Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/0Y15xTEGHWqAVJeDnj84hoOI0tg.roa
File: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (raw, json)
Hash identifier: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=
Subject key identifier: D1:8D:79:C5:31:06:1D:6A:80:54:97:83:9E:3F:38:86:83:88:D2:D8
Certificate issuer: /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial: 0194258FA0ECD4E22FF290DF07CCBBD4F3EA
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/0Y15xTEGHWqAVJeDnj84hoOI0tg.roa
Signing time: Thu 02 Jan 2025 05:49:17 +0000
ROA not before: Thu 02 Jan 2025 05:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29611
IP address blocks: 45.89.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a0:ec:d4:e2:2f:f2:90:df:07:cc:bb:d4:f3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d18d79c531061d6a805497839e3f38868388d2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:3d:1b:bd:a7:ae:20:cd:99:c3:6d:61:20:
85:b3:52:17:05:45:de:83:98:4a:cc:91:bd:b1:57:
b7:f0:c8:6d:36:fc:23:af:b8:6d:02:7f:25:aa:ec:
ee:77:7d:5f:8c:97:c0:31:22:7d:26:76:a0:da:75:
2d:0c:8f:06:74:43:0f:23:a3:c2:4b:af:39:86:0d:
10:f5:b2:a6:f8:e8:e9:48:f0:42:c6:ed:63:53:3e:
29:32:ac:02:96:d1:bc:a1:70:4f:eb:47:0a:43:b0:
97:53:20:b1:e0:e2:0d:cc:ef:05:c4:81:fc:d6:82:
af:eb:7d:e8:c1:c3:76:1d:b7:0e:ab:47:cd:72:cb:
fe:a5:0f:d3:ac:30:f5:b5:00:76:80:35:9d:6e:28:
01:e0:32:86:09:e2:e1:1f:11:b3:70:aa:3a:31:9d:
14:61:6f:01:2f:dc:9c:5a:d8:c5:21:f6:a3:ac:cb:
e2:af:2e:06:7e:87:b8:41:c1:cd:79:c2:9a:1d:d9:
8f:ba:39:73:6e:37:3d:e3:56:41:55:bc:bf:c2:11:
4b:97:d6:d7:a5:eb:e7:2d:52:8d:00:b6:69:16:f8:
60:4c:57:89:ab:ed:e7:83:58:cc:51:60:22:64:8c:
69:f6:d0:20:70:0d:06:7c:cb:ab:25:54:32:73:c1:
06:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8D:79:C5:31:06:1D:6A:80:54:97:83:9E:3F:38:86:83:88:D2:D8
X509v3 Authority Key Identifier:
keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/0Y15xTEGHWqAVJeDnj84hoOI0tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:da:3c:68:92:24:3d:ed:1d:43:0c:7f:ac:88:1b:93:4e:0b:
88:1c:cd:98:c7:3a:e1:72:e3:24:84:7e:3a:4f:de:5c:37:3c:
d3:b8:f9:96:6c:99:f5:f9:14:27:ff:1b:03:8a:b0:cc:a3:40:
2e:77:00:14:6b:c2:99:0f:78:5f:f6:97:93:90:ba:f1:39:3b:
fa:b8:16:0c:db:8d:96:85:15:35:e8:72:a5:30:70:39:38:62:
0e:59:2a:f0:bc:40:06:34:f4:05:0e:20:4e:7f:8e:80:da:93:
f0:cd:82:09:ca:85:84:8f:b1:c1:06:52:66:bd:60:eb:54:37:
60:30:ac:29:6e:b2:d6:d4:2f:34:5c:89:ef:b1:fa:08:8e:26:
fd:af:a0:30:66:07:93:a9:b4:7e:6e:2a:4a:66:14:d9:7d:d4:
e6:cf:63:1a:60:40:01:e5:88:f7:73:c5:69:f5:0f:dc:af:af:
4f:44:72:0a:b1:a4:ea:80:7d:6c:ca:ef:88:5e:98:b8:01:00:
6b:26:a7:9a:aa:5d:b1:54:16:f8:64:a7:14:f9:d8:70:b3:5e:
0c:a0:e3:d9:4c:8a:f4:01:10:3e:f9:4e:fa:87:08:86:e4:8b:
9e:b5:1c:98:6e:aa:2d:4f:f1:0a:f8:a4:4d:20:a2:1c:53:cf:
3c:53:4b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:37 2025 by rpki-client