Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/45r3E8lXNmQ_mV1cfWQBeqKySTQ.roa
File: 45r3E8lXNmQ_mV1cfWQBeqKySTQ.roa (raw, json)
Hash identifier: S7Ww3JFIGuW+D2qYBFjZcuGS8y5V5og2Fjmg94ZHRCo=
Subject key identifier: E3:9A:F7:13:C9:57:36:64:3F:99:5D:5C:7D:64:01:7A:A2:B2:49:34
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019643E6558CEF214719692D2DA1A228B9EB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/45r3E8lXNmQ_mV1cfWQBeqKySTQ.roa
Signing time: Thu 17 Apr 2025 13:18:10 +0000
ROA not before: Thu 17 Apr 2025 13:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42689
IP address blocks: 212.90.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:e6:55:8c:ef:21:47:19:69:2d:2d:a1:a2:28:b9:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 17 13:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e39af713c95736643f995d5c7d64017aa2b24934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:3a:7c:3b:50:4c:ef:35:33:d0:83:93:68:
2f:3f:09:95:57:2a:6d:08:df:e9:23:72:a7:da:c1:
32:30:19:c0:cd:d6:df:24:18:b3:8a:2e:ce:1b:09:
cd:06:0e:39:4e:d2:c4:49:15:5f:91:6f:a1:ae:1f:
df:06:65:00:bd:85:4d:f7:23:53:b8:67:2e:ff:e3:
e0:ef:3b:ef:4a:b6:d9:5d:d8:17:ad:08:e6:cc:ac:
1e:00:da:57:71:d3:42:6b:a2:f4:e1:1f:86:91:87:
da:9a:e5:fd:1b:35:52:18:f3:29:72:b0:1e:51:e4:
ab:d8:c7:33:d6:fc:13:99:69:fa:3c:00:32:9f:ca:
c0:e1:bb:56:b7:f0:85:00:b3:1a:ca:7f:2d:04:9a:
06:c2:79:61:30:50:92:29:47:40:83:2d:06:08:7e:
f2:81:7c:eb:94:4d:be:34:1b:33:be:a5:5b:c5:f0:
51:8c:35:da:b4:6e:b4:98:e4:d0:00:e5:8a:7d:25:
2e:3c:39:08:5a:a0:e4:1d:d1:65:75:33:3c:88:ef:
44:97:96:4a:60:51:04:cb:39:4d:e4:eb:d0:50:6a:
90:a2:5a:0d:b6:44:13:63:fd:be:d8:41:74:19:af:
b3:86:6f:68:37:81:40:cf:df:ae:86:79:ac:18:51:
63:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9A:F7:13:C9:57:36:64:3F:99:5D:5C:7D:64:01:7A:A2:B2:49:34
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/45r3E8lXNmQ_mV1cfWQBeqKySTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:9c:32:a5:9b:a8:d9:8d:e9:b9:b8:2e:26:19:39:02:a2:1b:
e5:3c:1a:7c:a0:72:9c:30:ed:b8:8c:90:c1:32:18:d3:11:da:
6e:2e:92:cd:e6:c9:b2:24:c1:c2:54:0d:d3:48:4f:51:70:83:
fe:94:4e:d8:75:93:3a:2c:fc:89:5f:2b:d5:25:c8:bf:96:8b:
81:46:87:a7:5f:3e:ef:4d:44:1e:e8:37:34:5c:fa:c4:12:44:
c5:75:9d:33:c5:87:b6:0b:28:d8:c6:24:14:9c:bc:c3:00:a0:
93:e2:a7:f3:b7:f5:6e:ea:26:21:2f:20:e0:82:4b:ef:4c:d7:
66:ea:31:2c:6b:af:5a:fd:58:72:5c:cd:0d:96:d5:31:dd:0e:
1a:48:8a:de:8d:4d:66:f1:40:b8:b7:16:b7:2d:6b:dc:0f:4d:
c9:42:b5:ed:a6:ec:67:76:9c:d9:34:29:ab:f7:47:36:18:6f:
ec:94:95:fb:a1:c0:7f:64:ba:56:42:4b:3f:42:d9:12:02:27:
6b:d7:8a:da:38:66:ff:fd:e8:69:da:82:3b:77:a3:6f:e3:2d:
f6:f3:28:c3:6b:87:75:67:ea:0f:a2:28:18:95:94:f9:ec:90:
78:df:e9:08:16:3a:5b:2c:b6:08:a0:fe:56:93:a5:85:21:df:
58:a4:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:49:10 2025 by rpki-client