Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa
File: 9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa (raw, json)
Hash identifier: 6HzGHL3rDmh0KnGoCjxpw3uQutKsEpK/x9u0157VNyI=
Subject key identifier: F5:79:DF:D3:F4:4F:07:BA:D6:F7:84:E2:E1:FE:ED:2C:9A:0B:B7:96
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 0195B464A77AB981786DF4B0FEA7E42A9D5B
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa
Signing time: Thu 20 Mar 2025 16:30:50 +0000
ROA not before: Thu 20 Mar 2025 16:30:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34970
IP address blocks: 80.245.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:64:a7:7a:b9:81:78:6d:f4:b0:fe:a7:e4:2a:9d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Mar 20 16:30:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f579dfd3f44f07bad6f784e2e1feed2c9a0bb796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:f0:be:fa:f8:78:d6:a6:c7:22:d0:5a:d5:
8e:e6:5f:68:46:30:30:e0:f5:24:a8:e0:8d:b1:d5:
a9:6a:8e:c8:e8:bd:0f:ab:28:52:42:67:8d:45:1e:
c0:e1:62:f7:50:b2:5d:08:ae:39:7c:4e:10:62:2a:
ee:74:bf:6c:55:c5:80:22:ee:72:9b:b3:21:1c:2b:
32:8f:ed:c6:36:f9:fc:48:c8:01:38:56:5e:4b:82:
3c:e5:86:d6:de:f0:62:a2:56:ba:e3:8d:aa:c4:3a:
c9:34:0c:d6:0a:a1:8a:f6:1c:49:3e:2f:ed:1e:5e:
ef:88:29:16:92:72:88:76:b6:bb:77:80:fc:01:5a:
58:78:da:47:b5:2a:e9:99:df:08:18:2c:1b:a1:86:
37:d2:64:c3:c5:14:d2:31:cb:f0:7a:bc:26:3e:2f:
3c:82:36:0c:9d:2a:26:27:e0:db:dd:d1:0f:87:3f:
8b:ab:3a:37:0a:b9:fa:ee:06:ec:7c:b2:49:5c:76:
9c:3c:fd:5b:a3:30:a4:ce:97:30:45:a5:c6:96:64:
56:a9:f8:bf:b1:a6:55:4e:41:97:58:ec:03:9f:37:
d7:a7:3e:1e:96:95:f2:7d:7d:01:c0:0a:2c:a5:64:
94:09:64:59:6c:a1:d3:04:a0:a3:c4:0c:63:15:e0:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:79:DF:D3:F4:4F:07:BA:D6:F7:84:E2:E1:FE:ED:2C:9A:0B:B7:96
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/9Xnf0_RPB7rW94Ti4f7tLJoLt5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.42.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:86:05:fe:83:6a:4c:4f:cc:2f:c7:4a:b1:32:98:21:b5:47:
ca:94:c6:c5:39:fc:73:2a:f6:ad:15:a6:60:d9:18:de:b2:47:
7c:c3:8c:48:8b:27:b5:a2:78:e4:c3:1e:b9:ea:a5:83:7d:58:
dd:64:20:53:38:73:64:2f:fb:d3:f8:a0:48:a5:d2:f0:b5:a4:
35:a0:7a:0b:f3:44:71:ec:3d:ef:a6:69:57:82:2c:cf:f8:83:
ca:a5:37:72:08:a1:98:fb:4f:74:6c:4a:5b:44:4d:0d:98:d4:
d8:e7:70:4b:21:c7:96:ca:aa:f7:1e:be:d6:77:37:19:d5:09:
16:89:b4:28:ba:9f:7b:10:64:69:d8:62:cb:0c:58:5f:7f:15:
7d:55:3c:58:01:ce:9c:57:5e:01:5d:11:a4:1c:5c:5e:06:8a:
14:f2:5b:19:2f:7f:73:94:c2:69:5a:90:30:ca:38:c0:5b:24:
69:68:c4:78:b4:e3:28:84:f8:07:d8:c9:df:ba:4e:b1:a3:33:
57:a6:33:55:be:12:a9:4b:87:84:84:94:5d:18:cd:f1:e3:fb:
ef:00:b2:b3:81:17:b8:8f:b6:05:ab:36:1c:b2:12:5f:d5:28:
f6:2e:31:68:de:26:8f:b3:b5:c9:c1:2b:93:c9:3f:e3:2b:31:
2d:3c:f4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:16:31 2025 by rpki-client