Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cmN_jwliFu8zuWYj1yrMYTRQxXQ.roa
File: cmN_jwliFu8zuWYj1yrMYTRQxXQ.roa (raw, json)
Hash identifier: ILK8ACo7qoQKSlb41heHxJgswIJv/3/U6NxoIpcsKAQ=
Subject key identifier: 72:63:7F:8F:09:62:16:EF:33:B9:66:23:D7:2A:CC:61:34:50:C5:74
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01967B8BEFA445B3D627CCC4FB4FEE6A49B8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cmN_jwliFu8zuWYj1yrMYTRQxXQ.roa
Signing time: Mon 28 Apr 2025 08:38:10 +0000
ROA not before: Mon 28 Apr 2025 08:38:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213790
IP address blocks: 45.146.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:8b:ef:a4:45:b3:d6:27:cc:c4:fb:4f:ee:6a:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 28 08:38:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72637f8f096216ef33b96623d72acc613450c574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:55:4e:58:21:a2:7b:20:d4:71:7c:03:19:
57:86:f2:bb:4e:8b:7d:9e:7b:73:0e:79:4e:56:ff:
b3:84:51:a8:9b:58:7c:7a:69:3d:5f:8c:dc:bf:1f:
17:f1:89:62:e3:bd:d7:18:18:f7:f9:5c:4d:9f:1f:
bb:0c:cb:9c:dd:97:3a:36:b2:7d:9c:23:4b:eb:e1:
79:03:b2:f2:ba:3c:6c:94:b1:8b:86:e4:7d:2c:b9:
45:78:25:b2:c9:47:6a:68:01:d4:69:ba:79:1e:69:
30:51:13:d4:25:3f:25:5f:12:61:e4:a2:70:02:dd:
73:d9:d9:b9:32:2b:6e:35:0e:da:8b:c7:e0:af:1a:
3d:c9:69:4f:3f:ef:c8:ad:cc:6a:61:56:f2:f5:dc:
c0:05:b6:45:c7:71:2c:09:9e:69:11:19:7f:fd:8c:
33:51:28:71:7a:f4:14:fb:2d:0e:9d:47:06:33:b1:
98:1b:20:b9:d2:5b:3c:48:34:de:6a:8a:1e:34:0c:
04:3f:1e:d6:e5:95:74:c2:91:58:9c:1f:2c:38:0e:
5d:ef:d7:96:60:71:a2:45:7c:cb:07:61:5a:b8:21:
20:5e:c0:d4:54:74:8c:2e:24:76:8c:99:24:1d:52:
60:8d:6f:ab:ba:90:66:2d:75:36:91:01:ea:09:62:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:63:7F:8F:09:62:16:EF:33:B9:66:23:D7:2A:CC:61:34:50:C5:74
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cmN_jwliFu8zuWYj1yrMYTRQxXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.130.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ad:0d:33:cf:ac:0b:ea:6f:ca:d6:fc:01:50:47:c7:4f:17:
ee:bd:2a:44:fe:0f:a6:03:3e:5d:c5:fb:e9:ca:0b:42:6c:f9:
9b:a4:69:29:88:03:86:b0:83:63:6d:88:b0:34:07:0a:5a:1c:
86:0b:c3:ad:48:20:43:c1:af:0f:a7:79:5c:c5:25:95:7b:da:
fd:8d:4f:5b:d3:46:7c:6a:97:11:d0:ea:b9:50:23:d2:36:81:
f2:ae:f1:36:bf:48:5f:18:e3:f7:56:21:ae:cf:77:92:38:a3:
8e:68:e0:d2:c4:82:7b:93:0b:31:04:aa:be:d3:e1:9f:8e:9e:
0b:bf:2b:cd:73:6d:7d:22:b0:b2:0a:29:78:d9:83:d4:96:b7:
ca:d9:ba:92:35:59:d2:3a:74:ef:c3:da:19:4a:50:ab:66:13:
7f:ff:33:0e:cc:82:af:bc:ff:90:d2:1f:76:d0:57:41:98:83:
5b:4a:8a:99:34:fb:7c:31:39:07:5d:9d:8e:63:6d:fa:dc:5a:
2d:2d:35:8e:f9:75:6a:78:1c:a6:6b:b0:4a:2a:e2:23:51:87:
61:be:48:95:9f:c1:21:9f:d3:43:ed:52:1b:c7:61:03:42:25:
95:67:e9:0c:fc:8c:dc:05:eb:d4:de:94:2a:ef:ad:8c:fe:e8:
ef:db:14:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:25:18 2025 by rpki-client