Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CLC73dEzUib3PQDUn-rivmqjHww.roa
File: CLC73dEzUib3PQDUn-rivmqjHww.roa (raw, json)
Hash identifier: rZP4AwF+NIEzKfXLIXaUye6VNta/yO2qr8EZH/RDZds=
Subject key identifier: 08:B0:BB:DD:D1:33:52:26:F7:3D:00:D4:9F:EA:E2:BE:6A:A3:1F:0C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196A09F35D81D7039979F9DCA62DF294842
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CLC73dEzUib3PQDUn-rivmqjHww.roa
Signing time: Mon 05 May 2025 13:25:10 +0000
ROA not before: Mon 05 May 2025 13:25:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202309
IP address blocks: 45.141.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:9f:35:d8:1d:70:39:97:9f:9d:ca:62:df:29:48:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 5 13:25:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b0bbddd1335226f73d00d49feae2be6aa31f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:f0:d9:32:11:da:9e:f5:65:ef:ce:b0:c6:
3a:d3:c7:e3:3a:3f:40:df:c4:f8:8f:30:0a:1b:1d:
bb:29:e9:90:94:44:68:7a:70:a6:3f:23:c8:98:74:
4d:cd:18:7f:16:a5:fb:df:54:c9:43:b1:8f:5d:e9:
58:34:2e:35:82:26:2b:70:ec:de:f1:a1:61:1e:97:
28:2a:ef:1b:4d:1b:08:a7:d9:8d:24:84:9e:e9:6b:
1c:a7:f1:12:b6:56:79:5a:65:43:c6:8f:06:ed:e4:
2e:ef:9a:26:4b:1c:40:95:3c:cd:11:59:f0:f2:a3:
5a:3c:e8:74:67:79:c2:a8:79:ff:ad:01:fb:c4:07:
eb:a9:13:d6:51:49:90:f2:03:31:f3:eb:5b:fd:3e:
a9:76:93:32:31:ad:74:0f:92:e2:b1:50:34:67:43:
e4:a6:09:31:cc:ed:d3:f9:30:0a:f9:fe:79:e3:46:
cd:1b:86:09:02:21:8a:32:74:b6:19:a2:a1:c4:ee:
21:ce:da:d8:59:da:c3:9e:e0:d0:32:a8:61:58:22:
fc:ab:68:cf:d0:4c:0e:b5:82:84:2d:d9:b6:6b:66:
4c:d4:39:6c:87:0d:95:c5:b6:e7:8b:e7:db:f4:23:
bf:80:14:74:b0:c9:38:20:14:e1:7d:03:ba:75:5f:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B0:BB:DD:D1:33:52:26:F7:3D:00:D4:9F:EA:E2:BE:6A:A3:1F:0C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CLC73dEzUib3PQDUn-rivmqjHww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.158.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:0d:f2:ae:33:83:76:3d:c2:67:f9:ba:ee:f5:2a:ad:2b:50:
e9:3e:90:16:79:7a:7b:c7:67:d2:a0:58:dc:c4:8a:35:17:e5:
b2:db:37:f7:f4:53:50:9f:0b:44:0e:9c:84:68:38:c2:6b:01:
78:59:f5:c8:58:18:7a:f4:e3:06:6f:62:be:9d:75:d1:30:46:
44:27:bd:22:5c:6d:26:cd:48:d6:14:cb:c8:da:67:39:80:d0:
c8:93:f3:39:bf:4c:84:e0:59:09:9e:4d:91:0d:50:25:3a:01:
53:33:94:18:c4:60:c8:05:4e:9e:25:af:83:0b:b1:80:0b:e9:
d5:1f:70:65:aa:97:70:d8:2d:ac:d8:d6:17:23:c4:1e:59:81:
f0:60:bb:27:bb:d7:30:83:4f:78:66:53:25:e0:6a:e5:2f:0a:
8c:2e:1b:6c:a2:b3:8e:98:bd:48:a4:96:aa:f8:aa:d9:ad:3c:
bf:51:4d:29:e9:f1:38:5a:ab:fa:e7:3a:e8:41:0f:f8:67:62:
bb:0b:92:bb:70:c0:39:8e:76:79:3b:15:31:bf:b7:b9:65:1d:
0a:cb:f8:46:7f:93:99:60:ba:b9:b1:6b:99:78:95:c3:a9:61:
8c:2d:e6:0d:8b:13:fd:e5:de:dc:aa:41:09:97:81:92:8b:d8:
45:5a:68:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:20:33 2025 by rpki-client