Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa
File: 1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa (raw, json)
Hash identifier: GluiNGZxsHxMI1guABtXYth8XDdUuWytJuXVUN1uHow=
Subject key identifier: F9:73:64:57:E0:87:15:E2:D2:00:1F:2F:EC:B8:D3:96:BA:1E:E8:8C
Certificate issuer: /CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Certificate serial: 019679EB5F04DB58218894C87BC56C80A088
Authority key identifier: 4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa
Signing time: Mon 28 Apr 2025 01:03:10 +0000
ROA not before: Mon 28 Apr 2025 01:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58293
IP address blocks: 45.11.200.0/24 maxlen: 24
45.11.201.0/24 maxlen: 24
45.11.202.0/24 maxlen: 24
45.11.203.0/24 maxlen: 24
45.81.100.0/22 maxlen: 24
45.81.101.0/24 maxlen: 24
45.81.102.0/24 maxlen: 24
45.81.103.0/24 maxlen: 24
185.195.48.0/24 maxlen: 24
185.195.49.0/24 maxlen: 24
185.195.50.0/24 maxlen: 24
185.195.51.0/24 maxlen: 24
193.162.40.0/24 maxlen: 24
2a07:a5c0::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:eb:5f:04:db:58:21:88:94:c8:7b:c5:6c:80:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a4ad03a0f592bb9c97c3052a690125d846415a4
Validity
Not Before: Apr 28 01:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9736457e08715e2d2001f2fecb8d396ba1ee88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:a4:a3:06:b9:e5:c2:ca:88:24:8f:fe:f7:
a1:c6:f6:28:f5:22:a6:2a:79:c6:e1:4e:fa:c3:bb:
36:86:a3:73:63:32:73:06:08:0f:4b:94:a5:37:c3:
1f:fc:2b:ac:21:a1:78:da:76:c6:57:7f:ff:6b:0e:
c8:fd:15:11:12:44:c3:81:9c:3b:bc:a2:5b:1b:cf:
fa:ba:6b:89:92:4b:5d:b4:22:fe:d0:a4:bd:a9:34:
cf:6f:df:f1:58:97:55:b7:14:0c:d4:8f:c8:92:7d:
f2:f1:37:12:20:18:09:23:cd:46:96:b9:47:9a:d5:
38:37:3b:4f:86:ef:b8:e0:3f:af:35:09:af:41:eb:
aa:53:55:57:f7:42:06:4d:f7:12:7d:7e:b2:5e:a7:
ab:2a:53:e4:b5:a1:d0:9a:95:6a:d1:f3:8f:66:c9:
c8:c1:2d:1a:c2:e4:f8:db:39:4e:92:1f:1a:03:20:
44:d9:b8:03:ba:be:d9:1e:52:22:0f:20:c8:ba:12:
9a:58:6d:20:10:26:04:9e:3a:51:b7:61:bb:88:d6:
84:1a:34:27:34:c8:35:7d:98:2e:1d:b6:05:38:35:
95:6d:cc:a8:12:62:6e:4d:a4:13:a0:2b:1f:46:ab:
aa:5d:88:6f:76:c4:9a:6b:41:a1:dd:ca:c3:0b:c0:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:73:64:57:E0:87:15:E2:D2:00:1F:2F:EC:B8:D3:96:BA:1E:E8:8C
X509v3 Authority Key Identifier:
keyid:4A:4A:D0:3A:0F:59:2B:B9:C9:7C:30:52:A6:90:12:5D:84:64:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SkrQOg9ZK7nJfDBSppASXYRkFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/1-XNkV-CHFeLSAB8v7LjTlroe6Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/167903-f426-4bf0-9233-a9ac66be48f7/1/SkrQOg9ZK7nJfDBSppASXYRkFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.200.0/22
45.81.100.0/22
185.195.48.0/22
193.162.40.0/24
IPv6:
2a07:a5c0::/36
Signature Algorithm: sha256WithRSAEncryption
a8:22:ba:9b:3a:a3:50:b5:d4:f8:e0:d8:8e:46:23:62:22:5d:
d3:b4:9d:8d:d6:cd:0d:9a:0c:7f:1e:1a:10:db:a3:f5:60:53:
bc:ed:4b:38:93:95:88:77:1d:a1:54:62:ab:92:dd:03:e7:06:
94:8a:7a:29:93:60:ca:76:94:b0:a7:32:56:c3:bf:55:d1:0e:
90:e3:5c:a6:05:a8:69:be:ce:25:ce:4a:8c:4b:97:e8:52:ae:
2e:f3:aa:db:c1:e4:04:95:2a:b1:06:dd:20:8b:9b:11:ae:f0:
dc:16:4b:c1:54:cf:f6:5f:af:b4:c2:4b:85:b6:db:c2:21:76:
19:72:33:0b:f7:ed:11:21:b2:e3:38:39:89:61:37:4a:f0:81:
0f:02:82:99:2b:85:59:e1:a8:9c:41:f4:65:cf:29:94:f8:f0:
3d:eb:41:00:4a:0f:3c:dc:80:1b:f5:51:6c:ff:7b:6d:a7:cf:
3f:df:10:5e:0b:a6:fd:38:b4:ea:b3:b5:2c:4a:88:be:5e:77:
50:f8:ae:bd:a4:a0:56:31:f0:b8:33:92:07:a6:81:ef:e8:27:
41:6b:6b:07:5c:3f:4a:6f:09:7f:1e:e8:ca:93:d6:ff:56:62:
1c:8a:0b:ea:a6:70:30:a2:c8:7f:59:a7:9b:c7:76:8b:7e:90:
62:a8:07:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:52:28 2025 by rpki-client