Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa
File: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (raw, json)
Hash identifier: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=
Subject key identifier: CF:55:F1:26:65:D7:C7:CB:95:C6:19:3D:0B:04:09:5E:23:EA:1F:35
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0194266C0D1A44274BB2ECB6849CF0A7C74C
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa
Signing time: Thu 02 Jan 2025 09:50:02 +0000
ROA not before: Thu 02 Jan 2025 09:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35913
IP address blocks: 45.139.56.0/22 maxlen: 24
45.139.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:0d:1a:44:27:4b:b2:ec:b6:84:9c:f0:a7:c7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf55f12665d7c7cb95c6193d0b04095e23ea1f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:af:5b:cc:54:01:ae:a3:13:37:75:45:d3:35:
fe:fa:7d:c9:24:5a:65:74:19:e8:ba:ee:af:7e:95:
fb:65:fc:b3:a7:23:79:b5:1a:fa:40:5d:f5:df:ae:
70:f3:30:8d:a5:41:87:0a:d5:72:80:30:7c:a9:0f:
71:6c:d7:e3:9d:20:1e:c2:ca:4d:ed:7a:22:b5:5d:
30:19:84:2b:83:3b:a9:67:26:2d:8c:cf:2b:58:37:
48:16:c5:1f:58:a8:20:9d:9d:9a:72:37:73:0d:b1:
f5:7a:b7:46:24:66:80:35:18:a6:48:25:99:73:1d:
7a:f9:cb:a9:92:81:69:48:07:04:6c:7a:a6:da:21:
ac:b9:bb:84:14:92:19:1d:be:50:cd:c1:5e:90:df:
2e:63:5c:06:7e:ce:56:01:db:0c:f9:d7:99:0c:75:
ab:8d:43:57:ab:c5:67:e2:e2:a8:97:ac:96:b4:51:
8f:1a:05:41:e7:61:d1:13:41:97:14:98:a4:cd:99:
4e:26:d0:7a:aa:d4:db:31:2f:a2:da:a2:cc:b0:a6:
8e:53:14:5b:1e:bd:ac:58:22:12:89:19:ba:de:87:
27:7e:72:52:18:34:5e:2b:7d:3f:bc:0c:56:da:7f:
e1:b4:16:6c:7b:38:95:b5:cd:55:06:d6:19:5c:ab:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:55:F1:26:65:D7:C7:CB:95:C6:19:3D:0B:04:09:5E:23:EA:1F:35
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.56.0/22
45.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:6f:93:73:b1:45:7a:83:0d:d6:68:fe:a8:93:c0:1a:27:46:
d1:58:52:83:ec:74:62:76:eb:90:e6:1a:1e:36:9b:d8:7f:17:
10:32:15:54:50:31:cd:b6:41:51:35:22:1e:67:8b:14:49:2f:
60:4c:d1:2f:2c:35:bd:53:80:4f:89:c8:b1:d2:46:0a:10:1c:
54:56:00:b0:c6:99:63:1b:f1:e9:06:62:d9:da:9b:0f:55:43:
98:72:5d:d6:18:88:a9:aa:91:e6:5b:30:bb:bc:de:96:24:cb:
37:a8:95:02:1b:70:ec:ec:43:c4:38:97:d6:b6:d2:6f:53:2e:
2d:9f:99:2e:9b:89:ef:7e:a0:d3:7c:e6:17:87:36:3a:15:34:
f4:c6:2b:e1:92:9a:4d:33:bf:35:0a:9c:91:6f:81:07:39:41:
00:89:a0:83:ef:eb:5e:3b:43:27:fe:71:f6:51:b0:69:fe:e4:
4a:11:4d:40:50:53:e1:11:26:87:c9:b0:7e:56:f6:d4:fd:32:
8a:df:65:62:9c:d5:11:14:f5:a8:03:9d:9a:63:0c:59:9c:2e:
56:1a:80:c8:53:b0:af:3c:cc:9e:56:23:47:1e:1c:b4:25:42:
eb:6b:36:43:73:73:39:df:32:90:69:73:90:67:a3:46:2c:29:
78:ab:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:45:50 2025 by rpki-client