Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/tfg7g5j5ek0_hU9X9Bsii-u5PtI.roa
File: tfg7g5j5ek0_hU9X9Bsii-u5PtI.roa (raw, json)
Hash identifier: fftXuGSCqqIffC1YkqOIw6I4qjxJHxg8C9GDac+CryY=
Subject key identifier: B5:F8:3B:83:98:F9:7A:4D:3F:85:4F:57:F4:1B:22:8B:EB:B9:3E:D2
Certificate issuer: /CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Certificate serial: 01941F8C910F73A08A516274F8B465067659
Authority key identifier: A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/tfg7g5j5ek0_hU9X9Bsii-u5PtI.roa
Signing time: Wed 01 Jan 2025 01:48:13 +0000
ROA not before: Wed 01 Jan 2025 01:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208058
IP address blocks: 45.145.39.0/24 maxlen: 24
2a13:5a40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:91:0f:73:a0:8a:51:62:74:f8:b4:65:06:76:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a55cf89ee562797e775aa4d1d1f7e45f466a73c3
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5f83b8398f97a4d3f854f57f41b228bebb93ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:34:70:75:a8:f7:31:ef:c9:0e:06:77:d8:c3:
27:3d:e1:31:38:10:26:71:1c:89:c5:a2:8e:c2:1a:
dd:17:d9:a2:8c:43:bb:b4:51:d1:e7:76:8a:c0:16:
23:21:42:6a:23:3e:f2:a9:63:76:79:8c:6b:42:64:
7d:aa:8a:e4:ea:ae:1b:7a:f3:86:77:4c:09:af:04:
b7:e0:e3:53:59:48:33:46:64:4c:e5:62:26:8b:1a:
a5:4f:33:55:b9:bb:45:29:be:c0:14:15:a6:89:23:
be:3c:f1:a0:16:bf:3e:41:64:e9:8f:53:92:f2:b1:
39:6f:ac:0d:fb:a0:b8:d9:f5:74:94:6c:d8:c7:62:
2f:1e:24:a6:d2:89:40:b1:77:38:0d:24:f1:b3:62:
93:c6:96:70:de:f5:6c:b1:63:d7:2b:a3:42:3a:90:
cd:3c:9d:3a:cb:bc:46:1e:0e:13:9d:54:57:78:45:
22:40:3e:a6:13:05:89:a2:c1:d7:f7:be:bc:11:b4:
48:5c:7f:36:3d:24:de:ee:96:f0:dd:54:d7:11:f4:
1e:d2:1d:fe:28:1d:bb:df:e6:1e:d8:d2:03:fd:66:
8f:97:08:1f:f0:d9:a8:04:be:8b:fb:3d:77:4d:3c:
f3:d9:e2:de:f3:b5:b1:d0:0d:ee:b8:00:94:e1:3d:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:3B:83:98:F9:7A:4D:3F:85:4F:57:F4:1B:22:8B:EB:B9:3E:D2
X509v3 Authority Key Identifier:
keyid:A5:5C:F8:9E:E5:62:79:7E:77:5A:A4:D1:D1:F7:E4:5F:46:6A:73:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVz4nuVieX53WqTR0ffkX0Zqc8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/tfg7g5j5ek0_hU9X9Bsii-u5PtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b72cb0-0e57-468c-89f0-abcb1e7582b3/1/pVz4nuVieX53WqTR0ffkX0Zqc8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.39.0/24
IPv6:
2a13:5a40::/29
Signature Algorithm: sha256WithRSAEncryption
60:84:a1:c1:90:f7:d3:01:b5:a0:1a:0d:aa:bb:b9:cc:fe:01:
15:23:b4:e5:dd:3a:9e:2a:d5:1f:7a:af:34:bb:90:17:cb:a9:
5b:fd:8a:07:89:01:81:49:96:a4:31:af:6e:c2:d2:c6:6c:c7:
f5:77:a5:0f:45:77:d5:25:ab:d3:0a:5b:14:53:5d:c9:6d:b3:
44:e6:30:5d:08:a1:1d:01:32:bf:8b:24:93:7d:f5:63:d4:ca:
0c:4b:26:8c:3c:d1:c2:cd:9c:5d:f7:27:14:ad:a5:f6:2a:52:
85:d8:01:c8:cb:d0:7d:ec:87:5b:49:56:5b:89:65:94:b2:a9:
24:47:85:4b:20:f3:c8:bd:53:99:bf:c0:bd:1f:88:94:d1:60:
34:b0:58:64:81:ac:f9:d1:e3:58:da:04:7f:6c:f2:a8:08:2f:
c6:af:d8:a9:12:bf:0e:bc:39:89:2f:a9:91:7e:62:16:f8:3a:
b1:85:81:d5:83:43:72:02:bd:3d:c9:fa:d6:4c:63:65:19:5c:
71:92:ff:d4:47:a2:51:5d:1d:ca:14:5a:35:03:c4:8f:44:0f:
65:38:ca:a2:10:55:4f:68:e8:bb:67:e1:1e:92:9e:ae:67:ce:
d2:5f:eb:88:4d:f2:a3:db:47:64:f8:f7:10:70:e8:b8:f1:38:
f0:79:e5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:52 2025 by rpki-client