Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Rb_IP9RrlsNinfdUlWpa9pYvykw.roa
File: Rb_IP9RrlsNinfdUlWpa9pYvykw.roa (raw, json)
Hash identifier: 5Mfy9ffOUfGd8xOUZIls/Wj50TSRrVsO6m6xyo3m0Fo=
Subject key identifier: 45:BF:C8:3F:D4:6B:96:C3:62:9D:F7:54:95:6A:5A:F6:96:2F:CA:4C
Certificate issuer: /CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Certificate serial: 0196B92F0D7793E6E4089AC99674DE31C633
Authority key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Rb_IP9RrlsNinfdUlWpa9pYvykw.roa
Signing time: Sat 10 May 2025 07:53:10 +0000
ROA not before: Sat 10 May 2025 07:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208992
IP address blocks: 45.144.42.0/24 maxlen: 24
85.158.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:2f:0d:77:93:e6:e4:08:9a:c9:96:74:de:31:c6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Validity
Not Before: May 10 07:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45bfc83fd46b96c3629df754956a5af6962fca4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:15:5b:56:99:90:0e:bf:bc:a7:e2:fd:25:
1d:0f:96:54:6d:7f:cd:b3:97:f3:29:dc:d4:0b:4e:
9d:3b:e0:18:fa:7b:be:20:63:ff:ec:1c:2c:9f:80:
8b:96:02:60:a5:b9:69:89:fb:51:62:bc:6a:8b:21:
08:67:a0:3b:73:fe:1f:7d:63:e2:ce:1d:e9:80:da:
4b:a4:05:97:8e:34:65:a8:7c:e5:f2:21:77:43:a8:
51:3c:df:dc:ef:8c:76:8e:fa:1d:52:36:32:a6:d0:
98:c9:31:5c:f6:de:1c:4a:dd:97:36:fc:a8:0a:95:
f2:dd:5b:4b:59:a6:07:ea:fb:b2:14:50:e7:76:97:
22:fc:8d:c1:20:4b:d5:24:87:01:90:b3:56:42:25:
a6:00:29:bf:c7:7a:ef:a8:f4:24:bc:85:52:05:2a:
1e:49:ef:25:03:48:e3:cd:2d:11:d6:96:bd:36:07:
e8:7d:8a:d5:09:ea:c8:22:f3:a9:44:71:f5:a8:af:
37:7d:37:6d:35:45:7f:3b:5d:40:cf:2b:15:be:2c:
0f:a9:14:4c:64:0e:63:bc:79:fa:26:bc:b6:7b:87:
c0:24:f0:8f:ac:bd:5a:ef:3d:12:09:55:d4:4a:4a:
fc:11:63:01:fc:bf:37:7c:69:7a:58:5a:29:33:0b:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BF:C8:3F:D4:6B:96:C3:62:9D:F7:54:95:6A:5A:F6:96:2F:CA:4C
X509v3 Authority Key Identifier:
keyid:CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/Rb_IP9RrlsNinfdUlWpa9pYvykw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.42.0/24
85.158.184.0/24
Signature Algorithm: sha256WithRSAEncryption
86:43:ee:1a:85:7c:42:07:a9:7b:76:6b:74:78:2c:1f:ab:ce:
00:40:b0:b3:fd:47:2b:b7:1c:3c:b2:1e:7d:82:5d:a8:a5:72:
03:5a:39:d0:9b:4f:54:44:4f:1a:d5:30:a5:8f:97:4c:41:92:
ef:8e:5c:e1:01:a6:67:30:0a:99:f1:9e:1c:2d:a9:a5:c5:f1:
c8:97:30:2c:4d:a1:e2:58:97:5b:f9:58:33:f9:73:aa:b2:dd:
e3:55:b0:ac:0a:aa:bd:cc:28:ae:ba:ef:4b:e0:bb:bd:df:ce:
c3:25:aa:d4:90:f3:08:89:fb:ae:94:18:f5:ce:fe:b3:88:4b:
dd:84:41:b3:4a:b1:9d:69:e8:3c:97:d5:4f:30:67:7d:88:1a:
68:c5:a0:07:e6:7b:71:f6:45:1e:2e:47:20:13:1b:43:bd:35:
3e:a5:8b:c3:f8:44:63:64:b2:c7:81:ff:8e:70:28:ec:40:c4:
a6:e0:bf:56:4d:ad:5a:65:88:7b:ec:fa:11:79:4f:72:82:92:
16:fc:ed:cb:d8:2e:84:97:41:65:0d:b6:c1:95:4b:4c:28:8c:
3a:2c:cb:ca:2c:4f:eb:10:1a:c7:7e:c8:94:51:85:c2:99:58:
7d:01:3d:05:87:75:ac:b8:ac:36:db:dc:ef:85:1e:86:04:ce:
8d:d0:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:35:38 2025 by rpki-client