Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/_V9pWsG5mKkT0hA55j0yMIJFyYg.roa
File: _V9pWsG5mKkT0hA55j0yMIJFyYg.roa (raw, json)
Hash identifier: R+SUqygHtXUgXmQoQ+KnwbPjcscerG2zrxcHzWTA/qY=
Subject key identifier: FD:5F:69:5A:C1:B9:98:A9:13:D2:10:39:E6:3D:32:30:82:45:C9:88
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 01942369D841362D9405AA02E74FDA25E077
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/_V9pWsG5mKkT0hA55j0yMIJFyYg.roa
Signing time: Wed 01 Jan 2025 19:48:46 +0000
ROA not before: Wed 01 Jan 2025 19:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 45.144.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d8:41:36:2d:94:05:aa:02:e7:4f:da:25:e0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jan 1 19:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd5f695ac1b998a913d21039e63d32308245c988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:4e:1c:48:49:71:41:d8:2e:2c:af:f5:f1:
dd:39:63:67:f4:6a:02:b5:68:07:6b:9e:95:c4:d8:
2b:bf:83:e3:83:f8:4d:d8:2a:7f:a7:d7:23:b0:11:
18:71:d3:c4:f2:63:26:58:23:96:a4:11:1f:77:21:
38:2e:ee:b4:5f:4b:b8:66:11:e7:ec:cd:ea:2b:75:
46:82:2c:d8:ec:08:e7:5a:69:f9:8a:75:2e:21:86:
bd:21:d0:d9:c7:d3:4d:8f:50:0c:2b:9f:1a:aa:55:
d6:59:1e:94:7c:4e:fa:d5:5d:b3:aa:76:02:06:05:
62:32:24:ca:1c:3c:e5:9c:74:a4:a5:49:6e:52:18:
e4:59:60:6b:ac:2c:19:25:e2:7a:13:f3:75:e0:57:
71:13:81:cc:68:34:b1:de:6e:d1:c0:aa:a0:a3:1b:
1a:89:c7:cb:7c:94:8e:67:ad:09:16:26:47:46:98:
dd:8d:af:f2:cd:33:07:44:6f:4b:bf:6d:1a:d0:12:
e9:33:df:a0:d8:53:d0:2c:a0:6a:4d:c7:31:39:92:
cc:bb:ba:d9:fc:c5:27:ed:67:70:94:a0:d4:47:c5:
1e:61:14:72:be:75:e1:92:3a:15:6b:08:40:5e:6f:
b8:56:7c:f3:81:95:e1:82:92:81:98:b9:3c:0d:3b:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:5F:69:5A:C1:B9:98:A9:13:D2:10:39:E6:3D:32:30:82:45:C9:88
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/_V9pWsG5mKkT0hA55j0yMIJFyYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.196.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1d:24:df:e0:84:89:7d:f5:af:7c:74:80:99:eb:9a:f9:ca:
40:89:1a:56:9e:57:2b:f2:d4:3e:98:20:0a:2f:09:8a:cf:6b:
f0:53:17:b6:30:93:15:5e:8f:c0:7e:b8:64:87:57:0a:b2:d0:
ab:e3:f5:61:b1:36:a7:67:eb:d8:e3:bb:4d:3c:4b:91:7b:5a:
4c:d4:3d:a4:9e:eb:a2:b1:52:01:99:c4:88:d7:63:91:e8:23:
3c:f3:c6:a2:f0:35:70:ce:2f:22:00:9e:fb:b1:3d:66:3e:9d:
c6:83:b8:b1:3e:fc:9d:e8:13:1b:12:cb:ef:10:5b:fc:5a:ff:
49:ea:fd:cb:6c:69:7a:ec:bb:60:32:82:6c:43:be:bc:42:33:
80:a8:17:bc:6c:0a:e8:65:1d:2e:60:a1:2f:82:a2:16:0d:3d:
06:62:9c:d8:fb:18:40:15:39:a8:52:c1:3c:e3:4a:ae:43:1a:
ce:c5:d2:65:f9:d2:63:4c:1e:a5:c6:a9:0a:9b:64:92:0c:5e:
49:00:4e:79:2b:ca:e4:ca:d7:62:6c:8c:4e:bd:84:32:cd:bd:
34:f4:df:45:88:dc:2b:a8:2c:55:11:10:91:8e:18:3c:89:c5:
11:96:0b:7c:af:d5:ef:8e:35:25:b5:a3:57:52:8b:16:58:48:
49:33:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:20:37 2025 by rpki-client