Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/RackKE1twGeBor1eLjDiSlTrVkc.roa
File: RackKE1twGeBor1eLjDiSlTrVkc.roa (raw, json)
Hash identifier: fjoph1tBy6gB1mXGT8/AsYnic9+cO2wmV2369HxSse0=
Subject key identifier: 45:A7:24:28:4D:6D:C0:67:81:A2:BD:5E:2E:30:E2:4A:54:EB:56:47
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 0196A54738EAD4722F6FCBF33A1636366FB0
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/RackKE1twGeBor1eLjDiSlTrVkc.roa
Signing time: Tue 06 May 2025 11:07:10 +0000
ROA not before: Tue 06 May 2025 11:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 45.13.171.0/24 maxlen: 24
93.88.20.0/24 maxlen: 24
93.88.21.0/24 maxlen: 24
103.127.47.0/24 maxlen: 24
185.152.60.0/23 maxlen: 23
185.152.61.0/24 maxlen: 24
185.189.224.0/24 maxlen: 24
185.198.51.0/24 maxlen: 24
195.245.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:47:38:ea:d4:72:2f:6f:cb:f3:3a:16:36:36:6f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: May 6 11:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45a724284d6dc06781a2bd5e2e30e24a54eb5647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5b:49:47:b8:8f:32:49:ce:a5:7d:1e:6b:94:
ae:7e:f0:a5:84:f9:01:aa:be:ec:fc:25:5b:51:ed:
85:a7:ac:82:00:a8:52:47:a4:1b:a8:5e:b3:b8:43:
2c:7c:c4:3d:5f:50:ea:f4:e4:4f:27:08:43:08:25:
17:80:22:5f:4b:82:74:40:00:e7:97:a0:64:7b:4b:
48:e8:be:e4:05:0c:04:2f:86:ee:3e:4c:ad:50:28:
30:b7:bf:76:cc:22:8a:e2:e4:c7:93:91:a5:d3:66:
d1:e1:ac:ee:12:04:0b:83:cb:1c:67:af:8d:f9:1a:
b3:e3:b9:ce:4c:d6:f5:da:b5:50:df:d1:79:a8:62:
80:2d:7f:3e:ac:53:55:5f:93:09:9b:cb:cb:81:ba:
e3:b8:24:1f:06:b5:88:da:7e:e1:75:fd:83:1e:07:
5d:bf:54:c2:81:2d:38:f1:9c:9e:89:ca:96:ab:9d:
1c:c7:51:1e:04:0c:cc:a3:33:14:e7:a8:a2:fe:d7:
43:33:b9:71:4b:3e:6d:5a:90:fc:c1:e6:74:5e:da:
61:e9:4a:59:25:a3:d7:26:f6:4c:4e:65:23:67:1a:
ea:3e:14:38:b9:b7:3b:1e:51:5a:79:94:c4:a5:b9:
28:28:30:a5:cb:43:46:35:4d:33:4e:a1:d6:e0:5f:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A7:24:28:4D:6D:C0:67:81:A2:BD:5E:2E:30:E2:4A:54:EB:56:47
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/RackKE1twGeBor1eLjDiSlTrVkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.171.0/24
93.88.20.0/23
103.127.47.0/24
185.152.60.0/23
185.189.224.0/24
185.198.51.0/24
195.245.89.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:92:09:8f:57:0e:36:b2:5b:0d:ba:4c:7d:da:1c:a7:f2:0e:
0a:b6:f2:24:43:78:14:2a:65:e7:94:7a:cb:81:ab:01:e0:d9:
30:d5:c3:26:52:49:3a:fe:4f:7b:5c:b7:e9:c2:b4:4b:dd:e2:
ff:48:8f:61:ab:87:89:b6:0d:54:f8:9b:02:6d:3f:cf:f2:2b:
f7:a4:5e:0c:da:cf:46:27:57:0c:10:c2:27:42:7e:93:63:c5:
42:e2:60:e4:02:7a:56:31:d3:c5:22:1b:cc:a9:04:79:97:f8:
27:75:10:18:a8:b0:29:6e:be:13:91:5e:df:1e:99:10:f2:ae:
b8:cf:5c:83:21:ac:1a:d6:cd:ff:46:da:38:81:3f:2c:bf:70:
fe:0a:32:4e:80:f9:8f:30:92:9c:5e:93:c9:87:d8:e5:c5:92:
5e:a0:17:46:fb:5b:7e:74:c3:74:81:b6:a5:f7:d8:e5:4d:bd:
34:36:0e:c4:de:c4:cb:45:71:45:54:0d:6c:c4:74:96:f4:58:
4e:bf:4b:cd:d4:e0:cb:ea:18:e6:16:ce:e2:7f:84:57:96:fa:
32:79:50:e6:fe:71:ad:29:b0:47:dd:70:22:93:ec:81:8c:59:
d7:33:22:51:22:21:cf:a7:7f:e1:73:e1:0e:f1:b1:3e:ad:ef:
0f:1e:a6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:08:45 2025 by rpki-client