Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/8H5TOMd67aNG48y4ErPgYV0YX0E.roa
File: 8H5TOMd67aNG48y4ErPgYV0YX0E.roa (raw, json)
Hash identifier: PgeEgkIGIGVBuq8xPHBreUz8+IAiM5AuP4J/fwAAyms=
Subject key identifier: F0:7E:53:38:C7:7A:ED:A3:46:E3:CC:B8:12:B3:E0:61:5D:18:5F:41
Certificate issuer: /CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Certificate serial: 0195F335E325D81504596AD85B32E6B4E980
Authority key identifier: 4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/8H5TOMd67aNG48y4ErPgYV0YX0E.roa
Signing time: Tue 01 Apr 2025 21:15:49 +0000
ROA not before: Tue 01 Apr 2025 21:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212137
IP address blocks: 45.150.56.0/24 maxlen: 28
109.95.124.0/22 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f3:35:e3:25:d8:15:04:59:6a:d8:5b:32:e6:b4:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a45472b550b34fdb01adcd510a9dcd821c9d991
Validity
Not Before: Apr 1 21:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f07e5338c77aeda346e3ccb812b3e0615d185f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:68:23:3c:54:8e:9e:73:51:7f:9f:6d:5f:
72:0a:8f:ad:59:c1:c2:a0:41:c6:67:de:ac:55:be:
dd:6b:e6:d0:32:f3:7d:ea:0e:89:6f:0a:07:52:66:
0b:63:bb:5e:57:0a:8d:db:31:47:da:0e:ad:55:1b:
11:54:8f:a6:48:5d:7b:fc:f7:94:25:46:14:8f:69:
3c:28:16:93:9b:b1:d8:b4:4b:e5:8a:e6:6e:c6:f6:
fd:e1:46:96:57:06:e6:a7:48:7e:58:10:ad:42:f7:
10:ac:4c:df:cb:92:1d:bb:d1:9a:a0:1d:6c:18:9d:
e7:92:bb:ca:6f:4a:f4:22:64:91:1e:63:a6:33:9c:
2a:d1:b0:ed:3d:c0:e5:83:29:9c:99:a3:ad:97:66:
3d:8b:81:91:10:ab:fc:ed:df:01:5a:9f:1f:15:7a:
25:cf:21:cd:41:bd:af:76:4a:e7:de:30:9e:7c:05:
01:e6:bb:55:92:b4:f8:69:0c:e6:75:2b:ce:f4:a2:
31:39:fe:56:af:07:9f:ef:32:34:41:99:9f:f5:55:
05:3c:82:69:a9:28:b5:65:1d:ee:ad:04:4d:e4:39:
0b:19:ef:4c:6e:71:1e:e6:9e:8a:e4:0e:11:bc:0a:
e0:e2:41:d0:9f:c1:ca:fa:1f:a4:10:98:43:48:db:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7E:53:38:C7:7A:ED:A3:46:E3:CC:B8:12:B3:E0:61:5D:18:5F:41
X509v3 Authority Key Identifier:
keyid:4A:45:47:2B:55:0B:34:FD:B0:1A:DC:D5:10:A9:DC:D8:21:C9:D9:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/8H5TOMd67aNG48y4ErPgYV0YX0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0e55d0-fafd-49c2-9c08-12c058bfacc1/1/SkVHK1ULNP2wGtzVEKnc2CHJ2ZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.56.0/24
109.95.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:8c:a8:2a:00:9a:25:01:3f:4c:41:28:c0:43:1a:74:a9:b1:
54:6e:14:92:14:f3:3e:0a:6b:79:b7:56:65:cb:75:95:49:9c:
29:e6:59:4d:c1:3e:fb:ae:0f:0a:10:02:c3:09:26:38:41:f5:
8b:d3:45:81:6d:96:b4:12:21:a2:ed:99:55:0c:d0:a7:fa:6c:
ad:f2:15:da:01:9d:e8:82:77:37:31:ab:b9:b6:7e:1b:a9:7f:
ab:f6:d9:de:0f:e3:4d:65:ce:4b:79:cd:90:a6:6d:3e:92:23:
70:2e:44:7d:9c:a6:e2:91:cf:94:41:9b:b8:05:cb:28:b0:b7:
4a:9f:3b:7e:f3:d4:d9:7a:a3:39:05:64:06:7f:8e:9f:f8:41:
44:57:f3:f2:da:35:90:99:84:f5:ac:c9:2c:2e:9f:bd:fb:09:
ad:39:1f:c2:e8:24:d6:49:6e:35:a0:42:48:9e:60:29:18:35:
f9:62:b5:26:86:12:d7:7a:2e:bd:77:e6:e3:42:08:41:0f:9f:
7d:dc:c8:b0:80:24:1e:b2:9c:aa:21:52:6e:4f:24:b9:a2:f2:
eb:92:09:e8:fc:4e:03:83:7b:2a:c7:4c:40:31:5a:6e:a5:93:
85:ac:b9:b1:6d:2f:d5:8a:43:2c:17:90:1a:6f:af:e8:1f:9b:
cd:14:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:42 2025 by rpki-client