Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/nxwl4psj0ZeUsfjLgqXGlryR_84.roa
File: nxwl4psj0ZeUsfjLgqXGlryR_84.roa (raw, json)
Hash identifier: V1Lgl4QJ6FifoZAOxyZaoWJeRw45hAvPFwT3/eP0Ph4=
Subject key identifier: 9F:1C:25:E2:9B:23:D1:97:94:B1:F8:CB:82:A5:C6:96:BC:91:FF:CE
Certificate issuer: /CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Certificate serial: 0196337AFC2277F5F49A62432056E3FE3BBD
Authority key identifier: 95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/nxwl4psj0ZeUsfjLgqXGlryR_84.roa
Signing time: Mon 14 Apr 2025 08:46:59 +0000
ROA not before: Mon 14 Apr 2025 08:46:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 45.139.76.0/24 maxlen: 24
45.139.77.0/24 maxlen: 24
45.139.78.0/24 maxlen: 24
45.139.79.0/24 maxlen: 24
80.248.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:7a:fc:22:77:f5:f4:9a:62:43:20:56:e3:fe:3b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95923420ccfee038cdcaeb4392310a0598af7a3e
Validity
Not Before: Apr 14 08:46:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f1c25e29b23d19794b1f8cb82a5c696bc91ffce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9d:6e:77:b2:82:22:57:ba:7a:22:72:46:6e:
48:03:8b:f1:2a:63:7c:53:30:15:11:38:0f:4e:e5:
ee:ad:0b:9d:e3:bb:a7:cc:af:3c:4c:b8:8c:e0:c6:
cb:21:93:42:a7:2f:4d:16:dd:de:fb:85:41:e1:05:
7b:31:c1:98:27:06:40:2f:cf:67:c4:13:a9:21:b2:
13:d2:74:c0:fd:64:05:22:89:fc:21:b8:67:ed:e8:
26:09:1a:8b:03:cc:42:b6:e3:30:cf:e3:6c:d9:7f:
68:c1:93:c5:33:ca:d3:5c:ae:70:9e:de:a4:70:8b:
ac:3b:21:8f:11:49:d8:de:44:24:50:a0:25:c6:e1:
1b:cf:84:8f:5b:20:6c:2a:06:a2:75:96:64:bb:02:
c3:df:69:26:74:e9:7c:73:3a:41:cc:7c:11:03:2d:
59:21:73:e7:37:0e:fb:40:1c:3e:e5:63:6e:1d:8b:
50:7f:2c:be:6c:69:7f:ad:ad:f6:f1:a6:90:d1:8b:
93:12:b5:e1:7e:0d:cc:19:d0:7d:66:25:c1:57:b3:
7e:2e:ec:4f:1b:59:d0:c2:70:72:82:3e:40:e7:4f:
9c:55:b9:f8:28:52:10:4a:3a:16:00:f1:88:80:25:
8c:c6:f7:36:4c:03:94:bf:2c:f6:f5:2d:e9:fb:6d:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1C:25:E2:9B:23:D1:97:94:B1:F8:CB:82:A5:C6:96:BC:91:FF:CE
X509v3 Authority Key Identifier:
keyid:95:92:34:20:CC:FE:E0:38:CD:CA:EB:43:92:31:0A:05:98:AF:7A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lZI0IMz-4DjNyutDkjEKBZivej4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/nxwl4psj0ZeUsfjLgqXGlryR_84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b80405-d19b-4e0f-ac37-5200fc16ff8c/1/lZI0IMz-4DjNyutDkjEKBZivej4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.76.0/22
80.248.60.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9b:7c:5f:4c:b9:af:6f:cd:a5:d9:4b:55:da:70:f6:ec:37:
f6:d0:49:0d:85:7a:cc:a0:f7:bd:2e:09:05:90:8c:e7:fc:6d:
ae:50:1f:48:e8:60:6c:7e:8e:88:b8:a0:ff:9f:6e:91:a3:92:
ba:e7:26:7e:6b:d6:2a:e7:df:1c:ee:48:e6:fc:ce:fb:86:cf:
cc:86:1d:1a:c4:61:e0:58:60:a3:f5:25:2c:c2:91:7b:dc:c2:
6e:94:36:1c:e8:3b:0e:6a:c2:bb:aa:55:4b:8a:34:76:36:e8:
59:c7:1e:5c:72:40:73:53:9e:8f:0d:6c:a0:73:bf:24:8d:4b:
3c:5e:1e:a7:a3:2c:3a:2e:67:0b:45:7a:04:dd:5b:d6:55:db:
f6:60:78:bc:2f:ae:28:a0:35:2d:a7:2a:1a:34:e8:5a:46:34:
cf:c6:6c:5c:02:17:57:dc:1f:13:89:a7:4d:cb:45:a7:00:7e:
cb:0b:12:29:70:ec:a7:7a:4c:19:74:d2:45:68:b2:8b:5a:56:
13:85:21:e1:9d:7c:96:7a:75:a6:f1:c3:69:7d:6e:0c:88:c3:
31:b6:17:ec:1d:75:4f:66:02:a4:28:bc:d8:42:ab:af:ae:42:
5c:3c:8f:e0:1c:02:ee:e7:90:8a:10:21:d4:f4:bf:ad:2a:1c:
5e:c3:42:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:47:56 2025 by rpki-client