Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/dDZDxy52PdiJeUZhPicKEJihVz4.roa
File: dDZDxy52PdiJeUZhPicKEJihVz4.roa (raw, json)
Hash identifier: cXmG9yH37C4Npwy/fOutfAjZomMc/93BceTxpr6/ztg=
Subject key identifier: 74:36:43:C7:2E:76:3D:D8:89:79:46:61:3E:27:0A:10:98:A1:57:3E
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019566F2D15A29B3514067520362771C2131
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/dDZDxy52PdiJeUZhPicKEJihVz4.roa
Signing time: Wed 05 Mar 2025 15:35:44 +0000
ROA not before: Wed 05 Mar 2025 15:35:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53730
IP address blocks: 45.135.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:66:f2:d1:5a:29:b3:51:40:67:52:03:62:77:1c:21:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 5 15:35:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=743643c72e763dd8897946613e270a1098a1573e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:22:81:00:5f:1c:14:bb:57:8d:41:6e:23:
25:1f:32:50:c2:6f:0b:fe:ff:3d:86:e0:50:5b:a4:
8a:56:6c:6f:45:9b:43:23:9e:0c:a8:29:0c:70:5a:
e2:1b:fb:fc:1c:a8:7e:56:0e:f5:d1:a9:21:f0:95:
5e:19:39:8a:70:92:08:67:3b:39:a8:b5:bc:99:be:
ab:29:70:8c:5f:25:63:50:9c:85:64:7e:56:e5:34:
32:6f:67:61:b8:4e:e3:5d:70:85:f3:ee:3e:33:c5:
62:f7:06:af:9e:81:ed:0c:c9:bd:e0:59:d0:27:90:
89:7a:df:f2:74:2e:49:f8:8c:5c:45:5e:67:3f:2d:
9c:f4:9b:fa:68:9f:71:b6:04:f0:38:2d:94:92:52:
93:68:c9:6a:85:5b:bc:cf:7f:b7:cc:e1:7c:f5:96:
75:0d:f5:95:44:c0:74:b3:35:cd:25:e3:16:b7:f6:
9f:ed:cd:2f:ce:c7:ad:71:b3:02:26:61:72:45:af:
ec:07:03:44:3f:a6:68:37:05:ae:39:16:9d:ef:69:
80:f6:32:f6:4c:39:08:65:c7:24:dc:2c:6e:31:4b:
b3:e3:ae:24:f5:b4:ca:34:5c:42:b2:fb:10:20:e6:
11:9e:2b:e1:57:b8:16:63:8a:40:39:03:6c:0f:37:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:36:43:C7:2E:76:3D:D8:89:79:46:61:3E:27:0A:10:98:A1:57:3E
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/dDZDxy52PdiJeUZhPicKEJihVz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.128.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a7:9b:e5:ef:e0:1e:88:53:77:4b:a6:a7:48:65:17:d1:92:
16:50:73:96:70:ca:24:f5:41:da:c4:5a:74:87:40:39:fe:60:
35:6e:5f:87:79:da:11:c1:e5:73:c2:55:b8:b8:96:58:0a:9e:
0f:a7:ae:43:f2:59:10:39:c0:b8:ce:cc:88:d2:17:66:be:f1:
09:67:01:bb:91:b4:96:8c:2e:ca:7d:a1:26:6d:f4:43:da:1c:
96:a6:5b:2a:26:84:b5:4c:ca:5c:a7:50:00:3b:6e:28:2c:53:
59:29:30:f1:a0:3a:0e:5c:d5:bf:88:1e:bc:7f:bd:61:24:ba:
6e:d8:5b:95:17:9f:6b:b1:ed:ec:c9:a2:e6:03:21:14:e6:20:
92:ad:2f:60:01:32:21:71:b8:7b:98:02:a3:2a:c0:5f:9d:06:
cd:b5:6d:44:b4:26:1c:9a:7e:8b:9f:8c:c8:fa:5f:01:ab:c6:
4e:8d:ce:29:19:0c:cb:32:56:db:a0:97:c5:73:b0:d4:bd:04:
10:25:a5:4a:7f:18:75:eb:22:fe:a0:ff:fc:38:07:da:35:3a:
59:a1:44:99:cd:b7:2a:a3:59:f4:0d:b7:1c:bc:6b:f7:3b:31:
8b:eb:b2:ef:8d:2d:45:2e:c9:55:86:e7:b7:db:af:54:b9:9d:
37:2c:e8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:34:14 2025 by rpki-client