Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa
File: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (raw, json)
Hash identifier: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=
Subject key identifier: 25:5A:B0:CF:99:B1:60:43:0A:18:E1:D4:88:9F:C6:A5:26:67:18:DD
Certificate issuer: /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial: 01941F8C7669AC64AE383826965E4F18F26A
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39637
IP address blocks: 45.136.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:76:69:ac:64:ae:38:38:26:96:5e:4f:18:f2:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=255ab0cf99b160430a18e1d4889fc6a5266718dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:70:6b:1a:31:93:27:ec:35:23:df:2a:a9:
5f:a3:0c:d4:bc:ec:c6:01:c6:f4:9a:e2:b3:f3:08:
66:f2:15:1a:17:7c:77:67:87:de:b6:06:c7:31:3d:
77:f3:85:a8:af:63:5f:c6:8a:4d:05:a8:ef:2f:f3:
62:d9:10:91:8c:4f:86:fc:7a:9b:17:b3:49:e3:02:
b3:a6:c6:d2:93:dc:03:be:70:26:a1:22:d7:af:a7:
9d:64:4d:33:13:95:dd:b4:db:92:a8:7c:cc:34:19:
c5:9a:5f:12:ff:40:c0:45:24:43:6e:4e:dd:d8:d5:
07:8a:3c:e2:ed:73:3e:ec:52:97:36:75:76:85:59:
48:ab:f4:a0:50:bc:0f:c3:3a:3a:9f:22:05:15:bd:
79:d1:6f:a9:22:a1:bb:70:5c:e8:84:78:18:5d:06:
1e:75:3d:35:09:c5:1b:0c:74:96:de:07:37:14:3a:
ec:95:75:a6:ed:22:83:87:c5:18:cb:b2:66:f0:03:
0e:3e:1f:23:ca:34:4c:82:27:da:58:dc:05:a1:d4:
32:1b:00:f4:81:04:d1:29:35:74:0d:97:59:1c:37:
85:60:92:0d:44:b2:47:2e:88:eb:54:6a:e9:2b:0e:
1e:0c:73:9b:9b:0f:f6:d3:9d:e0:07:ca:64:70:8d:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5A:B0:CF:99:B1:60:43:0A:18:E1:D4:88:9F:C6:A5:26:67:18:DD
X509v3 Authority Key Identifier:
keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.111.0/24
Signature Algorithm: sha256WithRSAEncryption
88:90:ad:61:1d:36:f4:2f:e5:b3:a4:53:f2:90:4d:b1:61:14:
7e:92:f4:2e:0a:b6:cc:dc:5c:74:e0:9e:21:61:11:61:e3:0c:
58:c8:49:d1:67:0b:6a:6f:a9:1a:0d:a4:f1:b5:9d:27:1d:6d:
cc:3b:a3:24:85:04:02:80:6e:76:58:d6:6e:e7:8a:d2:ac:34:
24:22:60:b1:a9:9f:df:2a:7d:a4:a6:fe:fb:36:ba:12:b2:e1:
99:e1:e4:db:ef:1b:e3:32:b7:f2:61:79:62:e5:c5:9a:12:99:
7f:d8:f0:e7:fd:fc:e3:47:13:c3:0f:e2:99:c0:2b:be:bb:13:
25:9c:0c:eb:81:cd:28:8c:b8:ab:bf:b3:28:77:69:4f:75:b6:
44:d8:68:68:1b:5a:a2:ef:ae:70:0c:78:8a:ac:ce:ab:9d:37:
d9:c7:ae:f6:ee:5c:34:76:d6:20:9f:49:0d:71:ad:cc:85:9c:
63:fd:2c:fa:c2:aa:84:85:97:89:5a:44:f2:58:97:bb:b6:6b:
48:80:ef:7b:0a:1c:f6:ab:6c:a3:b1:aa:09:b9:d7:80:e4:1a:
bf:10:39:2a:d9:1a:2d:a4:32:49:64:4c:a3:b8:3f:1d:ac:e2:
03:f0:00:06:64:4e:e2:1d:28:8f:22:a8:02:62:84:48:e0:22:
7b:1a:89:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:37:57 2025 by rpki-client