Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/l5jJtvINKyJ9n97BphVbZ3kQkdc.roa
File: l5jJtvINKyJ9n97BphVbZ3kQkdc.roa (raw, json)
Hash identifier: hwadq1oTwdRICf0MSyZn+sjlapqWnEPU6SXnwdtYsY0=
Subject key identifier: 97:98:C9:B6:F2:0D:2B:22:7D:9F:DE:C1:A6:15:5B:67:79:10:91:D7
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 01969ACDA44E7B19E2DCD3196104842C05B5
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/l5jJtvINKyJ9n97BphVbZ3kQkdc.roa
Signing time: Sun 04 May 2025 10:18:10 +0000
ROA not before: Sun 04 May 2025 10:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.95.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:cd:a4:4e:7b:19:e2:dc:d3:19:61:04:84:2c:05:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: May 4 10:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9798c9b6f20d2b227d9fdec1a6155b67791091d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:1c:66:70:a7:93:d8:98:21:00:ce:33:83:
51:17:54:27:26:54:29:cb:04:b5:7a:13:9a:7a:81:
55:9f:f7:0a:da:46:fd:85:f3:74:50:52:f7:e6:7c:
2c:04:93:6f:f3:1c:fc:d8:ee:1f:7b:06:40:8d:e5:
67:95:1c:c4:43:02:43:ae:f4:67:fd:81:e5:c7:af:
cd:c3:01:f1:d6:28:f3:0e:9d:4f:4e:83:f2:6b:fb:
ec:06:81:58:5e:4b:8c:fb:83:41:4a:7a:46:80:66:
6f:6f:d0:e6:74:5f:0b:c3:8d:d6:39:e2:72:52:fc:
86:5f:54:d4:64:94:cb:fc:ca:5c:18:9e:a2:1b:cb:
98:a3:33:b1:b2:f9:87:fa:b5:d2:b0:5b:5e:19:88:
54:f5:ad:bb:e8:c1:66:b2:72:a7:74:dd:ac:e0:a0:
3b:21:47:5e:c9:de:d6:a4:05:ab:e1:49:92:77:9d:
72:90:52:aa:38:36:9b:66:79:92:c7:8c:63:f1:59:
83:e0:ae:1d:04:66:d5:c3:dc:90:4f:6d:9d:16:33:
fb:c2:c2:c1:c7:e5:da:d4:d1:82:ac:e6:fe:73:60:
1f:76:9b:17:22:70:9f:87:e6:cf:e5:db:f1:9b:cc:
53:67:30:60:81:83:e7:78:22:5c:41:ae:12:a1:c4:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:98:C9:B6:F2:0D:2B:22:7D:9F:DE:C1:A6:15:5B:67:79:10:91:D7
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/l5jJtvINKyJ9n97BphVbZ3kQkdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0f:06:34:17:77:e5:ad:06:4e:d4:48:61:6a:9e:4c:2b:3d:
64:47:d3:6c:b0:7e:75:ac:e2:dc:cd:79:04:ea:1e:1e:c9:a7:
66:94:93:a0:fe:2e:2b:77:0f:82:22:ae:10:14:25:5f:46:be:
20:d7:0c:c4:68:8b:1f:fa:92:f1:c8:e6:2e:e6:0e:f8:7a:31:
66:10:10:74:62:02:c0:f1:95:7c:f1:ce:17:88:61:6f:b4:27:
a9:8a:c9:92:02:3b:cb:8c:f6:bf:0c:a1:a8:92:a9:f6:31:3f:
48:42:b4:89:ee:6a:59:f3:e8:00:3e:13:9c:e9:c2:20:1f:b7:
8d:b0:05:58:b6:6b:66:75:f7:b5:40:df:71:90:a9:ed:64:df:
ba:c1:c7:b6:77:49:16:8e:5c:d8:49:be:de:29:12:05:a9:3b:
5a:84:93:ac:10:c5:05:b0:57:36:00:c5:9a:6f:f8:91:cb:3f:
ba:d3:24:39:df:df:d1:71:83:ed:a0:28:ba:b2:b2:11:e9:1d:
ef:e2:37:93:a9:f0:dd:18:3d:cd:b4:88:19:12:23:2b:ce:b2:
85:5e:dc:9e:cb:bd:7c:1c:80:30:c2:f7:20:7b:41:30:0b:31:
18:b9:15:e3:82:a7:0d:74:7c:dc:a9:14:8c:1f:8c:af:39:a2:
1a:55:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:05:36 2025 by rpki-client