Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/zFUuUqldPrww63cIqo-XRanNcj0.roa
File: zFUuUqldPrww63cIqo-XRanNcj0.roa (raw, json)
Hash identifier: HhvvF7xBmpx9/nrDHNfcu7tTXTmL5HjPzqI7CeF2/lQ=
Subject key identifier: CC:55:2E:52:A9:5D:3E:BC:30:EB:77:08:AA:8F:97:45:A9:CD:72:3D
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 01961AD1FE85841C01B6B9B6ED6AAF8733A7
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/zFUuUqldPrww63cIqo-XRanNcj0.roa
Signing time: Wed 09 Apr 2025 13:51:31 +0000
ROA not before: Wed 09 Apr 2025 13:51:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 45.128.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:d1:fe:85:84:1c:01:b6:b9:b6:ed:6a:af:87:33:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Apr 9 13:51:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc552e52a95d3ebc30eb7708aa8f9745a9cd723d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:16:4a:7b:49:83:e2:f6:ea:81:8e:31:5d:
22:43:4a:14:7a:cb:9b:17:86:7f:6e:74:8e:45:9f:
c1:b8:01:75:cd:91:e2:c7:70:94:1c:6e:b2:b4:4e:
a9:a4:89:a6:02:0a:26:09:1f:dd:d0:d1:78:53:08:
c5:22:37:79:2d:82:43:1a:9f:2d:fa:29:cf:0b:bc:
0f:17:3a:67:63:9c:33:0c:03:d8:4e:ba:b9:8f:9f:
12:87:d6:88:cf:4a:0c:a5:5c:1b:5e:d0:a6:46:2e:
fe:61:3a:dc:26:62:78:6c:1d:e5:46:6b:61:eb:2e:
26:0d:55:54:36:af:8e:8d:9b:08:8a:e2:4c:99:0f:
e9:37:2a:bc:fc:90:a2:07:a0:c3:ec:7a:27:58:55:
ee:e7:24:cc:45:c3:36:f0:a8:94:ff:b6:44:56:68:
de:5b:98:45:66:b5:0d:2b:cb:2f:b5:ca:ae:8e:c3:
c5:dd:8c:19:de:00:ae:52:b6:cd:27:82:c8:c2:d8:
72:84:25:bc:2b:e1:10:b0:a9:66:d2:a8:a9:88:67:
89:09:fb:11:ca:e3:d4:80:73:fc:85:a6:f4:c5:d3:
1b:3d:81:67:c0:68:3e:04:b1:b8:03:3e:fd:db:92:
e5:e9:4c:04:70:a3:1e:73:8c:06:9e:16:f7:03:e0:
89:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:2E:52:A9:5D:3E:BC:30:EB:77:08:AA:8F:97:45:A9:CD:72:3D
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/zFUuUqldPrww63cIqo-XRanNcj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:2d:3d:2f:77:2b:d1:30:94:10:24:a8:57:d0:1e:e7:88:45:
f0:71:86:aa:bd:16:9f:ec:e6:9f:78:1c:c7:35:8f:7b:80:d4:
4b:b3:c8:9e:2f:49:93:3b:4e:88:77:ba:71:3d:7a:9f:d2:30:
b7:2b:71:f7:d0:06:cf:01:f9:d5:1a:55:f1:49:bd:d8:43:57:
66:66:44:4d:c3:fb:67:1a:66:eb:1f:27:41:7f:0a:fc:d6:e8:
cc:70:b5:f4:1d:ea:04:3a:f3:0a:91:d5:ca:7e:5b:23:f7:0b:
78:55:f4:b5:46:35:83:5e:69:f8:8c:88:b9:39:cb:52:a8:48:
d5:9e:3c:3e:43:ef:ad:0a:10:a0:de:26:6c:27:28:f8:03:87:
11:62:d9:f0:86:0d:f0:9f:a8:29:49:bf:e6:56:1d:21:49:2b:
eb:18:bb:eb:71:9c:40:eb:17:52:46:f9:a1:e1:46:12:f2:89:
7a:44:c9:00:23:b9:4f:15:22:f4:27:02:3e:59:42:76:c2:91:
83:8a:0c:ea:2f:3c:d3:d7:47:dd:e4:8f:47:af:b7:22:48:76:
3c:c5:a6:b8:a7:c0:ec:f6:4b:1a:f7:9e:c6:7a:a5:4f:83:e6:
b4:78:3c:ca:12:a5:43:a9:14:f9:2d:d8:55:7a:a7:ac:a0:59:
56:0f:6a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:19 2025 by rpki-client