Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/ReUkv2XBhq4jZK8mdlDBfah6_NY.roa
File: ReUkv2XBhq4jZK8mdlDBfah6_NY.roa (raw, json)
Hash identifier: 0JTSyIquJGzLqSds9ko3zMw9Lmr56Y3WjwQhPWRtRNo=
Subject key identifier: 45:E5:24:BF:65:C1:86:AE:23:64:AF:26:76:50:C1:7D:A8:7A:FC:D6
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 019421B2160C01E9755BD6989DFB2CF2511E
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/ReUkv2XBhq4jZK8mdlDBfah6_NY.roa
Signing time: Wed 01 Jan 2025 11:48:26 +0000
ROA not before: Wed 01 Jan 2025 11:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208012
IP address blocks: 45.129.120.0/24 maxlen: 24
45.129.121.0/24 maxlen: 24
45.129.123.0/24 maxlen: 24
185.77.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:16:0c:01:e9:75:5b:d6:98:9d:fb:2c:f2:51:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45e524bf65c186ae2364af267650c17da87afcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:1d:85:cb:ec:03:f0:02:1d:d5:2a:aa:30:
df:26:b2:43:b5:ed:10:13:68:e3:69:ed:f3:a0:6e:
c5:d2:e3:19:2e:08:da:a0:a6:c6:21:c0:d7:4e:35:
3f:76:e3:46:81:83:bc:5c:74:6e:a7:9d:a8:69:ac:
73:6a:7d:a0:67:09:9d:be:02:18:22:64:f4:11:13:
28:97:47:4b:ef:48:77:f7:d3:fd:9e:8f:12:99:24:
ea:32:8f:ea:b7:e9:90:04:1f:b3:13:85:08:06:7c:
0e:1d:27:47:64:96:b6:9d:62:e0:f7:4c:f1:e0:83:
d2:aa:1e:86:65:74:51:6b:a5:db:7b:d3:8c:f7:bc:
e7:dd:0e:e2:f5:cc:1d:74:b9:46:6f:ea:34:36:66:
cd:8d:6d:00:58:21:e1:91:9a:07:bc:d9:a6:a2:79:
43:36:ef:92:d6:33:78:13:7a:82:7b:c4:3e:a1:41:
13:84:5c:d7:05:0a:85:5d:01:07:b7:04:8e:c5:98:
7b:dc:f1:ca:2f:f5:ad:c3:f4:53:14:0c:e8:c9:d5:
95:e9:05:60:d6:e8:15:8c:f1:d1:13:e2:be:81:93:
44:8f:d4:5b:63:ec:10:81:55:49:ff:b0:8a:cf:40:
85:64:43:dc:1a:5c:e1:51:d6:70:3e:9c:dc:51:69:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:24:BF:65:C1:86:AE:23:64:AF:26:76:50:C1:7D:A8:7A:FC:D6
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/ReUkv2XBhq4jZK8mdlDBfah6_NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.120.0/23
45.129.123.0/24
185.77.90.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:16:10:f6:4d:cd:e7:72:ab:f6:e4:df:ef:ae:20:db:8c:a3:
b6:af:76:8b:eb:ce:a3:3c:0d:94:cf:77:7d:57:d7:b7:42:53:
68:84:a5:cb:73:c8:de:0a:bd:17:58:de:52:fe:98:44:fb:57:
5a:65:d5:bd:87:13:2a:04:cb:ef:57:44:50:0e:b6:93:60:3d:
49:27:b9:8e:48:49:48:b0:55:93:a2:f4:fc:ae:4a:bf:6a:8c:
62:54:3a:23:a3:ae:9f:70:7f:e8:5a:bc:40:5b:e3:df:d3:ba:
45:52:4f:1f:34:c9:0f:f6:71:32:85:43:58:f1:dd:d3:e9:69:
8a:fb:8c:f5:0c:6a:84:83:9f:d2:a7:67:0e:6e:79:34:03:63:
e5:30:e7:53:21:db:c3:a4:86:42:6e:3e:ec:08:c7:51:2e:b9:
0a:ba:eb:ce:cf:99:38:02:98:b5:e3:49:3f:85:e7:8e:04:84:
18:26:52:af:55:3f:b9:6e:3f:e7:31:b9:2a:8d:01:a2:db:9d:
31:f8:36:7e:c4:e7:10:2b:65:78:5b:30:65:68:fb:30:ac:00:
16:ce:f0:5e:95:3c:11:cb:60:48:2d:a2:c1:de:a5:3e:77:6b:
5f:2a:1e:6f:9b:4f:6f:7d:92:22:79:da:87:89:84:09:e6:1b:
10:f0:5e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:01 2025 by rpki-client