Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-vtB9IyESSZ4JXtgOTZwDpHgeFY.roa
File: 1-vtB9IyESSZ4JXtgOTZwDpHgeFY.roa (raw, json)
Hash identifier: 9wYPnjnUfQYRQTKP80V0NoBAc3lD5MvRgHNjl+VBChk=
Subject key identifier: FA:FB:41:F4:8C:84:49:26:78:25:7B:60:39:36:70:0E:91:E0:78:56
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019662AE46A5A6A83166A7CECA611F4A6515
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-vtB9IyESSZ4JXtgOTZwDpHgeFY.roa
Signing time: Wed 23 Apr 2025 12:45:10 +0000
ROA not before: Wed 23 Apr 2025 12:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 142299
IP address blocks: 45.83.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:62:ae:46:a5:a6:a8:31:66:a7:ce:ca:61:1f:4a:65:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 23 12:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fafb41f48c84492678257b603936700e91e07856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:2d:0d:4b:c7:04:c4:7a:c8:be:59:87:ed:
85:56:81:39:0f:e5:a6:e7:d7:96:2e:d6:b6:fa:70:
7a:61:ee:ba:96:ce:a0:ae:7a:78:b5:fc:ad:ec:5e:
21:05:74:b1:7a:5b:0a:93:38:e4:82:5c:9f:b2:96:
a7:d1:29:e1:a4:b7:f2:dc:db:32:bd:a9:51:10:c7:
e1:91:1a:c6:bb:5e:ee:8f:66:b5:6a:42:f7:56:81:
71:a4:20:4b:4e:99:40:31:18:74:84:8a:cd:c0:c7:
16:43:f9:16:db:5d:2f:a5:1a:1b:f4:91:2a:e7:05:
0c:30:ee:f8:a9:f1:c7:ff:91:be:93:96:1e:25:69:
83:9d:1d:0d:1a:44:3b:f9:fb:b8:6e:f5:4d:88:0c:
f2:c4:14:58:d1:87:5d:29:eb:91:13:d5:9f:c2:8b:
67:25:cf:51:d4:32:7a:ed:f8:f3:ff:b0:80:d2:05:
6a:58:c9:66:11:3b:76:df:f9:ff:4e:2a:44:48:28:
d8:84:46:26:f1:7a:c1:55:56:66:e9:e1:f7:e1:b0:
94:45:52:fa:ca:52:20:4f:c5:3f:8d:20:7c:60:ed:
1e:92:a6:0a:22:d5:45:48:8c:62:cb:ab:07:75:6a:
0c:66:d4:8c:9a:0e:e3:bc:6d:65:c0:18:47:2e:f4:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FB:41:F4:8C:84:49:26:78:25:7B:60:39:36:70:0E:91:E0:78:56
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/1-vtB9IyESSZ4JXtgOTZwDpHgeFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.207.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5c:ee:8d:72:55:4c:d9:8a:93:2e:02:52:21:2d:ec:a7:16:
92:bb:97:ba:5e:13:40:c8:b9:6d:32:45:c5:4b:ff:25:3f:1e:
dd:d6:e4:e3:0e:5f:1e:e9:9c:ee:62:bd:0e:cd:3a:26:c3:e3:
88:44:52:3e:54:02:17:87:3b:a3:c6:11:8f:bc:61:13:37:3c:
fe:67:e6:cf:2e:e7:f8:28:a7:73:01:24:f2:fd:7e:74:63:87:
ea:44:0c:20:a3:c3:03:34:3d:bf:03:56:57:61:f3:04:36:95:
73:9d:78:64:69:53:1e:3b:78:75:94:d8:02:0c:46:b4:2c:49:
69:fa:1f:10:a8:a5:80:28:0f:e6:9e:44:cb:46:6e:48:8c:9e:
b5:00:1f:c0:e2:1a:48:ef:ee:98:41:1c:6f:38:21:5c:88:5a:
32:76:be:5c:66:12:fa:08:f2:05:a8:70:f7:99:31:33:89:22:
00:d1:10:aa:90:74:49:cd:39:3a:35:f5:e2:df:6b:cb:92:5b:
6a:7e:f7:a3:21:68:8d:20:0b:ec:09:67:f5:fd:b5:67:6a:b5:
06:df:b1:ec:8f:58:d2:de:8e:fe:bd:4d:c9:7d:64:41:d0:a7:
a3:20:5b:ba:c3:72:d4:d7:f1:cd:5a:f1:62:a9:48:95:86:e6:
56:7f:ce:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:06:45 2025 by rpki-client