Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xpmEydGHkR4WUG_AemrXoDkldEQ.roa
File: xpmEydGHkR4WUG_AemrXoDkldEQ.roa (raw, json)
Hash identifier: i+u2zt32X0Ue5lB3zu+fTLC/8ftEBz2YwPk2Ck8Omyc=
Subject key identifier: C6:99:84:C9:D1:87:91:1E:16:50:6F:C0:7A:6A:D7:A0:39:25:74:44
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D703241F402ADE05EAA4B9B3277CBE
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xpmEydGHkR4WUG_AemrXoDkldEQ.roa
Signing time: Wed 01 Jan 2025 21:48:01 +0000
ROA not before: Wed 01 Jan 2025 21:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7979
IP address blocks: 45.95.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:03:24:1f:40:2a:de:05:ea:a4:b9:b3:27:7c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c69984c9d187911e16506fc07a6ad7a039257444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:4c:e5:8e:b7:eb:9c:16:6c:78:42:25:ff:
21:f5:fe:d6:48:88:89:c6:68:2d:1f:97:6d:d7:fe:
af:be:f9:99:d3:e1:dc:1e:ed:39:f8:84:48:d7:4e:
c3:8a:27:75:09:15:67:32:ec:27:09:64:19:8c:49:
fc:ec:16:83:90:25:2b:8e:04:11:e7:f7:b1:cc:1b:
d4:d2:55:ff:03:ce:48:4a:c7:3e:fe:4c:9e:f7:23:
4a:e5:8a:17:c8:ca:13:1d:d0:4e:4f:99:ab:c3:5c:
91:a5:f2:df:16:de:b3:dc:d6:c4:7c:e6:13:86:aa:
54:40:2b:43:c3:5f:9b:49:59:8f:1b:b4:e8:95:52:
d7:04:56:a3:77:6e:a8:bf:a4:48:30:bb:60:bf:67:
e4:b5:82:13:03:5c:c6:53:54:21:92:b4:1b:78:c4:
71:f5:4f:d9:9b:0a:84:59:34:04:16:06:cf:42:e3:
af:23:06:58:21:56:3c:51:6c:3c:a4:d7:e7:ba:0c:
64:2f:1c:21:ff:8f:13:f8:ab:61:6d:15:f0:31:6c:
a0:39:7f:32:2a:87:d5:45:86:a3:9f:fd:41:18:fa:
3d:40:27:4b:07:3f:b0:c3:3c:3f:e9:39:26:aa:7a:
28:81:6a:62:5d:63:fc:9e:c5:3d:91:4c:6b:db:0b:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:99:84:C9:D1:87:91:1E:16:50:6F:C0:7A:6A:D7:A0:39:25:74:44
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/xpmEydGHkR4WUG_AemrXoDkldEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.200.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:1a:bd:ba:dd:b9:fc:96:a7:07:59:2c:22:7e:1f:1f:f2:0d:
d6:83:7b:29:df:88:fb:00:a0:da:88:f9:32:ba:a0:f3:87:59:
36:32:07:f2:89:79:88:ab:5c:83:3d:54:25:3f:52:ee:68:79:
b7:dd:37:17:79:57:1a:a6:af:ae:10:72:d2:b6:02:78:17:da:
0e:14:30:ee:1b:62:15:89:a9:20:20:cd:bd:22:b2:02:1a:c4:
e6:59:3a:9c:2b:ef:a6:42:1e:c9:b4:b1:47:31:6e:3c:84:fe:
95:2b:f5:a3:d5:81:0c:e3:60:cd:ba:bf:98:98:73:dc:5b:86:
d5:33:e0:34:ab:a4:7a:b7:28:c3:2e:b6:a0:94:68:ac:1d:f4:
40:53:79:b5:1c:10:1d:a2:c8:fc:59:90:a6:09:24:ce:ea:c5:
bf:9a:6a:70:29:a6:4e:c3:95:51:9d:eb:64:11:ea:fe:98:13:
d3:61:d1:c6:6e:18:e5:d1:e9:df:89:68:9e:e0:14:31:4f:0d:
14:a9:9e:cc:f3:fc:75:31:7a:87:a0:ca:eb:77:8c:f6:5a:1b:
dd:77:8b:0d:e0:b5:34:bc:cc:fb:18:0c:46:0f:ee:04:ed:e1:
0e:75:fc:5f:bc:d7:ae:f6:3a:1e:08:94:4c:b8:7f:6c:57:d7:
24:22:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:29 2025 by rpki-client