Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/XI623dsCQno6qF3qQmT7tBPRYL0.roa
File: XI623dsCQno6qF3qQmT7tBPRYL0.roa (raw, json)
Hash identifier: 68h6NdWczDm9jsCruyHJWBo3tYdsQcqc0/iou/1F0NA=
Subject key identifier: 5C:8E:B6:DD:DB:02:42:7A:3A:A8:5D:EA:42:64:FB:B4:13:D1:60:BD
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0196354951EEB9F7538DC7DEDB685A629DCD
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/XI623dsCQno6qF3qQmT7tBPRYL0.roa
Signing time: Mon 14 Apr 2025 17:11:59 +0000
ROA not before: Mon 14 Apr 2025 17:11:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29491
IP address blocks: 45.152.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:49:51:ee:b9:f7:53:8d:c7:de:db:68:5a:62:9d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Apr 14 17:11:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c8eb6dddb02427a3aa85dea4264fbb413d160bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9a:c7:ce:b7:b1:ef:3b:89:2c:8c:48:ac:72:
61:85:f0:2d:c0:07:e7:9d:ee:37:02:95:45:48:2c:
05:27:30:f4:ab:72:8c:06:79:d9:73:58:f0:14:67:
08:53:40:0e:8c:fc:5a:7a:f0:70:99:ce:bd:7e:bb:
8e:e0:56:b5:2a:ce:c2:8c:05:1f:e8:b5:07:2a:e0:
bd:05:5c:a2:99:5f:83:d2:f0:62:8a:4f:2d:19:e0:
d4:84:f4:03:76:66:63:6d:76:f5:76:f7:f9:cf:f8:
ee:38:c5:d0:a3:ad:7d:3e:78:62:e6:59:75:74:c8:
02:3a:67:f5:9a:14:a9:5b:23:36:8b:24:0d:ea:0c:
3c:57:4d:a2:67:b3:34:10:93:d4:e2:e7:2b:d9:a2:
88:08:e5:e2:a8:44:6d:c7:1a:4c:e5:08:96:ee:0c:
f3:92:bb:fd:43:92:1a:f5:87:02:46:c9:65:4e:23:
94:1d:11:14:e4:ee:50:74:2c:ed:65:16:46:7a:74:
30:d2:e7:6f:2e:94:80:ae:2f:8e:46:71:fb:e3:41:
10:2f:94:fb:90:f1:e5:3d:99:d0:aa:91:28:8b:a9:
7b:03:0d:f4:26:85:de:b7:d3:d9:e9:d2:4e:bf:75:
fa:8f:35:d8:0e:a9:ae:dc:3c:60:ef:1d:7e:4f:74:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8E:B6:DD:DB:02:42:7A:3A:A8:5D:EA:42:64:FB:B4:13:D1:60:BD
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/XI623dsCQno6qF3qQmT7tBPRYL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:fa:9b:6b:42:46:6f:d3:d3:36:17:35:08:46:a7:eb:4c:17:
6c:ca:84:85:4e:81:5b:97:7f:a2:2b:e1:f9:5d:c4:87:0d:93:
b3:ce:47:83:a7:4d:72:67:02:21:8c:46:d2:b7:11:7b:9c:3c:
3e:97:eb:6a:d1:48:51:5b:5c:28:de:95:7f:a4:59:8e:35:37:
53:4d:6f:9b:ff:04:fa:c7:18:9c:e7:89:6f:eb:02:2d:80:48:
6f:2a:f4:d1:cf:03:f3:c2:7c:c1:a9:cc:50:9c:5d:b2:82:30:
48:c4:d3:fa:3d:d0:fb:85:32:a8:f8:16:22:4c:cc:94:3f:e4:
2f:7f:10:cb:c3:3a:81:32:17:75:2a:31:c2:35:9a:67:a7:5c:
ae:94:06:cc:c8:7f:bc:ab:de:a6:bc:d3:03:0a:27:55:29:59:
eb:81:1f:fb:e5:52:9c:ac:99:02:92:65:7e:f9:29:6c:de:43:
e4:ba:74:5c:27:fa:fe:26:a9:d8:5c:d4:f2:72:aa:2f:1f:0f:
51:9a:4c:d6:4f:22:24:7a:93:01:de:4b:81:66:7c:f0:9c:99:
a2:c3:28:1f:31:02:f6:86:d1:9c:88:af:15:b0:1d:95:72:a6:
55:26:b7:c9:83:1e:a4:d6:4d:5f:45:c4:5c:91:a1:9b:a9:91:
c2:10:91:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:02:24 2025 by rpki-client