Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SOOVbHd5gYu2v0x209z_cGQCr2U.roa
File: SOOVbHd5gYu2v0x209z_cGQCr2U.roa (raw, json)
Hash identifier: C7kQ81CYBo0Oq99DP8IV8iemt8LVtCBJNDdI4WOwNuM=
Subject key identifier: 48:E3:95:6C:77:79:81:8B:B6:BF:4C:76:D3:DC:FF:70:64:02:AF:65
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 0196633B436D99B2E0B6C289D161689BDD84
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SOOVbHd5gYu2v0x209z_cGQCr2U.roa
Signing time: Wed 23 Apr 2025 15:19:10 +0000
ROA not before: Wed 23 Apr 2025 15:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 45.123.145.0/24 maxlen: 24
2a0d:3900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:3b:43:6d:99:b2:e0:b6:c2:89:d1:61:68:9b:dd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Apr 23 15:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48e3956c7779818bb6bf4c76d3dcff706402af65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1c:19:96:d7:2c:a8:1d:cd:7c:75:19:c7:2f:
7d:73:c4:9f:75:f3:92:bc:70:37:b3:09:99:88:3a:
0b:27:78:90:97:51:e4:45:a9:02:0e:d9:d0:d9:90:
e3:5a:c3:e5:ba:c1:2a:c4:11:df:09:49:3d:f7:ca:
72:8c:1c:53:63:72:7f:ba:75:8f:80:1d:fb:2a:5d:
8f:9c:87:07:c5:77:10:6c:51:69:a3:0d:de:31:35:
b1:e6:06:6a:e5:b4:77:52:51:5a:3d:0a:d8:49:58:
e6:1c:3c:96:c3:29:ed:7d:0f:90:e4:06:bd:d3:06:
17:72:17:62:12:a4:ad:b2:14:de:e2:05:a1:f7:5d:
1b:ff:00:5e:43:0c:cd:6b:05:61:01:e0:4f:0c:db:
10:d1:ca:90:f0:9f:4b:a6:fe:8b:ce:9c:02:83:c8:
8b:b7:45:db:52:5a:7e:9b:b3:f6:a9:97:06:11:d1:
45:4f:98:18:60:9c:b7:4e:ed:ed:4e:b3:57:69:26:
23:13:c5:14:45:f4:3e:65:1f:2c:70:97:96:87:81:
27:62:55:6b:5f:97:f0:8e:1e:06:65:c2:a6:98:4a:
90:4d:d8:17:78:c0:83:9b:dd:37:4d:be:b9:00:bc:
43:7a:44:f5:40:9b:f7:99:6b:20:71:61:27:f8:4b:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E3:95:6C:77:79:81:8B:B6:BF:4C:76:D3:DC:FF:70:64:02:AF:65
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/SOOVbHd5gYu2v0x209z_cGQCr2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.123.145.0/24
IPv6:
2a0d:3900::/29
Signature Algorithm: sha256WithRSAEncryption
94:f4:1c:ee:77:30:69:5a:5b:c8:1a:66:29:4a:3e:e5:cf:e4:
f6:74:b1:98:f6:c3:a0:53:bb:4b:22:d8:33:c3:b4:7d:f6:f9:
09:e3:29:c7:c0:86:83:3a:29:37:ad:67:9d:15:cf:12:be:fa:
85:a1:91:de:af:c5:5d:fc:07:42:b3:97:19:97:25:f2:ff:b5:
96:d7:a5:aa:5d:49:6a:43:2d:fa:ec:52:15:9d:c8:f7:1e:96:
a0:f6:57:08:eb:bc:c6:4b:9d:3a:65:a1:d3:79:78:f0:41:85:
83:77:81:56:fb:2a:65:a3:bb:6a:f6:4c:16:da:9c:c5:43:0c:
6e:63:01:20:b1:a4:6f:dc:70:bb:fa:64:18:d1:38:c1:d6:73:
6e:ef:b5:ae:73:57:b9:54:5b:25:95:fa:4a:3c:3f:b1:36:c8:
d9:79:ed:8d:24:dc:f3:a7:b7:60:ac:28:25:d4:d8:53:f5:0f:
aa:9d:41:16:e4:0c:ee:d6:a5:b1:68:0c:27:aa:84:7b:31:96:
9c:d4:e3:cf:c9:e4:23:dd:56:72:db:c5:97:07:a7:c6:ab:a6:
fc:01:c2:d8:56:33:93:0b:89:c7:3f:0f:72:5f:ef:33:43:b6:
43:57:cc:1c:2a:b9:03:c9:38:d1:10:d7:2d:6e:a6:1e:6d:b0:
a9:8f:dd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:33:06 2025 by rpki-client