Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/_prKn4bJAQ2Jee3ta1lkMe8_sQo.roa
File: _prKn4bJAQ2Jee3ta1lkMe8_sQo.roa (raw, json)
Hash identifier: 8Cw2sdwKWxygydE0VIIscbH3iidJfqh/XAxj8LV8IDE=
Subject key identifier: FE:9A:CA:9F:86:C9:01:0D:89:79:ED:ED:6B:59:64:31:EF:3F:B1:0A
Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial: 0196806CB710AE909B57F81204041EF16668
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/_prKn4bJAQ2Jee3ta1lkMe8_sQo.roa
Signing time: Tue 29 Apr 2025 07:22:10 +0000
ROA not before: Tue 29 Apr 2025 07:22:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.66.82.0/24 maxlen: 24
45.66.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:6c:b7:10:ae:90:9b:57:f8:12:04:04:1e:f1:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
Validity
Not Before: Apr 29 07:22:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe9aca9f86c9010d8979eded6b596431ef3fb10a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2c:7b:60:a9:f9:16:f5:62:bb:cc:b3:0a:87:
84:4d:a8:a1:6e:6f:5a:94:a8:64:e7:43:02:06:56:
c3:d7:c5:dd:15:75:30:f8:b6:26:c7:93:a6:f0:81:
00:85:3c:20:59:0b:c6:ca:9b:bd:1b:6d:b1:42:f5:
01:0d:99:24:ed:91:67:5f:07:8a:97:1a:ff:5a:27:
68:51:69:21:60:56:70:fe:47:fc:5f:55:a1:76:5a:
ae:0e:7f:b3:94:43:f2:a8:d4:88:fd:48:af:97:38:
9b:75:55:81:0f:59:c8:a8:d1:41:e1:85:28:f7:9d:
9a:ff:d0:a0:27:39:11:56:ce:82:f7:d0:85:3e:77:
1b:90:ba:52:d8:b5:12:76:a2:78:8e:fa:f4:e5:ce:
22:82:e8:53:4e:bb:60:46:0d:c2:46:c1:8c:78:6d:
41:f9:29:e1:8a:49:b2:74:ad:48:ff:4b:31:9c:4e:
b7:fa:60:62:0b:86:0d:a0:f0:48:53:3a:23:32:29:
5d:74:92:9c:59:97:60:87:45:0d:2e:a5:ac:d2:06:
05:c8:42:0e:c4:ea:79:a4:f8:d1:09:8c:ef:85:fe:
48:63:e1:cf:35:9f:16:25:9b:eb:ee:f7:71:61:2e:
91:9b:40:6f:2c:4f:8a:63:9b:71:25:fc:f7:9b:9e:
19:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9A:CA:9F:86:C9:01:0D:89:79:ED:ED:6B:59:64:31:EF:3F:B1:0A
X509v3 Authority Key Identifier:
keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/_prKn4bJAQ2Jee3ta1lkMe8_sQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.82.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:38:6f:09:54:18:62:0b:76:ac:db:40:2b:3d:e8:07:46:22:
05:fe:fc:c1:55:66:3d:dd:30:4c:ff:72:ad:7d:a1:36:b9:f1:
6c:1f:fa:78:cf:ae:44:7c:4c:e9:01:29:4f:28:55:a2:30:12:
ff:b8:c8:12:72:bd:a4:9e:13:96:d6:21:c8:26:29:37:74:50:
83:e3:bb:0b:93:d6:a2:9e:fc:ce:d4:1e:c5:65:a9:63:70:28:
02:13:33:98:c0:12:aa:8a:c9:fe:f0:75:cc:3c:3d:11:8b:bd:
39:6a:79:ae:0f:0d:a0:7d:56:3f:db:e1:82:bc:39:a5:11:b4:
c0:ca:aa:e4:b8:37:f3:6b:ba:71:88:74:d6:72:91:d3:28:25:
8d:8e:3e:99:f4:06:88:28:6f:f4:b5:28:4e:3d:05:0b:77:25:
88:0b:b0:d7:37:5b:37:bb:51:59:f1:e5:d0:b7:2e:69:a7:a2:
57:65:f1:14:a3:98:63:2d:1b:da:2f:e3:d4:d0:c7:a7:23:56:
ce:0b:ac:f3:ac:40:57:72:eb:f9:5f:df:a5:ff:a4:06:5f:e8:
3d:07:4b:01:a7:d6:4f:82:f6:80:a6:19:fb:fa:cd:ef:95:a7:
2d:20:63:81:a8:9b:ca:ce:61:b9:ab:a8:fc:ba:1c:2c:0f:33:
64:07:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:19:22 2025 by rpki-client