Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/MPrLx5sSj7rjWEahBV9GsVlq3vg.roa
File: MPrLx5sSj7rjWEahBV9GsVlq3vg.roa (raw, json)
Hash identifier: rqrkflXztkr48UObtV4s/v/lq8yd8+kRq14Y9J+smmw=
Subject key identifier: 30:FA:CB:C7:9B:12:8F:BA:E3:58:46:A1:05:5F:46:B1:59:6A:DE:F8
Certificate issuer: /CN=41f282cc1c07697ff5b5190c714393d542406d43
Certificate serial: 01968B4003FC42A33F94C21737354979CAB5
Authority key identifier: 41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/MPrLx5sSj7rjWEahBV9GsVlq3vg.roa
Signing time: Thu 01 May 2025 09:49:10 +0000
ROA not before: Thu 01 May 2025 09:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207054
IP address blocks: 45.90.168.0/22 maxlen: 22
45.90.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:40:03:fc:42:a3:3f:94:c2:17:37:35:49:79:ca:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f282cc1c07697ff5b5190c714393d542406d43
Validity
Not Before: May 1 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30facbc79b128fbae35846a1055f46b1596adef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:a9:90:c1:dd:59:6f:a5:20:aa:b9:fb:7d:
a2:a4:c6:5d:f3:d3:5e:34:d6:6c:aa:1c:80:48:43:
dd:61:46:9a:6c:e8:c8:1f:7f:39:16:65:3f:24:c6:
01:b9:b6:83:19:e4:03:b9:b7:84:b7:cd:f9:ce:c0:
ff:6d:b7:69:8d:4a:f2:7f:46:3d:8c:9d:a5:19:09:
6b:1f:78:a6:51:df:64:d4:82:0a:2e:6d:3f:54:5f:
ae:53:c6:a7:22:4d:51:87:44:b5:41:14:40:38:4d:
3f:7e:1d:46:d0:05:81:49:d5:35:89:76:85:f0:2f:
eb:64:b9:e2:87:4d:c0:54:1f:cc:12:fb:94:dd:eb:
57:d9:a7:bc:ee:97:5e:21:11:58:c5:2b:b9:bf:9e:
db:f7:14:18:e8:39:cd:13:83:fa:a7:4f:16:49:1d:
a0:d5:cd:4f:90:a7:08:e0:78:e4:b7:3c:cf:95:60:
3a:c3:06:ec:d5:ab:91:18:67:85:3e:12:d7:c5:41:
7d:7d:d6:15:49:f2:73:9d:18:71:2c:b0:31:6c:c5:
fc:7a:77:6c:4b:05:e1:51:90:f6:a4:dc:eb:20:55:
69:c8:c4:8e:7a:16:83:5f:c2:45:8a:86:93:5d:b3:
34:9d:a5:c8:6c:93:74:0c:c8:18:7f:48:0b:4c:9f:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FA:CB:C7:9B:12:8F:BA:E3:58:46:A1:05:5F:46:B1:59:6A:DE:F8
X509v3 Authority Key Identifier:
keyid:41:F2:82:CC:1C:07:69:7F:F5:B5:19:0C:71:43:93:D5:42:40:6D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfKCzBwHaX_1tRkMcUOT1UJAbUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/MPrLx5sSj7rjWEahBV9GsVlq3vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/aeae95-40bd-4aad-ab14-e3eecf9dfaad/1/QfKCzBwHaX_1tRkMcUOT1UJAbUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.168.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:49:98:dd:25:90:72:c6:69:f8:14:71:29:94:c9:e7:64:3b:
f6:09:11:6b:58:6e:d3:1e:11:e0:98:e5:f6:d4:38:26:33:23:
d7:7b:a0:4e:9c:cd:c5:f7:63:6b:12:f7:30:fa:0d:84:66:b5:
ec:c8:9d:18:7e:a7:11:e2:b9:03:d4:d2:6c:c2:3a:a3:9f:58:
5b:cd:06:84:54:ed:eb:0a:a9:cf:bc:ea:dc:08:4a:80:94:ad:
85:a6:79:c6:6b:29:6c:4d:8e:dc:fd:e5:62:a7:73:e0:0a:a9:
bf:0e:6c:13:43:c2:00:50:ec:59:5b:c7:17:c8:c1:a3:0f:c7:
4b:8c:c7:13:e4:3f:a4:e7:19:c8:20:8f:e7:30:c5:20:11:1d:
d1:ad:f7:85:ec:87:fc:1b:01:58:aa:1f:16:a2:a5:4c:f8:e3:
f9:41:90:b6:b7:c5:72:41:b3:ea:a7:7e:97:6b:34:6a:4d:4f:
dd:93:08:50:38:61:3f:e5:2f:ae:07:49:b9:80:f7:f5:61:ae:
6c:17:d5:0a:05:7d:a8:62:ff:01:58:d7:c4:05:29:8e:45:67:
79:cd:bd:1d:77:98:7b:26:30:7f:1f:18:03:42:f8:dc:e0:e2:
dd:0f:9f:ed:89:79:8e:df:89:1a:e8:24:4e:cf:bd:8d:97:05:
51:91:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:19:11 2025 by rpki-client