Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vWa7EN_UyOf7Pk1BfHsz90SpKv0.roa
File: vWa7EN_UyOf7Pk1BfHsz90SpKv0.roa (raw, json)
Hash identifier: q5bRA4U46mSwBS3tyf7ZRy/vl43aqVKRO3tUNl8cyYU=
Subject key identifier: BD:66:BB:10:DF:D4:C8:E7:FB:3E:4D:41:7C:7B:33:F7:44:A9:2A:FD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0196C95DD1CCD46AB5980CAE0C724A0687E9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vWa7EN_UyOf7Pk1BfHsz90SpKv0.roa
Signing time: Tue 13 May 2025 11:18:10 +0000
ROA not before: Tue 13 May 2025 11:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44486
IP address blocks: 45.131.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:5d:d1:cc:d4:6a:b5:98:0c:ae:0c:72:4a:06:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 13 11:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd66bb10dfd4c8e7fb3e4d417c7b33f744a92afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3a:52:14:8f:83:9d:9c:3a:0e:a8:83:6a:84:
ee:34:69:5d:99:5f:b1:51:9f:3e:06:ca:82:23:7f:
57:d4:ef:83:7e:a0:da:17:a9:a5:c3:dc:83:58:ca:
b8:f9:3d:64:28:0c:20:29:01:2d:63:03:f1:79:2b:
85:a7:d9:7e:84:e2:92:ff:eb:e5:83:9f:7f:6a:56:
9e:2b:96:31:35:5c:9e:71:7d:34:b3:e1:3d:7e:78:
32:c2:5c:18:d6:95:14:89:f9:51:36:d0:2b:bf:23:
d9:37:6d:a4:af:87:8e:37:0b:5b:aa:26:a5:e2:bb:
c1:50:a0:8f:44:31:a8:09:2e:db:6b:fb:68:45:de:
44:b8:d7:54:1e:e2:6f:b5:c4:bf:f0:24:0f:9b:62:
4c:50:46:bc:74:b7:b3:8e:1c:31:6d:87:2f:1d:af:
bf:f4:ef:17:c4:e5:82:ef:d4:61:37:60:92:6a:fb:
73:37:b5:28:51:cd:40:25:63:55:9c:a1:5a:78:2f:
14:cb:fd:16:ca:6e:23:ec:59:ca:6c:a9:7c:6b:39:
34:44:3c:b6:25:47:a2:41:af:43:7c:05:df:e3:81:
25:8b:ef:8b:52:3b:54:8a:1f:92:02:07:23:08:1d:
35:34:f0:ae:5b:5b:74:1a:cc:6e:db:1a:73:33:9f:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:66:BB:10:DF:D4:C8:E7:FB:3E:4D:41:7C:7B:33:F7:44:A9:2A:FD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vWa7EN_UyOf7Pk1BfHsz90SpKv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ac:f0:a4:d3:25:5e:b4:60:5b:30:b0:38:26:6c:2f:65:bb:
a0:76:ca:ff:fa:6c:2b:7e:e7:75:d8:f8:c2:4b:7b:c0:83:24:
a4:f6:b4:8a:1c:10:9c:42:5d:66:bd:00:3b:f0:e1:bf:f1:31:
22:b1:21:03:76:3b:fc:a3:7c:73:22:c1:a3:7b:b2:08:52:58:
2c:65:3c:31:55:28:72:16:96:13:90:59:21:58:7a:40:f5:07:
fd:05:e1:02:d9:19:43:42:76:be:51:27:15:a5:c1:4d:eb:1e:
d0:a8:20:73:04:29:82:ee:25:9e:c7:ca:ab:7d:84:97:70:dd:
72:1d:93:a8:f6:07:59:12:8c:6b:95:3c:e8:3f:59:85:1d:67:
e4:18:02:25:69:3e:60:c8:20:f9:37:14:3b:f1:95:27:43:8e:
8d:aa:47:d3:f3:28:a8:cc:c8:a2:10:51:61:c1:dd:2a:26:0d:
7c:6e:f0:e7:16:09:74:60:91:ea:ad:c5:2d:3c:a2:b1:1a:35:
67:97:eb:ef:38:26:10:f5:94:1d:1a:8b:1f:be:bc:75:0d:bb:
b4:98:9d:28:6e:36:24:a2:83:f6:29:d9:e3:b4:ae:c7:52:2a:
6a:80:ce:e3:88:a2:17:01:4c:e6:c6:f5:44:5e:3f:57:7d:38:
a3:13:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 19:08:38 2025 by rpki-client