Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9FuiiU2k8PN3VXvRKvxw2PnsJvI.roa
File: 9FuiiU2k8PN3VXvRKvxw2PnsJvI.roa (raw, json)
Hash identifier: Cc6Pu0339HoGO1XfEsRdv46HQs0rXcmHE8JPBvjRDVY=
Subject key identifier: F4:5B:A2:89:4D:A4:F0:F3:77:55:7B:D1:2A:FC:70:D8:F9:EC:26:F2
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258FA3CFC18AA1CB21D7AD0E6B5F00B3
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9FuiiU2k8PN3VXvRKvxw2PnsJvI.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202656
IP address blocks: 45.91.161.0/24 maxlen: 24
45.135.176.0/24 maxlen: 24
45.135.178.0/24 maxlen: 24
45.135.179.0/24 maxlen: 24
45.140.61.0/24 maxlen: 24
45.143.141.0/24 maxlen: 24
45.143.143.0/24 maxlen: 24
45.147.246.0/24 maxlen: 24
45.156.149.0/24 maxlen: 24
45.156.150.0/24 maxlen: 24
193.8.164.0/24 maxlen: 24
193.8.167.0/24 maxlen: 24
193.8.175.0/24 maxlen: 24
194.156.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a3:cf:c1:8a:a1:cb:21:d7:ad:0e:6b:5f:00:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f45ba2894da4f0f377557bd12afc70d8f9ec26f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:b8:76:a0:9d:db:74:c6:2c:7e:69:28:42:
6d:96:d6:94:94:68:8e:90:91:74:33:f0:31:ad:ac:
6c:c2:71:ac:52:02:96:26:37:7a:42:3c:ab:eb:60:
93:0e:59:f8:fc:f0:70:e1:12:d4:73:92:d9:5c:aa:
0c:88:b0:4c:83:c4:d0:4f:0f:67:32:d7:7a:c1:f4:
84:53:21:3b:b6:d0:ba:b0:4e:fc:ae:8c:ac:96:24:
52:ea:4a:39:2c:64:99:ed:8f:d0:76:79:56:3b:ae:
da:62:f7:95:43:e4:99:43:d2:8a:8d:49:45:54:fc:
95:5d:8c:aa:52:77:5f:e4:3b:38:ef:69:1a:ec:d0:
20:7e:79:ab:44:55:70:8d:a7:4d:20:50:74:56:2b:
e2:42:6d:0a:e3:7a:e6:72:a4:22:bc:b8:94:d7:7a:
5e:16:cb:ca:31:7c:d3:5f:b9:d5:0a:d4:e3:d6:8c:
7b:80:fe:26:00:c1:dd:65:86:79:9a:1d:3c:ec:48:
6b:38:ad:16:6b:89:f6:68:6b:09:43:62:c4:84:d8:
90:3b:01:43:66:4e:d8:22:d1:5f:91:22:c1:13:bd:
d0:cd:64:2b:b8:04:79:20:8c:51:8d:db:d6:2f:85:
17:56:4b:88:a5:02:3a:48:40:0d:a8:69:dd:8f:28:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5B:A2:89:4D:A4:F0:F3:77:55:7B:D1:2A:FC:70:D8:F9:EC:26:F2
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/9FuiiU2k8PN3VXvRKvxw2PnsJvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.161.0/24
45.135.176.0/24
45.135.178.0/23
45.140.61.0/24
45.143.141.0/24
45.143.143.0/24
45.147.246.0/24
45.156.149.0-45.156.150.255
193.8.164.0/24
193.8.167.0/24
193.8.175.0/24
194.156.1.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ad:4d:8a:87:96:93:6f:b4:a1:3e:45:a8:d7:66:6e:a7:d2:
63:61:2b:19:bd:4f:b3:4b:41:bb:d7:eb:aa:e9:ec:eb:e6:7f:
f4:48:2b:c1:14:51:c2:58:be:dd:f6:69:d6:e9:f7:14:f0:c2:
5d:5a:26:70:08:e8:ac:1e:5c:41:be:d5:4f:30:91:a6:3e:0f:
23:0e:99:05:43:3f:5e:66:ab:60:ea:84:71:35:8a:bf:f9:a0:
cb:cd:81:a3:11:0a:18:0b:73:12:7e:fd:a1:4b:8c:6d:82:94:
b6:be:da:98:22:10:4d:bd:ee:7e:39:5e:f8:80:87:10:f3:c6:
16:83:00:40:0c:5a:a4:f8:5b:38:26:a3:6c:52:be:ce:e2:93:
4f:51:ef:da:10:b0:42:09:05:ff:59:6a:7e:5b:9d:be:1c:4e:
a1:c4:ec:96:12:9f:da:d7:96:7b:03:69:97:60:19:e9:22:7e:
6b:e8:ef:ab:9c:b7:30:57:06:99:65:e7:40:91:62:9a:3e:93:
3f:a3:54:06:22:e0:2a:9d:f2:cc:9f:77:9f:ac:4f:d7:d2:66:
04:74:cc:27:e7:22:f2:0d:09:fe:fb:7e:af:1c:ed:71:62:12:
c1:24:cc:bb:6a:71:a6:aa:90:45:48:e2:38:6d:d4:ab:04:80:
48:da:28:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:55 2025 by rpki-client