Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Z9xZ7GbcKIft-S6nfb-svqv8TFs.roa
File: Z9xZ7GbcKIft-S6nfb-svqv8TFs.roa (raw, json)
Hash identifier: GCfoSQjeVqFmtB3GYQIXsfbNd0nAZeV/TlkWnmT0SDQ=
Subject key identifier: 67:DC:59:EC:66:DC:28:87:ED:F9:2E:A7:7D:BF:AC:BE:AB:FC:4C:5B
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F99EE138F6EEB14652008971240EA
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Z9xZ7GbcKIft-S6nfb-svqv8TFs.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58351
IP address blocks: 45.91.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:99:ee:13:8f:6e:eb:14:65:20:08:97:12:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67dc59ec66dc2887edf92ea77dbfacbeabfc4c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:15:4f:dc:a0:94:13:15:8d:6a:9c:93:d8:
bc:d6:36:08:d7:a5:db:dd:64:e2:79:39:9a:97:89:
8d:26:a3:05:da:53:48:b0:1d:79:63:cc:d7:e4:86:
2b:49:ce:97:5c:1a:c9:69:73:1e:53:2e:73:78:79:
89:82:19:29:9e:fc:6c:0c:88:73:93:0f:2d:89:db:
cc:eb:84:30:6f:df:5d:c3:d4:1d:6b:bc:33:bc:0a:
25:2b:ae:3e:52:a9:aa:c1:d1:78:00:7f:2b:4b:50:
25:15:af:d0:82:19:c2:ab:97:69:17:42:1c:a7:5a:
32:b7:62:49:c0:5f:f3:5d:83:2e:dc:13:cd:4f:1c:
6a:42:82:f1:9e:09:c1:00:fe:f5:0e:95:24:9e:e4:
f5:c5:aa:d2:15:b8:a9:90:f5:13:b8:3b:38:b6:35:
8e:c5:3e:77:cc:13:23:14:ff:6e:e1:58:a6:c2:5f:
22:0b:3f:f1:99:3b:d0:0b:82:6b:86:10:a9:89:4d:
0c:ce:19:7c:fa:66:2d:35:43:dc:59:00:6a:43:f6:
4d:87:6b:b7:12:0c:0f:f8:0f:30:7f:e7:8d:5a:76:
e9:23:1e:20:3d:a1:a4:3d:ba:59:84:68:13:fe:2a:
35:fd:b4:3b:3a:c5:cd:25:51:03:fd:cf:52:4a:55:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DC:59:EC:66:DC:28:87:ED:F9:2E:A7:7D:BF:AC:BE:AB:FC:4C:5B
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Z9xZ7GbcKIft-S6nfb-svqv8TFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.162.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:91:08:e6:bd:28:26:ea:4e:e3:5b:93:59:31:ba:5b:a2:82:
c4:34:85:2d:a1:ad:82:91:c7:b2:7c:6d:8f:12:95:ed:93:fe:
b8:6c:07:55:03:31:70:f7:3a:97:0e:16:74:f8:b7:72:96:38:
96:fc:47:22:69:b7:c6:0c:1c:52:96:68:21:e5:7a:68:84:fa:
a6:68:86:91:f6:42:cb:25:85:ca:b8:19:ba:5f:f2:23:d0:9b:
53:2d:06:bd:3d:87:0d:1b:36:7d:4c:a4:43:97:8b:9f:f8:c0:
70:76:38:41:fe:97:9e:d9:0b:6e:c9:e1:1f:a5:a4:78:85:94:
91:70:1c:79:cb:55:ff:f3:b1:d7:a1:4d:cf:f0:ef:cb:fd:b6:
bc:36:00:41:85:ec:7a:77:ef:15:83:5d:09:dd:42:f8:d7:a2:
d6:bf:2d:d1:b7:0b:1b:40:83:dd:14:31:15:40:56:14:31:03:
eb:2f:56:67:2d:73:06:74:71:ce:fe:ab:f2:f8:36:49:cc:8e:
97:0a:70:c6:73:7b:38:98:c1:47:ca:bd:32:c6:41:8c:66:a8:
ce:45:21:cf:b7:fa:0c:1e:42:ac:e8:d9:e7:c6:0d:59:49:cb:
fc:e7:09:91:87:63:f5:d3:42:92:38:6a:84:20:01:87:de:7d:
8e:6e:8f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:47 2025 by rpki-client