:cb:64:f1:24:8f:45:0e:3f:9b:94:
e9:90:55:f8:6d:ec:39:fa:d0:51:58:da:8f:10:d5:23:70:10:
25:2d:08:65:8e:75:cf:6c:dc:00:73:2d:ed:32:7a:39:02:18:
12:9f:8a:2f:5b:18:a4:bd:63:8e:21:2e:c3:da:bc:0d:41:d6:
b6:c4:3f:42:89:2c:87:22:62:05:30:b9:40:68:80:a5:cb:85:
77:e3:ac:f5:c8:bb:8f:43:55:ad:d2:fe:cf:8e:f8:b3:65:3d:
80:55:6e:25:63:e9:67:67:ca:64:b0:a0:64:4f:4e:2d:41:09:
f6:55:e2:57:11:b7:fc:97:1b:30:60:ca:75:01:7e:eb:f7:41:
1b:03:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:36:30 2025 by rpki-client