Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/eiMmsvPI5VT5TwWoTUu9KyvNxP4.roa
File: eiMmsvPI5VT5TwWoTUu9KyvNxP4.roa (raw, json)
Hash identifier: WxhpK/ZAY3Xnn1MXC4YUVNl5m6o0EfDukJCGbYws1Pc=
Subject key identifier: 7A:23:26:B2:F3:C8:E5:54:F9:4F:05:A8:4D:4B:BD:2B:2B:CD:C4:FE
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F98F1FD36534446A89AAD5332510A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/eiMmsvPI5VT5TwWoTUu9KyvNxP4.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57304
IP address blocks: 45.135.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:98:f1:fd:36:53:44:46:a8:9a:ad:53:32:51:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a2326b2f3c8e554f94f05a84d4bbd2b2bcdc4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:6b:41:81:92:a5:c6:4a:d6:99:bd:2f:ff:
8a:90:fc:15:ac:13:39:2b:73:de:59:3f:d7:b6:fb:
44:24:18:6a:57:54:16:c9:10:ed:d3:1a:19:90:7f:
f0:3f:60:78:98:1a:81:ec:f6:97:bf:49:5b:be:bc:
9f:98:e8:70:23:da:15:7e:c6:8f:f3:5a:79:6b:31:
7a:9f:ed:40:3d:d5:1b:f6:91:79:7d:6f:fd:e8:bb:
93:1b:29:6b:d2:02:06:81:c5:bf:e4:7d:bc:83:b5:
37:1d:3c:1a:0d:32:8c:0b:91:18:e4:8c:a7:d1:b7:
9d:9c:3e:83:2b:d4:b4:6b:b6:63:df:09:2c:a4:d5:
30:4f:92:d8:ab:03:8e:eb:bf:b5:51:ac:23:83:10:
6a:62:56:94:30:d1:da:13:c4:ee:23:a9:cb:6c:e0:
36:53:66:59:40:eb:25:93:9a:50:7d:bf:57:db:7c:
07:06:38:40:82:4b:fc:85:27:7a:90:d0:b5:8d:fd:
74:47:30:f7:0c:f4:d0:21:9d:da:96:b3:bb:90:94:
39:d5:8e:ed:84:3b:91:8d:fc:a5:6f:69:29:ee:c3:
1c:f3:16:7e:5a:ea:75:1a:db:4a:4e:b1:c5:d8:08:
2e:c2:8f:c6:49:e0:92:c3:5b:4b:bc:59:75:40:f0:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:23:26:B2:F3:C8:E5:54:F9:4F:05:A8:4D:4B:BD:2B:2B:CD:C4:FE
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/eiMmsvPI5VT5TwWoTUu9KyvNxP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.167.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b0:8a:87:84:0d:c4:37:c6:86:53:f6:5b:17:a0:ab:6b:94:
77:5d:e2:dc:63:57:5b:f0:46:b8:6d:1b:20:cd:79:7e:b9:e4:
11:78:d3:d6:eb:ce:8f:3a:06:46:30:10:85:a1:fc:cf:fb:91:
d8:53:35:14:db:71:84:db:40:9a:77:5b:6f:3a:3b:b5:74:f3:
9d:0f:c3:ee:85:78:40:f5:b0:ad:6e:3d:0e:8c:47:22:ce:55:
44:2f:e3:ed:ae:98:72:27:be:20:c7:30:ae:b9:10:36:a9:3d:
f4:af:c9:1e:4c:8f:f3:e5:a6:3f:c2:3a:e1:01:c6:13:a6:65:
ec:d9:3e:7c:e3:90:48:04:c7:f0:13:d5:1b:e0:29:c4:59:d1:
53:61:67:61:35:06:a2:3d:db:6e:1d:c8:e4:b2:28:78:58:7b:
03:1a:4e:4c:2d:69:02:7e:f4:c7:f1:28:54:a5:b2:63:ce:22:
13:3e:d6:b9:1f:21:74:a3:6b:cb:87:f8:7b:dc:fd:f0:b9:64:
0b:3c:3d:a0:2b:ba:f8:64:0e:3e:0f:66:62:68:1b:6d:31:46:
90:ac:cd:0f:22:e4:51:1a:c2:13:02:47:3e:0d:74:f5:74:c3:
0d:cd:30:f5:db:64:14:83:72:9a:ee:e1:9a:30:35:d3:03:1e:
63:02:2a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:20 2025 by rpki-client