Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/7DhaaEuOtOm2YkH-T6_b3X16mQE.roa
File: 7DhaaEuOtOm2YkH-T6_b3X16mQE.roa (raw, json)
Hash identifier: brxCGHC3UPKZvLFobxYv0EMKJ38nxnYf9OdApkFjBd0=
Subject key identifier: EC:38:5A:68:4B:8E:B4:E9:B6:62:41:FE:4F:AF:DB:DD:7D:7A:99:01
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 0196906AF42D66EDBCFC282C286C54D52D88
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/7DhaaEuOtOm2YkH-T6_b3X16mQE.roa
Signing time: Fri 02 May 2025 09:54:10 +0000
ROA not before: Fri 02 May 2025 09:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213640
IP address blocks: 45.155.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:6a:f4:2d:66:ed:bc:fc:28:2c:28:6c:54:d5:2d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: May 2 09:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec385a684b8eb4e9b66241fe4fafdbdd7d7a9901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:07:6f:d5:15:83:72:6f:5d:4f:d3:1b:83:0b:
64:c3:19:e3:80:4c:71:10:da:8b:e1:1e:41:15:8a:
c0:94:b3:61:33:29:c6:1a:01:a5:9e:35:b9:b7:68:
7d:16:50:69:fc:15:92:d6:b3:91:ad:8c:84:25:fe:
f0:58:bb:e0:f6:6a:66:72:eb:e7:95:b1:7e:86:0c:
bc:35:d7:79:d2:c3:b2:6d:79:c3:5d:ec:2f:ed:5a:
4f:40:e0:e2:f7:ea:40:bc:db:b9:ed:e0:e8:bd:f8:
29:fa:5b:9a:fe:c6:43:79:fa:37:3e:8c:ee:40:d4:
31:be:0b:73:15:e2:ee:a5:64:3d:c5:49:10:31:f4:
d6:70:69:8e:e3:67:95:49:3a:3c:c5:5b:6c:fb:8d:
8d:90:8f:10:de:f5:5b:e1:a7:fa:2c:df:e7:b3:a7:
34:36:cb:ef:39:20:72:5e:7c:47:d0:58:d3:95:31:
32:73:4b:97:e6:d4:44:86:8d:34:fc:df:8b:2e:71:
b7:57:4c:b6:72:4a:2e:32:5e:78:62:d6:51:6d:3a:
9c:33:41:f6:2d:d0:7d:18:b0:7c:14:81:15:91:63:
39:f3:79:8f:4a:40:67:5b:e3:2e:dc:09:14:33:80:
4c:a4:0f:15:18:cd:40:1f:87:3f:bf:ed:e0:e0:60:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:38:5A:68:4B:8E:B4:E9:B6:62:41:FE:4F:AF:DB:DD:7D:7A:99:01
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/7DhaaEuOtOm2YkH-T6_b3X16mQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.126.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6c:66:f8:a5:b5:94:1e:fc:59:44:3f:3b:d0:e4:d0:50:0e:
31:27:bd:37:8c:5b:47:58:f5:48:4a:aa:be:a7:a2:2b:fe:1c:
f3:f1:e5:db:6a:61:a4:b6:67:c6:8b:11:75:63:a3:e6:3b:4e:
52:31:0e:21:ff:e1:57:c6:3b:7c:ea:0a:e8:2e:93:38:0a:f4:
05:86:de:c3:29:2c:7d:82:96:e2:e2:00:ee:f5:1b:c5:8a:fd:
68:9a:2e:c1:22:3f:6d:ec:a6:e7:b9:3b:45:40:5d:74:1c:ae:
c1:cb:15:e0:ae:d3:8c:43:2c:5c:8b:bd:3b:72:14:7e:f4:0a:
a8:cc:07:66:34:2c:b4:24:5c:3e:0e:f6:79:c5:79:c3:ca:85:
9f:9f:c8:aa:9e:53:2b:e4:24:ca:c3:98:64:5e:0b:a2:4f:45:
8d:5f:1e:a3:1c:eb:f6:26:15:00:5c:b0:fa:5b:34:ba:1c:cf:
ca:99:5f:07:87:88:a6:ba:fa:e1:0b:40:0d:04:a8:9b:85:65:
97:12:ee:4b:7a:10:a7:90:7c:6a:7d:b5:51:15:cf:8d:d3:25:
ac:8f:be:22:7c:54:ef:0f:6c:e7:cc:a2:19:4f:46:9d:b0:6d:
c5:08:c0:b1:4e:66:a2:8a:b4:99:21:6b:dc:70:5c:84:8a:c6:
7d:d5:28:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:31:34 2025 by rpki-client