Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/9afYGMn0MXo12vWxONnA_EJex40.roa
File: 9afYGMn0MXo12vWxONnA_EJex40.roa (raw, json)
Hash identifier: xwH479WcvwH10cQAzYfUAmHWqafDbEvP/HGQkmQ08iY=
Subject key identifier: F5:A7:D8:18:C9:F4:31:7A:35:DA:F5:B1:38:D9:C0:FC:42:5E:C7:8D
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 0196E8A06F4C65D35E974B5D8F997824BE9D
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/9afYGMn0MXo12vWxONnA_EJex40.roa
Signing time: Mon 19 May 2025 12:59:10 +0000
ROA not before: Mon 19 May 2025 12:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208485
IP address blocks: 45.156.116.0/24 maxlen: 24
45.156.118.0/24 maxlen: 24
45.156.119.0/24 maxlen: 24
91.228.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e8:a0:6f:4c:65:d3:5e:97:4b:5d:8f:99:78:24:be:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: May 19 12:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5a7d818c9f4317a35daf5b138d9c0fc425ec78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:2e:eb:40:c1:17:35:72:44:42:e6:cc:b3:
36:a3:3a:3e:4f:3d:10:d8:ff:ad:91:0a:e0:36:ce:
8f:1c:e5:73:18:aa:2a:2d:1c:64:5f:95:ef:45:d8:
78:d5:ac:61:fa:62:4e:08:69:26:8d:1d:ff:c1:57:
a3:56:70:fb:59:99:9b:ff:83:13:ab:8d:59:5c:49:
6a:84:19:a6:8c:c3:8a:8e:b8:80:6f:0b:39:50:90:
73:29:37:4d:ce:57:96:77:0e:ea:cb:2d:86:59:6d:
de:c9:5a:9d:94:c1:92:09:e5:77:d7:69:9e:ac:4d:
15:27:8d:fc:3a:e5:c0:b6:48:a5:ed:9e:26:34:bc:
1a:10:aa:2b:05:fc:9a:b0:fe:3e:0f:d8:49:6f:b4:
a7:d3:15:d0:ed:75:80:73:9f:45:14:64:2e:4d:ae:
49:33:00:84:66:c1:6a:98:0d:ca:6a:99:f3:88:bb:
dc:16:73:60:b5:dc:ca:94:30:c2:ad:86:47:79:7c:
a4:e4:e5:fa:ae:b8:e4:02:5f:e4:e1:83:fe:a7:ba:
19:ba:c8:d9:a1:61:79:ac:96:fc:c7:a7:fe:79:6e:
b7:bc:70:aa:9f:ae:1a:12:cb:0a:2d:9c:41:16:ff:
54:40:85:12:d7:8e:bd:f9:30:af:0d:bb:57:f1:4d:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:D8:18:C9:F4:31:7A:35:DA:F5:B1:38:D9:C0:FC:42:5E:C7:8D
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/9afYGMn0MXo12vWxONnA_EJex40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.116.0/24
45.156.118.0/23
91.228.168.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3c:b6:ce:df:47:6c:d4:93:87:ea:5e:89:9c:c6:67:9a:4b:
28:2a:a1:b6:1f:ff:06:99:7c:57:f5:cf:88:9c:fa:ed:0b:42:
0a:bb:a2:0e:a1:0a:80:92:16:9a:fb:a3:68:a2:f0:0c:f0:fd:
46:e4:35:f9:48:a5:2c:35:78:04:1d:fa:b0:8d:5a:e0:d6:69:
9c:21:13:68:80:fb:be:50:f1:94:5c:c0:7e:29:87:8e:b2:59:
44:61:1f:a8:a5:cb:db:ef:52:a8:a9:03:a3:fe:62:61:08:fe:
d7:da:dd:a9:87:e5:29:07:8d:60:69:73:dc:b0:79:e1:8c:43:
c3:cc:f2:e1:26:f1:12:43:c4:20:b6:40:3e:96:e3:89:08:a2:
5a:25:14:cb:62:1f:23:ed:70:96:4e:69:83:1b:54:c5:58:0b:
7b:34:bb:6b:bf:97:2f:ad:06:65:36:32:b8:26:08:06:b5:e2:
29:50:00:4d:97:77:37:6a:80:cb:ee:14:c4:c3:1b:29:58:88:
91:b1:26:95:1d:f3:9f:d4:0d:78:a8:37:57:a9:6c:86:51:02:
bf:6f:12:d2:a8:ca:5a:38:05:7f:67:13:57:9d:f8:81:9b:d1:
43:07:78:4c:b2:a7:1f:1d:25:9b:3f:d4:d7:ce:05:69:02:91:
be:b2:bc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:21:19 2025 by rpki-client