Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RK1GcH6m9hY39JR0JHqlo5Rrtn4.roa
File: RK1GcH6m9hY39JR0JHqlo5Rrtn4.roa (raw, json)
Hash identifier: /sGgGJLqsZy2z0hFQgZUZEKxf6w66ezh2rOCNG26ZFQ=
Subject key identifier: 44:AD:46:70:7E:A6:F6:16:37:F4:94:74:24:7A:A5:A3:94:6B:B6:7E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01969A265B6EA4C895C257BB7625CB34E566
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RK1GcH6m9hY39JR0JHqlo5Rrtn4.roa
Signing time: Sun 04 May 2025 07:15:27 +0000
ROA not before: Sun 04 May 2025 07:15:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56755
IP address blocks: 45.148.118.0/23 maxlen: 24
139.28.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:26:5b:6e:a4:c8:95:c2:57:bb:76:25:cb:34:e5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 4 07:15:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44ad46707ea6f61637f49474247aa5a3946bb67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cf:f3:7b:b2:c1:27:dc:2d:e5:bc:88:45:6b:
61:1e:c1:1e:91:e6:19:1b:bc:2f:38:bc:0f:95:5d:
be:0b:4c:06:c9:0f:b5:95:06:86:22:9f:3d:e3:14:
f5:c2:5e:a3:9e:e6:ed:13:ae:11:e9:75:9e:78:7d:
2e:a6:32:14:45:b2:b1:57:ed:c2:d4:61:5b:06:d3:
e5:c3:8b:ef:24:79:91:1f:d3:d8:88:6c:7d:e6:f5:
9f:65:2f:7b:4b:1d:5d:63:e7:03:48:d3:97:d3:7d:
cd:27:68:9d:24:f3:4a:26:8f:ea:b8:4c:81:b3:c7:
4f:ca:09:e5:8b:40:64:45:ef:e0:79:ef:1d:16:20:
6f:60:27:59:81:e7:4d:c5:7a:5c:90:ae:f8:9d:a5:
64:e7:34:5b:28:5f:b9:d6:70:d6:37:36:c5:89:ac:
f6:ef:9d:4f:de:f2:d7:49:86:74:12:73:1d:51:6a:
3b:18:5a:7e:f9:f4:2b:bb:6d:d7:6a:0c:f7:8f:f4:
8f:80:07:51:f8:ab:62:c8:1f:15:f8:23:47:97:ec:
3f:90:ca:eb:85:73:20:a2:15:30:26:c7:77:9b:d0:
7e:d4:dd:17:1b:55:43:b2:7d:f5:eb:3e:55:06:fa:
bd:36:4b:bf:35:7b:58:d1:d2:50:0e:46:df:30:68:
94:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AD:46:70:7E:A6:F6:16:37:F4:94:74:24:7A:A5:A3:94:6B:B6:7E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/RK1GcH6m9hY39JR0JHqlo5Rrtn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.118.0/23
139.28.99.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:79:72:13:08:20:ad:cb:40:13:2e:38:3e:43:6c:db:ae:98:
10:d8:ec:1c:c8:16:d6:2f:02:54:fa:88:a8:2b:2c:ae:75:c1:
5f:20:96:22:ee:c5:bf:11:26:b0:ce:8f:7e:6c:a1:37:91:c7:
ad:f7:82:04:2e:1a:ad:7a:0a:da:b6:dc:ef:76:ef:1c:f1:49:
68:7b:8a:be:3f:eb:94:54:c0:27:06:0c:01:8e:7c:bb:31:a6:
fb:76:64:c9:b2:14:8d:09:ca:d8:22:ae:53:a0:ad:19:3e:e5:
52:b0:0b:ab:52:e9:68:dc:9a:42:86:8e:37:ba:30:ec:31:aa:
0a:9b:26:0c:e7:9c:77:51:b2:3f:42:51:28:c5:36:88:02:42:
7c:58:d6:cf:b9:fe:4b:7c:46:77:bf:61:7d:97:14:d8:03:0a:
97:25:3d:d9:ab:57:ff:44:b5:07:67:33:0d:ad:09:f6:f8:ac:
a1:05:e1:e2:8c:3f:78:e2:61:19:fc:a9:c3:e6:67:41:db:0f:
60:ea:36:73:47:89:1a:c7:8b:00:48:2f:ad:e7:d9:96:c2:be:
68:1c:bf:0c:17:b9:50:37:be:8a:31:9b:1c:38:f1:b6:36:a6:
b1:55:cc:5a:af:e0:cf:5a:fb:a6:1f:77:b7:01:af:ae:bd:17:
2b:1c:ee:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:43:40 2025 by rpki-client